This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qn2g1l_cckNvC7R2LZVLHLpeDbg.roa File: qn2g1l_cckNvC7R2LZVLHLpeDbg.roa (raw, json) Hash identifier: QuK/fWOrcfmAGE4Yt7b1rLzEvVp3mmV8XeVHO2pAjR8= Subject key identifier: AA:7D:A0:D6:5F:DC:72:43:6F:0B:B4:76:2D:95:4B:1C:BA:5E:0D:B8 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D5F2067497A0A15DB24C30570370F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qn2g1l_cckNvC7R2LZVLHLpeDbg.roa Signing time: Fri 02 Jan 2026 06:20:29 +0000 ROA not before: Fri 02 Jan 2026 06:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213250 IP address blocks: 2a0e:97c0:3e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5f:20:67:49:7a:0a:15:db:24:c3:05:70:37:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa7da0d65fdc72436f0bb4762d954b1cba5e0db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:c5:ea:85:6a:53:41:4e:c8:c2:74:32:4d: b6:9a:f0:9a:87:44:42:3f:26:d9:36:37:62:80:66: 34:84:bb:10:2b:17:06:f8:c4:81:4b:e4:3e:aa:1c: 14:b0:46:3e:b6:53:66:57:e8:9f:d1:f0:a3:1f:87: 4d:5c:a3:39:cc:79:3b:8b:ea:e8:1e:ad:81:ae:49: 4d:70:2c:1a:59:bc:7d:b7:9b:43:f4:7c:13:13:25: 69:8a:96:13:59:63:ad:df:3f:62:f9:37:e0:9f:e5: 5f:d0:cb:eb:b9:4a:d6:ce:14:28:2a:f1:3b:8a:68: 55:7a:85:ff:4f:1d:25:24:b0:e1:72:de:2a:96:cc: e6:42:90:aa:7a:75:8c:fc:9c:dd:9a:fe:34:7f:d9: ca:e2:99:02:16:84:37:1d:da:bb:d0:dd:eb:e5:e4: df:02:71:27:8b:dd:2b:f7:b7:a6:ae:a2:6d:dc:c8: 9b:dc:ad:3d:a3:a7:0d:e4:6e:e6:96:82:10:3b:c2: c4:87:a5:38:40:81:2b:8d:f9:a6:b7:a0:da:d0:47: 4d:3f:70:81:e7:14:e1:2e:1c:bd:f6:79:5f:ed:16: bb:f0:28:eb:da:86:dc:85:5c:7c:de:a0:34:c9:ca: bc:14:8a:b6:40:be:d3:d2:98:8c:f8:6c:5c:9c:49: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:A0:D6:5F:DC:72:43:6F:0B:B4:76:2D:95:4B:1C:BA:5E:0D:B8 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qn2g1l_cckNvC7R2LZVLHLpeDbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:3e3::/48 Signature Algorithm: sha256WithRSAEncryption 7a:ae:5e:cd:97:d6:53:b3:b3:e3:ca:1b:be:b0:0b:33:3e:77: b2:65:bf:ce:41:e3:0c:19:52:b6:81:f3:e7:7d:01:55:79:af: 50:c3:a7:4f:0d:05:61:0b:4e:d7:5a:5d:44:c2:97:d6:5c:e8: 5e:37:c4:78:31:52:31:ab:23:b7:ec:2c:82:ea:18:ef:6b:fb: 6e:72:4f:30:18:40:8f:62:70:ee:ed:f1:ec:43:09:0e:0b:11: 17:93:b6:a7:0b:30:60:c1:25:65:84:24:b9:a9:4b:9a:5c:6a: a1:8a:30:85:53:ba:d8:a0:2e:b9:85:2a:bd:d5:d0:9e:38:80: b3:99:57:5d:43:c6:21:04:f2:f9:4a:88:9d:e8:d4:15:60:9a: 09:09:02:42:2d:75:b5:cf:93:d8:47:8e:ed:c3:a4:60:66:58: 70:ca:4b:88:38:b7:60:da:0c:9b:59:17:14:52:99:86:62:6e: c5:9a:d4:6c:c7:07:13:cd:08:f9:89:9d:80:6c:7e:dc:d9:36: 6b:39:41:c1:84:63:8f:be:c7:27:7a:e4:38:a2:d9:a2:28:fa: 8b:38:26:55:26:89:cf:95:69:25:0f:21:a3:65:ce:0a:46:66: 96:aa:e1:ee:3a:34:65:ef:7a:ae:b6:a0:44:4c:df:b5:2f:00: 72:7c:9a:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XV8gZ0l6ChXbJMMFcDcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTdkYTBkNjVmZGM3MjQzNmYwYmI0NzYyZDk1NGIxY2JhNWUwZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBjF6oVqU0FOyMJ0Mk22mvCah0RC PybZNjdigGY0hLsQKxcG+MSBS+Q+qhwUsEY+tlNmV+if0fCjH4dNXKM5zHk7i+ro Hq2BrklNcCwaWbx9t5tD9HwTEyVpipYTWWOt3z9i+Tfgn+Vf0MvruUrWzhQoKvE7 imhVeoX/Tx0lJLDhct4qlszmQpCqenWM/Jzdmv40f9nK4pkCFoQ3Hdq70N3r5eTf AnEni90r97emrqJt3Mib3K09o6cN5G7mloIQO8LEh6U4QIErjfmmt6Da0EdNP3CB 5xThLhy99nlf7Ra78Cjr2obchVx83qA0ycq8FIq2QL7T0piM+GxcnEm0KwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKp9oNZf3HJDbwu0di2VSxy6Xg24MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcW4yZzFsX2Nja052QzdSMkxaVkxITHBlRGJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAPj MA0GCSqGSIb3DQEBCwUAA4IBAQB6rl7Nl9ZTs7Pjyhu+sAszPneyZb/OQeMMGVK2 gfPnfQFVea9Qw6dPDQVhC07XWl1EwpfWXOheN8R4MVIxqyO37CyC6hjva/tuck8w GECPYnDu7fHsQwkOCxEXk7anCzBgwSVlhCS5qUuaXGqhijCFU7rYoC65hSq91dCe OICzmVddQ8YhBPL5Soid6NQVYJoJCQJCLXW1z5PYR47tw6RgZlhwykuIOLdg2gyb WRcUUpmGYm7FmtRsxwcTzQj5iZ2AbH7c2TZrOUHBhGOPvscneuQ4otmiKPqLOCZV JonPlWklDyGjZc4KRmaWquHuOjRl73qutqBETN+1LwByfJrP -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client