This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qahcKwLaL46wQnrPhGdrbb-GTis.roa File: qahcKwLaL46wQnrPhGdrbb-GTis.roa (raw, json) Hash identifier: lDZta8MiXdJUh96WO7XugGzmWM6xbEdU8NzKzJZXrtQ= Subject key identifier: A9:A8:5C:2B:02:DA:2F:8E:B0:42:7A:CF:84:67:6B:6D:BF:86:4E:2B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF0A97B63E113A2E1806A92333130 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qahcKwLaL46wQnrPhGdrbb-GTis.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202827 IP address blocks: 2a0e:b107:1ce1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f0:a9:7b:63:e1:13:a2:e1:80:6a:92:33:31:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9a85c2b02da2f8eb0427acf84676b6dbf864e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:75:c3:88:aa:1c:3c:00:af:36:39:30:89: 56:eb:09:7c:34:0b:b6:2c:0e:80:37:f3:47:da:f6: e0:e3:85:48:23:f0:35:78:04:1c:ac:9c:69:77:94: b4:e4:66:d0:d0:22:18:42:f8:ba:b9:2c:1a:cd:7e: 5b:f6:cd:0f:3b:f5:1a:25:14:d9:ac:57:f5:cd:62: 2d:f0:b0:0e:cb:04:da:c6:5b:fe:f0:c7:48:2f:8a: 33:05:88:f5:1a:28:36:ff:3d:f4:8b:05:87:25:f8: 90:b7:1c:a5:32:ab:65:83:ef:48:08:cf:0e:3a:12: ca:e0:45:e0:1f:41:3d:53:68:1f:b7:8d:1b:5d:23: c8:3d:f8:30:e5:c4:d0:fb:dc:e3:c9:98:66:13:72: 57:fc:aa:1c:3e:f1:1f:e1:7e:44:16:4e:c5:b8:c4: 67:95:e3:22:86:e7:59:15:d8:73:7b:5f:32:74:21: 4b:a3:a9:95:47:4f:bd:ba:17:9d:e7:17:29:1b:1b: a7:61:e4:94:cd:a8:cd:a4:21:34:05:67:5a:ef:57: bd:e4:65:21:87:c8:b4:3f:3c:af:8f:cb:cb:c6:2f: 6a:09:d9:63:e8:64:91:27:31:36:ba:2b:0b:b4:ca: e0:23:c3:90:71:e4:9a:f2:51:dd:f2:c4:a0:e3:86: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:5C:2B:02:DA:2F:8E:B0:42:7A:CF:84:67:6B:6D:BF:86:4E:2B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qahcKwLaL46wQnrPhGdrbb-GTis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1ce1::/48 Signature Algorithm: sha256WithRSAEncryption 3a:7e:f3:52:1f:17:4f:cc:a4:88:ae:e6:07:0a:8b:ad:87:6b: 20:31:c1:58:fc:02:a6:ab:32:3b:23:e1:99:7a:c9:98:fe:80: dd:08:68:98:c6:12:a8:5e:71:74:c0:50:ba:70:d6:9e:0c:e5: eb:60:17:c4:ac:a2:6b:04:fb:5d:1a:f5:8a:03:e6:ec:2a:4e: 86:c4:b1:fa:2b:cb:3c:e7:19:53:e1:fa:42:4c:cf:cb:a0:c0: a5:4a:4d:74:9c:ed:aa:c9:4f:b4:73:a8:37:e2:eb:91:99:a1: c4:0e:0e:7c:d4:61:63:a7:72:49:71:0a:d0:51:1c:16:2b:44: 1b:50:2d:00:97:ed:9b:fd:99:8c:56:14:5d:84:21:81:0a:69: f1:5f:42:65:51:f2:4c:30:74:c3:ca:13:0d:80:43:1a:64:bb: 01:85:34:a0:49:02:2d:31:9e:d0:fc:06:d7:48:23:21:61:70: db:99:d2:96:5c:94:92:bc:38:89:eb:37:ae:11:01:fb:57:4e: e0:41:51:7b:71:65:54:5f:2f:1a:b3:43:7a:3c:e7:5e:26:20: c2:40:91:bd:55:35:40:f6:82:80:a6:ef:38:e4:1c:fa:19:52: 00:1f:75:4a:2a:fa:83:69:15:28:ad:e6:37:4a:94:f2:62:16: 92:a5:20:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPCpe2PhE6LhgGqSMzEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWE4NWMyYjAyZGEyZjhlYjA0MjdhY2Y4NDY3NmI2ZGJmODY0ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl051w4iqHDwArzY5MIlW6wl8NAu2 LA6AN/NH2vbg44VII/A1eAQcrJxpd5S05GbQ0CIYQvi6uSwazX5b9s0PO/UaJRTZ rFf1zWIt8LAOywTaxlv+8MdIL4ozBYj1Gig2/z30iwWHJfiQtxylMqtlg+9ICM8O OhLK4EXgH0E9U2gft40bXSPIPfgw5cTQ+9zjyZhmE3JX/KocPvEf4X5EFk7FuMRn leMihudZFdhze18ydCFLo6mVR0+9uhed5xcpGxunYeSUzajNpCE0BWda71e95GUh h8i0Pzyvj8vLxi9qCdlj6GSRJzE2uisLtMrgI8OQceSa8lHd8sSg44YXaQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKmoXCsC2i+OsEJ6z4Rna22/hk4rMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcWFoY0t3TGFMNDZ3UW5yUGhHZHJiYi1HVGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxzh MA0GCSqGSIb3DQEBCwUAA4IBAQA6fvNSHxdPzKSIruYHCouth2sgMcFY/AKmqzI7 I+GZesmY/oDdCGiYxhKoXnF0wFC6cNaeDOXrYBfErKJrBPtdGvWKA+bsKk6GxLH6 K8s85xlT4fpCTM/LoMClSk10nO2qyU+0c6g34uuRmaHEDg581GFjp3JJcQrQURwW K0QbUC0Al+2b/ZmMVhRdhCGBCmnxX0JlUfJMMHTDyhMNgEMaZLsBhTSgSQItMZ7Q /AbXSCMhYXDbmdKWXJSSvDiJ6zeuEQH7V07gQVF7cWVUXy8as0N6POdeJiDCQJG9 VTVA9oKApu845Bz6GVIAH3VKKvqDaRUoreY3SpTyYhaSpSBT -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:07 2026 by rpki-client