This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QZWumZKPBmuUgdsNn4AEJlMDQFI.roa File: QZWumZKPBmuUgdsNn4AEJlMDQFI.roa (raw, json) Hash identifier: V01W7U+eMErEwsRCVKkK+351mIMuyxlZaF7/MdKz/LU= Subject key identifier: 41:95:AE:99:92:8F:06:6B:94:81:DB:0D:9F:80:04:26:53:03:40:52 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D22DBFC4903BED316541A397A4F86 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QZWumZKPBmuUgdsNn4AEJlMDQFI.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210074 IP address blocks: 2a10:2f00:17b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:22:db:fc:49:03:be:d3:16:54:1a:39:7a:4f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4195ae99928f066b9481db0d9f80042653034052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:fc:cb:88:ad:5f:b3:40:2b:43:8a:70:b3: 50:f8:3b:36:9d:cf:db:89:8b:94:4f:3c:d9:2b:2d: dd:a7:a9:18:b2:29:3d:06:15:2b:8d:84:06:19:5c: 4b:d7:41:63:f8:9b:1e:33:5b:50:4d:4d:f9:df:8a: c7:3c:0b:0a:fd:56:f0:03:30:ed:93:d7:b2:2b:01: 68:14:00:1e:20:c2:cd:cb:e4:68:ae:a5:77:6a:6c: 01:9d:56:f5:45:ba:91:b5:9b:88:13:09:a8:e2:84: 7e:a2:c6:ca:37:1a:22:46:dd:63:d4:01:ab:60:75: 3c:a5:91:54:f2:ba:0f:0b:98:77:d3:d9:44:74:dd: 0c:e4:8c:5a:09:c2:d5:c8:a8:19:00:7e:e8:11:13: 7f:d9:11:b1:ac:c4:4e:ec:8c:d9:e3:38:5a:ae:45: 99:e4:5d:7e:3c:50:7f:c8:28:0d:e6:06:73:79:c2: 43:1c:2b:79:18:23:57:17:af:75:eb:4c:fb:81:d4: 4a:67:f7:42:cc:45:38:87:ad:7d:ee:ae:85:49:9a: cf:b3:10:52:91:11:d5:30:18:20:b9:1d:6d:f7:6a: d4:2b:b8:00:62:31:a3:e6:f7:b4:87:8b:b9:d0:e6: a3:0d:2e:96:7b:6f:c7:46:d7:69:c7:41:1a:70:59: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:95:AE:99:92:8F:06:6B:94:81:DB:0D:9F:80:04:26:53:03:40:52 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QZWumZKPBmuUgdsNn4AEJlMDQFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:17b::/48 Signature Algorithm: sha256WithRSAEncryption 74:4d:6a:39:cd:f6:0a:9d:df:c0:12:a2:19:f7:fd:c6:96:d1: 35:41:9d:97:22:de:e8:e4:65:3a:40:01:df:59:ec:2d:00:5f: b2:ae:c2:73:8c:55:06:a7:6b:4b:d7:7d:93:ba:2a:24:d0:21: 68:fa:f6:30:90:5d:c3:59:74:aa:63:a7:11:b3:2b:11:83:4a: 15:f7:aa:48:ba:6f:92:f7:1b:01:a2:58:52:52:b3:90:18:6a: 32:3d:54:6f:1a:1e:45:a5:69:03:2f:98:cb:a6:43:c1:22:e2: c0:05:4b:f4:79:58:d1:0b:f4:45:cd:7e:89:08:ec:49:01:28: ba:dc:2d:7f:38:52:64:9f:4f:9c:54:40:af:ff:f1:d6:a4:33: 6d:c4:72:7f:f3:4b:7b:bd:ab:60:27:59:44:0f:ec:ed:26:aa: c7:cf:3f:c3:55:ab:3d:12:65:cb:da:40:a9:e0:d7:51:cf:00: bb:e8:30:36:b7:61:23:f0:23:49:a3:88:1c:26:e4:84:fc:bc: f8:0b:17:0d:5c:90:fc:e3:08:35:72:19:f6:ea:13:4f:b2:b7: 4d:79:11:6c:78:3e:cf:37:06:ee:a4:bc:ac:9d:92:fd:d7:8f: 7c:49:68:df:81:c7:37:57:63:e0:82:4f:cf:d9:4e:00:f1:7b: 1f:b2:62:de -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSLb/EkDvtMWVBo5ek+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTk1YWU5OTkyOGYwNjZiOTQ4MWRiMGQ5ZjgwMDQyNjUzMDM0MDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBn8y4itX7NAK0OKcLNQ+Ds2nc/b iYuUTzzZKy3dp6kYsik9BhUrjYQGGVxL10Fj+JseM1tQTU3534rHPAsK/VbwAzDt k9eyKwFoFAAeIMLNy+RorqV3amwBnVb1RbqRtZuIEwmo4oR+osbKNxoiRt1j1AGr YHU8pZFU8roPC5h309lEdN0M5IxaCcLVyKgZAH7oERN/2RGxrMRO7IzZ4zharkWZ 5F1+PFB/yCgN5gZzecJDHCt5GCNXF69160z7gdRKZ/dCzEU4h6197q6FSZrPsxBS kRHVMBgguR1t92rUK7gAYjGj5ve0h4u50OajDS6We2/HRtdpx0EacFnyhwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEGVrpmSjwZrlIHbDZ+ABCZTA0BSMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUVpXdW1aS1BCbXVVZ2RzTm40QUVKbE1EUUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAF7 MA0GCSqGSIb3DQEBCwUAA4IBAQB0TWo5zfYKnd/AEqIZ9/3GltE1QZ2XIt7o5GU6 QAHfWewtAF+yrsJzjFUGp2tL132Tuiok0CFo+vYwkF3DWXSqY6cRsysRg0oV96pI um+S9xsBolhSUrOQGGoyPVRvGh5FpWkDL5jLpkPBIuLABUv0eVjRC/RFzX6JCOxJ ASi63C1/OFJkn0+cVECv//HWpDNtxHJ/80t7vatgJ1lED+ztJqrHzz/DVas9EmXL 2kCp4NdRzwC76DA2t2Ej8CNJo4gcJuSE/Lz4CxcNXJD84wg1chn26hNPsrdNeRFs eD7PNwbupLysnZL91498SWjfgcc3V2Pggk/P2U4A8XsfsmLe -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client