This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/qchTwrqi0nAVLi_bl4CZl5ndb58.roa File: qchTwrqi0nAVLi_bl4CZl5ndb58.roa (raw, json) Hash identifier: ldZEDUqRJgpdyT5wjo7UFqGO3TLrWDAMg94GFQn1Yls= Subject key identifier: A9:C8:53:C2:BA:A2:D2:70:15:2E:2F:DB:97:80:99:97:99:DD:6F:9F Certificate issuer: /CN=1ba6f5d32474be86f63058944537629344d4f01a Certificate serial: 019B7BA4CF63B5547AA82DE27CDF3E031D2E Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/qchTwrqi0nAVLi_bl4CZl5ndb58.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207522 IP address blocks: 2001:67c:ec4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cf:63:b5:54:7a:a8:2d:e2:7c:df:3e:03:1d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9c853c2baa2d270152e2fdb9780999799dd6f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:3e:e3:4a:73:6f:c3:f1:0e:b8:36:3e:37: e8:9f:bd:f0:81:0a:e8:3e:04:a9:f0:8f:ba:b6:50: f5:15:98:ea:b1:c9:36:6e:68:67:46:66:cd:f9:5e: 18:ee:8a:10:6f:e3:62:b2:2a:36:b4:03:b2:26:16: f4:59:f3:df:6d:da:d7:a0:82:22:82:df:de:b8:66: 35:a9:15:ed:41:ca:bc:2e:33:2e:b3:b9:d7:fd:0c: 35:46:08:79:1e:bc:cd:63:9c:f5:b5:d9:5b:d9:31: 3e:06:84:c5:4b:06:9a:69:19:05:e7:00:71:ca:94: ba:00:60:0c:73:22:7b:25:55:c2:55:5a:a2:0b:80: f9:aa:4e:dd:d1:d9:df:2a:82:fe:46:28:4f:10:17: 69:2e:fd:a0:6f:ce:f4:ce:4b:05:9c:87:dd:77:03: a3:aa:c4:d8:3e:a0:05:a3:1f:d1:15:0a:6f:13:ee: 11:7d:8a:3e:58:21:37:7e:ae:bc:9e:68:9d:c6:72: ac:c0:8b:81:09:d4:f3:d3:02:c7:51:40:1c:28:82: 2f:a4:01:1c:7f:2d:4a:e4:a8:f1:99:b3:e9:31:86: 40:9a:7c:c2:e3:05:3b:61:a3:17:66:7e:99:ca:3c: 89:4c:cb:c1:29:f6:bb:dc:69:92:d9:4f:08:d8:4e: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C8:53:C2:BA:A2:D2:70:15:2E:2F:DB:97:80:99:97:99:DD:6F:9F X509v3 Authority Key Identifier: keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/qchTwrqi0nAVLi_bl4CZl5ndb58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ec4::/48 Signature Algorithm: sha256WithRSAEncryption 32:12:05:d3:bf:8c:45:29:ae:76:2a:86:9b:3b:39:bb:ed:0b: 81:45:b9:20:7d:6a:e3:3f:3b:21:69:86:39:ed:d7:08:8e:df: 2b:7e:9a:1e:25:aa:4b:a9:bf:ff:72:5d:74:38:93:d0:a7:6c: be:e3:51:d6:35:42:b2:ae:ed:c2:0b:fe:8b:a3:f0:21:9f:3b: 5a:63:3f:38:38:5d:3c:8b:c5:e4:23:b9:dd:a0:a3:db:61:8d: 1d:a9:d7:c1:a5:64:55:95:6f:2e:00:ce:ad:02:05:48:86:7c: 0b:f3:03:14:c3:55:3e:f8:d4:a3:2b:79:35:0f:1e:3b:c9:8e: 9f:aa:ce:a9:9b:53:72:34:6b:96:05:75:6e:1a:a6:bb:c9:e0: be:7c:79:c1:94:29:5b:eb:8b:2a:e2:53:8b:4c:5c:8a:93:b4: b7:de:0d:51:4d:37:f8:7c:ed:6c:14:52:a5:3c:bc:4d:e8:1d: 8e:93:24:88:f8:23:20:1a:d3:01:2d:58:3e:d5:ea:c2:5f:31: 0f:2b:c4:d5:9e:d5:05:d2:ec:4d:e0:b7:6f:35:9f:64:64:60: 07:9c:a9:de:2d:32:fd:7f:d0:4e:9f:35:27:98:7b:1b:23:6e: 0f:72:48:79:81:a8:e7:72:45:2f:3d:74:ce:ea:33:89:9e:c0: 42:1e:63:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pM9jtVR6qC3ifN8+Ax0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTZmNWQzMjQ3NGJlODZmNjMwNTg5NDQ1Mzc2MjkzNDRk NGYwMWEwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWM4NTNjMmJhYTJkMjcwMTUyZTJmZGI5NzgwOTk5Nzk5ZGQ2ZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzM+40pzb8PxDrg2Pjfon73wgQro PgSp8I+6tlD1FZjqsck2bmhnRmbN+V4Y7ooQb+Nisio2tAOyJhb0WfPfbdrXoIIi gt/euGY1qRXtQcq8LjMus7nX/Qw1Rgh5HrzNY5z1tdlb2TE+BoTFSwaaaRkF5wBx ypS6AGAMcyJ7JVXCVVqiC4D5qk7d0dnfKoL+RihPEBdpLv2gb870zksFnIfddwOj qsTYPqAFox/RFQpvE+4RfYo+WCE3fq68nmidxnKswIuBCdTz0wLHUUAcKIIvpAEc fy1K5KjxmbPpMYZAmnzC4wU7YaMXZn6ZyjyJTMvBKfa73GmS2U8I2E5VoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKnIU8K6otJwFS4v25eAmZeZ3W+fMB8GA1UdIwQY MBaAFBum9dMkdL6G9jBYlEU3YpNE1PAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYt NTgwODFhMTZjYmRiLzEvcWNoVHdycWkwbkFWTGlfYmw0Q1psNW5kYjU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYtNTgwODFhMTZjYmRi LzEvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7E MA0GCSqGSIb3DQEBCwUAA4IBAQAyEgXTv4xFKa52KoabOzm77QuBRbkgfWrjPzsh aYY57dcIjt8rfpoeJapLqb//cl10OJPQp2y+41HWNUKyru3CC/6Lo/AhnztaYz84 OF08i8XkI7ndoKPbYY0dqdfBpWRVlW8uAM6tAgVIhnwL8wMUw1U++NSjK3k1Dx47 yY6fqs6pm1NyNGuWBXVuGqa7yeC+fHnBlClb64sq4lOLTFyKk7S33g1RTTf4fO1s FFKlPLxN6B2OkySI+CMgGtMBLVg+1erCXzEPK8TVntUF0uxN4LdvNZ9kZGAHnKne LTL9f9BOnzUnmHsbI24Pckh5gajnckUvPXTO6jOJnsBCHmMp -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:02 2026 by rpki-client