This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CqNns8QzBA2ExugeDitxchI0A-Y.roa File: CqNns8QzBA2ExugeDitxchI0A-Y.roa (raw, json) Hash identifier: MHOcDHcwzCKjLh3+5sY9EIh3RHcCa3Qno+6b9mh/B2s= Subject key identifier: 0A:A3:67:B3:C4:33:04:0D:84:C6:E8:1E:0E:2B:71:72:12:34:03:E6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D0FB5C6C0B14C31B1F49F0730F921 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CqNns8QzBA2ExugeDitxchI0A-Y.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207847 IP address blocks: 2a0e:97c0:180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0f:b5:c6:c0:b1:4c:31:b1:f4:9f:07:30:f9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa367b3c433040d84c6e81e0e2b7172123403e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:9f:d4:87:e9:66:2e:36:63:98:d7:a7:06: 7a:59:32:95:c8:0f:59:19:b8:14:2d:eb:4d:9c:8b: f1:8e:9e:38:50:f5:3b:59:e3:85:af:dc:fe:83:ef: 65:f2:83:e7:22:07:ea:a1:28:c1:73:54:6d:ea:64: 38:c5:84:ee:57:1f:97:4d:d2:49:03:6a:aa:5d:fb: 98:6e:b3:5c:79:d7:71:5b:c5:40:27:15:08:28:a6: cc:ff:7e:31:dd:ae:8f:2b:11:08:d3:42:60:03:b1: 5e:99:ad:ad:a0:09:5f:30:7b:a8:64:67:59:39:7a: 91:8a:d7:c6:08:a6:27:ab:ea:18:5c:26:8f:6c:fa: 7d:db:b3:27:8d:13:e8:fc:91:9c:9c:c2:bc:a6:8c: e5:dc:60:01:82:8c:ae:3b:cc:b1:3e:97:0c:26:da: a8:86:5e:da:46:30:0d:15:39:fd:55:a7:bb:6f:0c: 6d:80:37:62:98:11:1b:db:bd:ce:f2:57:fd:69:47: 1d:52:a3:db:0d:30:e1:d6:e2:2b:4c:82:d6:00:93: 80:0e:2c:ae:c4:a3:09:bb:44:7b:43:47:72:90:b4: 42:c8:64:b1:41:60:ce:b8:59:7f:38:32:2f:49:90: 9c:f9:a9:db:b6:c1:26:1c:7a:d1:e0:87:fb:82:42: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A3:67:B3:C4:33:04:0D:84:C6:E8:1E:0E:2B:71:72:12:34:03:E6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CqNns8QzBA2ExugeDitxchI0A-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:180::/44 Signature Algorithm: sha256WithRSAEncryption 1a:1c:0b:d8:59:e7:b1:9c:df:09:9f:a4:38:2c:82:df:29:b4: 1f:17:97:42:43:78:10:a8:44:a5:70:6e:59:dd:0b:0e:c5:b4: 6a:c4:82:18:8f:1e:d1:81:18:ab:2e:e8:5c:f4:5d:b0:10:94: 6b:d8:c6:39:52:c2:db:f9:2e:0f:9f:b3:bf:4e:a3:cb:e1:ed: 9e:c9:d1:02:2f:0e:ea:75:6d:ea:76:47:de:42:22:ff:3b:d9: 7c:f8:67:f0:70:94:dd:29:b8:fb:7d:18:0f:97:ee:1d:05:eb: 23:99:5a:ee:9e:9c:ce:62:73:cf:88:ea:83:7d:6e:8e:f7:6c: 5a:c9:dd:51:8c:a0:5f:f7:24:f3:4c:63:5e:22:e1:c8:3d:03: 29:62:a0:20:d4:22:94:be:a7:21:c1:6f:06:cc:24:a7:6f:ee: 14:d7:17:ed:08:12:a6:e4:88:26:f2:a6:18:71:71:a8:13:14: 5a:0a:d9:d8:57:dd:94:cd:22:29:24:81:47:9d:81:87:be:0a: 69:8b:8c:27:c3:7c:cf:cf:42:14:b6:22:f3:bd:73:5b:db:cf: 17:0e:ff:52:e4:8a:7c:6f:cb:33:43:c9:a9:d2:80:cb:d0:00: ef:d7:ea:e6:b6:18:3d:e6:d1:97:c9:b3:39:cc:a5:e4:0f:99: f9:1f:91:0b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQ+1xsCxTDGx9J8HMPkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWEzNjdiM2M0MzMwNDBkODRjNmU4MWUwZTJiNzE3MjEyMzQwM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNaf1IfpZi42Y5jXpwZ6WTKVyA9Z GbgULetNnIvxjp44UPU7WeOFr9z+g+9l8oPnIgfqoSjBc1Rt6mQ4xYTuVx+XTdJJ A2qqXfuYbrNceddxW8VAJxUIKKbM/34x3a6PKxEI00JgA7Fema2toAlfMHuoZGdZ OXqRitfGCKYnq+oYXCaPbPp927MnjRPo/JGcnMK8pozl3GABgoyuO8yxPpcMJtqo hl7aRjANFTn9Vae7bwxtgDdimBEb273O8lf9aUcdUqPbDTDh1uIrTILWAJOADiyu xKMJu0R7Q0dykLRCyGSxQWDOuFl/ODIvSZCc+anbtsEmHHrR4If7gkIpGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAqjZ7PEMwQNhMboHg4rcXISNAPmMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQ3FObnM4UXpCQTJFeHVnZURpdHhjaEkwQS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAGA MA0GCSqGSIb3DQEBCwUAA4IBAQAaHAvYWeexnN8Jn6Q4LILfKbQfF5dCQ3gQqESl cG5Z3QsOxbRqxIIYjx7RgRirLuhc9F2wEJRr2MY5UsLb+S4Pn7O/TqPL4e2eydEC Lw7qdW3qdkfeQiL/O9l8+GfwcJTdKbj7fRgPl+4dBesjmVrunpzOYnPPiOqDfW6O 92xayd1RjKBf9yTzTGNeIuHIPQMpYqAg1CKUvqchwW8GzCSnb+4U1xftCBKm5Igm 8qYYcXGoExRaCtnYV92UzSIpJIFHnYGHvgppi4wnw3zPz0IUtiLzvXNb288XDv9S 5Ip8b8szQ8mp0oDL0ADv1+rmthg95tGXybM5zKXkD5n5H5EL -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:48 2026 by rpki-client