This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/QWrzK8RWuSQghqCldb_6fzSJudQ.roa File: QWrzK8RWuSQghqCldb_6fzSJudQ.roa (raw, json) Hash identifier: QojBEqYBdik2hEDKGtROktHVNznRag8r5CcPDwvCnWg= Subject key identifier: 41:6A:F3:2B:C4:56:B9:24:20:86:A0:A5:75:BF:FA:7F:34:89:B9:D4 Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Certificate serial: 019B024EFD5E1DFF07391234FB5B9E051576 Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/QWrzK8RWuSQghqCldb_6fzSJudQ.roa Signing time: Tue 09 Dec 2025 08:51:29 +0000 ROA not before: Tue 09 Dec 2025 08:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55154 IP address blocks: 2a14:1040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:4e:fd:5e:1d:ff:07:39:12:34:fb:5b:9e:05:15:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Validity Not Before: Dec 9 08:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=416af32bc456b9242086a0a575bffa7f3489b9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:c3:b0:be:87:1c:56:ec:2d:b5:cd:38:e0: 0c:8b:ab:b2:cf:73:51:58:4c:fa:9a:ee:66:f6:e9: e4:f4:57:36:97:a9:55:1a:62:40:cb:01:1d:c0:06: 8b:21:1e:b5:12:1d:c4:42:16:02:55:50:14:0c:57: 30:f1:2d:27:e0:ad:56:b7:76:44:98:30:a7:7e:9c: 67:59:c5:75:ee:11:65:ff:85:d4:e2:51:a3:fb:f0: a2:ef:6b:25:70:89:1b:99:96:bb:6d:ed:a8:db:3f: 5c:d9:03:02:9c:cd:a9:35:eb:d6:6a:0c:16:1d:f0: 3a:1f:f7:2e:07:bb:c5:b9:95:33:7a:a8:8b:d4:f6: fb:9c:82:7e:e6:2b:b3:ea:ad:f1:37:3c:41:6c:79: 69:79:5a:4b:22:6f:13:74:a4:0c:6c:42:d7:d8:42: ec:77:4f:ed:c2:2c:77:37:d4:bc:b8:bb:ef:e4:b0: ff:f6:97:43:2e:1d:30:df:ef:2f:20:5d:64:df:77: c0:15:4a:b2:1d:35:b6:82:1e:ce:13:5e:28:3b:e3: fe:81:39:93:81:a3:3c:19:9c:de:ed:98:4e:76:db: b2:c8:28:d2:7c:07:c0:f7:08:10:c4:d5:f4:d1:02: fe:42:18:23:89:c8:c0:fc:b6:44:c5:7b:96:65:54: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6A:F3:2B:C4:56:B9:24:20:86:A0:A5:75:BF:FA:7F:34:89:B9:D4 X509v3 Authority Key Identifier: keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/QWrzK8RWuSQghqCldb_6fzSJudQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1040::/29 Signature Algorithm: sha256WithRSAEncryption 7a:2a:23:12:f8:d9:26:63:68:3d:38:77:0a:4e:15:f2:d9:81: b5:81:a2:da:c1:d8:cd:4c:97:1d:6e:aa:f6:c1:bd:25:97:ce: 33:ab:b5:c9:59:3c:e5:40:e0:c1:14:a1:e6:db:45:54:b7:26: 0f:6f:97:e6:63:51:05:e4:fb:34:79:1c:cb:26:a5:c3:55:49: 6e:4f:d4:f0:71:d9:b2:05:c1:6a:dc:9e:ca:0a:0e:ce:d6:80: 91:3a:38:10:d3:a8:ac:d5:5a:d9:51:82:2b:3e:f0:22:c7:55: 62:6b:9b:8f:dd:30:a3:4c:2e:f0:29:0b:a4:0a:2c:bd:b5:b6: b8:35:57:b4:95:60:af:f8:e0:69:2d:1f:bd:55:54:8b:ad:42: 05:3d:45:c7:b4:aa:e7:66:4b:17:cc:3d:49:85:37:f1:f3:fd: 5f:d2:0a:60:aa:58:ad:71:d8:1a:27:a9:86:6a:d9:a2:e5:86: 51:b3:21:f4:cc:6e:9a:fb:23:0f:7b:85:ff:ea:7d:b6:11:69: 93:95:b2:34:7a:22:85:5b:77:a9:3f:cf:cf:ac:e3:4c:da:e1: aa:42:0d:4e:97:9d:ac:5b:15:84:74:12:c2:93:93:07:97:41: c6:5f:49:80:8b:bd:f7:a0:37:ed:5f:63:c4:eb:da:a9:4a:56: 5d:3d:f2:7e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsCTv1eHf8HORI0+1ueBRV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi YmI1YWQwHhcNMjUxMjA5MDg1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTZhZjMyYmM0NTZiOTI0MjA4NmEwYTU3NWJmZmE3ZjM0ODliOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjrDsL6HHFbsLbXNOOAMi6uyz3NR WEz6mu5m9unk9Fc2l6lVGmJAywEdwAaLIR61Eh3EQhYCVVAUDFcw8S0n4K1Wt3ZE mDCnfpxnWcV17hFl/4XU4lGj+/Ci72slcIkbmZa7be2o2z9c2QMCnM2pNevWagwW HfA6H/cuB7vFuZUzeqiL1Pb7nIJ+5iuz6q3xNzxBbHlpeVpLIm8TdKQMbELX2ELs d0/twix3N9S8uLvv5LD/9pdDLh0w3+8vIF1k33fAFUqyHTW2gh7OE14oO+P+gTmT gaM8GZze7ZhOdtuyyCjSfAfA9wgQxNX00QL+QhgjicjA/LZExXuWZVTfHQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEFq8yvEVrkkIIagpXW/+n80ibnUMB8GA1UdIwQY MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt NTQyMDRkZGQyY2E2LzEvUVdyeks4Uld1U1FnaHFDbGRiXzZmelNKdWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2 LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQQQDAN BgkqhkiG9w0BAQsFAAOCAQEAeiojEvjZJmNoPTh3Ck4V8tmBtYGi2sHYzUyXHW6q 9sG9JZfOM6u1yVk85UDgwRSh5ttFVLcmD2+X5mNRBeT7NHkcyyalw1VJbk/U8HHZ sgXBatyeygoOztaAkTo4ENOorNVa2VGCKz7wIsdVYmubj90wo0wu8CkLpAosvbW2 uDVXtJVgr/jgaS0fvVVUi61CBT1Fx7Sq52ZLF8w9SYU38fP9X9IKYKpYrXHYGiep hmrZouWGUbMh9MxumvsjD3uF/+p9thFpk5WyNHoihVt3qT/Pz6zjTNrhqkINTped rFsVhHQSwpOTB5dBxl9JgIu996A37V9jxOvaqUpWXT3yfg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:06:12 2025 by rpki-client