This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QT3Ts_IGWoynVlspbqjPjoLxBMU.roa File: QT3Ts_IGWoynVlspbqjPjoLxBMU.roa (raw, json) Hash identifier: sRNK5CptgevJRw6b7DjMr5XQCgdAD2LaLq+EVTXdJ2c= Subject key identifier: 41:3D:D3:B3:F2:06:5A:8C:A7:56:5B:29:6E:A8:CF:8E:82:F1:04:C5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D240A36E737F707E254E6F82F7956 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QT3Ts_IGWoynVlspbqjPjoLxBMU.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210337 IP address blocks: 2a0e:b107:9f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:24:0a:36:e7:37:f7:07:e2:54:e6:f8:2f:79:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=413dd3b3f2065a8ca7565b296ea8cf8e82f104c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:40:f5:96:c4:5d:a8:e0:55:41:ac:63:87: 46:23:1f:1a:e3:fa:73:ac:90:51:c9:92:bd:3a:dc: 17:09:4b:48:c1:3b:b0:14:1a:c2:8f:5d:8a:a9:64: 90:6c:60:d2:5e:e5:23:bc:32:19:7f:9a:29:71:ec: 01:3d:59:17:b6:71:85:e3:a4:cf:7b:6d:4e:71:4e: 33:82:73:54:4b:26:05:8c:b1:50:ed:70:7a:ad:fc: 5f:a8:a2:58:c2:0e:37:e9:8b:19:5d:6a:a1:df:fa: a7:de:38:d6:a7:ff:23:a1:16:92:78:de:df:7d:dd: cb:71:25:25:fc:f9:50:53:d5:67:bf:05:b1:ce:16: 5e:5f:c9:4e:4f:72:c6:a7:64:58:4c:9d:cc:5f:23: 59:e3:1f:17:75:ca:23:2b:3c:73:b5:b4:e3:33:02: 88:86:ba:c4:55:a3:0f:c7:03:0b:14:c0:f0:76:81: 47:9a:7f:9d:42:56:b5:86:e5:0c:af:96:ce:c9:76: 58:8d:c1:1b:e1:27:1d:0c:37:71:39:61:97:8f:6b: 0f:fb:97:4d:f3:c9:a6:7e:ae:f5:c7:80:b8:e6:88: 25:c0:32:14:33:ba:a0:a5:17:b8:d8:ae:19:1f:5f: d9:3a:2f:6e:67:b7:a2:91:e2:2b:c9:e9:27:f2:3d: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3D:D3:B3:F2:06:5A:8C:A7:56:5B:29:6E:A8:CF:8E:82:F1:04:C5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QT3Ts_IGWoynVlspbqjPjoLxBMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:9f7::/48 Signature Algorithm: sha256WithRSAEncryption 58:5e:d7:22:f2:98:33:a8:a5:f6:45:b4:d3:b2:3f:ef:8b:88: e2:f9:36:e4:bf:94:d9:41:ec:35:48:06:f6:c2:57:3c:8f:40: 3a:d7:1d:1b:8a:6c:89:ff:bf:84:87:20:36:f1:98:52:b7:70: f2:d6:d7:96:7c:a2:f1:bd:1a:73:e5:11:22:e1:16:34:08:f8: 75:26:8e:22:f4:2f:08:33:67:d0:8b:00:34:2c:64:57:f9:54: 68:8e:64:09:60:69:d9:d8:48:21:5f:b5:6a:91:f7:4d:72:24: 55:cd:a1:66:eb:16:44:8b:4d:cd:0b:83:82:39:0e:fb:03:88: b9:db:98:ab:50:0d:10:b8:13:4f:01:94:54:63:70:e8:ef:cd: 8d:1b:b8:ec:71:1e:18:13:9a:96:33:b3:69:81:18:b0:18:f2: 3c:cc:cd:d5:d5:9e:ec:83:0a:6f:8a:f3:34:19:31:3e:99:1e: 7b:a1:22:6d:96:ac:99:c9:83:52:0a:06:fc:63:ee:67:76:e6: 33:9e:28:51:6c:38:2d:5a:78:89:df:09:22:f9:93:cb:92:f2: 6e:cf:46:dc:0a:79:e8:06:d2:0f:46:f7:39:d2:c1:76:2c:ec: 88:c3:dd:4a:26:31:88:3e:53:ab:ca:42:b6:f4:b3:3b:e8:8e: 9e:29:b8:6f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSQKNuc39wfiVOb4L3lWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTNkZDNiM2YyMDY1YThjYTc1NjViMjk2ZWE4Y2Y4ZTgyZjEwNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB5A9ZbEXajgVUGsY4dGIx8a4/pz rJBRyZK9OtwXCUtIwTuwFBrCj12KqWSQbGDSXuUjvDIZf5opcewBPVkXtnGF46TP e21OcU4zgnNUSyYFjLFQ7XB6rfxfqKJYwg436YsZXWqh3/qn3jjWp/8joRaSeN7f fd3LcSUl/PlQU9VnvwWxzhZeX8lOT3LGp2RYTJ3MXyNZ4x8XdcojKzxztbTjMwKI hrrEVaMPxwMLFMDwdoFHmn+dQla1huUMr5bOyXZYjcEb4ScdDDdxOWGXj2sP+5dN 88mmfq71x4C45oglwDIUM7qgpRe42K4ZH1/ZOi9uZ7eikeIryekn8j0ULQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEE907PyBlqMp1ZbKW6oz46C8QTFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUVQzVHNfSUdXb3luVmxzcGJxalBqb0x4Qk1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwn3 MA0GCSqGSIb3DQEBCwUAA4IBAQBYXtci8pgzqKX2RbTTsj/vi4ji+Tbkv5TZQew1 SAb2wlc8j0A61x0bimyJ/7+EhyA28ZhSt3Dy1teWfKLxvRpz5REi4RY0CPh1Jo4i 9C8IM2fQiwA0LGRX+VRojmQJYGnZ2EghX7VqkfdNciRVzaFm6xZEi03NC4OCOQ77 A4i525irUA0QuBNPAZRUY3Do782NG7jscR4YE5qWM7NpgRiwGPI8zM3V1Z7sgwpv ivM0GTE+mR57oSJtlqyZyYNSCgb8Y+5nduYznihRbDgtWniJ3wki+ZPLkvJuz0bc CnnoBtIPRvc50sF2LOyIw91KJjGIPlOrykK29LM76I6eKbhv -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:48 2026 by rpki-client