This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zqAt-dVogq6kD_2OZ7Xb7j9gK7Q.roa File: zqAt-dVogq6kD_2OZ7Xb7j9gK7Q.roa (raw, json) Hash identifier: MDRQAhKt2uuKaExn41hR6dwvMqg/7S8OI7ZS6EXDbxc= Subject key identifier: CE:A0:2D:F9:D5:68:82:AE:A4:0F:FD:8E:67:B5:DB:EE:3F:60:2B:B4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CBF37D79F9D6EC6D45C4D1846F3DB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zqAt-dVogq6kD_2OZ7Xb7j9gK7Q.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58133 IP address blocks: 2a10:2f00:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bf:37:d7:9f:9d:6e:c6:d4:5c:4d:18:46:f3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cea02df9d56882aea40ffd8e67b5dbee3f602bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:13:a9:ed:97:24:7f:65:9f:e1:2c:b7:5d: 8c:25:fc:e1:da:fd:79:6a:1b:d9:67:e5:56:f9:fd: d4:10:2f:2d:c5:ca:0e:71:3e:a5:37:b6:3f:f2:a3: 3c:dc:88:01:a2:d4:77:4a:d6:6d:fa:fe:2b:60:73: b6:67:dc:8f:ef:4b:29:7d:e1:8b:84:28:13:2f:42: ac:6e:12:81:91:a8:97:ba:a6:9d:bf:14:be:6f:03: d9:b3:e7:4f:dc:72:62:43:de:6f:56:77:29:9a:34: cc:9b:88:5a:3c:81:fa:e2:af:50:5c:b8:f4:44:fc: 78:c8:45:0d:2f:fb:d4:bb:e1:e8:15:0f:20:95:61: 5d:0e:d4:bd:dd:c2:6f:51:e5:dc:ea:dc:17:ba:01: 9d:12:df:9c:5d:17:5e:61:46:aa:a7:a6:f7:5d:9d: b3:c5:f3:3d:97:1e:cc:28:2b:b9:1f:89:7d:a7:c6: 90:4b:53:eb:84:5b:c3:78:4c:6f:1e:2a:68:39:05: fc:9a:ef:66:0d:10:ad:44:e7:d2:bd:8f:1b:97:4e: 35:d0:85:18:da:58:f4:3c:f3:d7:1d:ee:06:0e:e2: c0:46:5d:64:79:06:5f:6a:92:3c:eb:09:75:33:1a: cd:cc:c5:c8:a5:14:82:35:75:62:05:c1:fd:94:31: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:2D:F9:D5:68:82:AE:A4:0F:FD:8E:67:B5:DB:EE:3F:60:2B:B4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zqAt-dVogq6kD_2OZ7Xb7j9gK7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:123::/48 Signature Algorithm: sha256WithRSAEncryption 97:04:1a:82:52:3e:ef:48:6f:17:86:25:33:b8:0e:09:bb:c7: da:e0:16:4e:d8:75:23:c8:82:c8:b8:58:ee:47:ad:4e:dd:6f: 62:14:00:06:a9:a5:ff:76:30:04:dd:08:7a:2e:b5:68:4a:74: 14:5a:99:84:f1:26:d5:a2:38:32:4e:bb:ae:d2:ed:4c:39:3b: 5a:ee:f2:7a:4e:0a:bf:0c:c6:c6:58:3c:f8:66:0f:e6:58:39: 52:40:17:d7:e4:20:c7:c6:07:0c:cf:ec:b8:44:b2:5b:b5:f6: ff:b4:55:95:18:7d:43:cc:5d:42:47:1d:c3:f9:0a:8c:76:a7: c6:c1:e2:b7:e5:8e:d1:ad:a5:57:2c:ce:de:f9:68:b9:19:2e: 43:aa:41:95:7c:4a:23:3d:d4:98:ec:34:70:8e:80:b8:56:78: 28:d2:a4:02:5c:af:d3:4a:29:2d:3e:01:77:a3:56:d9:01:f3: 27:4a:5a:16:55:82:c7:36:e1:df:5c:53:ec:b4:73:b5:9f:30: e0:45:21:6d:37:42:f9:19:5a:ad:8c:de:5b:64:e9:dc:b3:81: 09:e6:7b:d2:f7:b5:50:60:7f:23:dc:0b:fa:de:f9:c6:0a:40: 41:a1:57:e6:7e:51:a2:6b:b5:4d:74:b9:82:7e:b8:7e:00:3e: 5b:86:98:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XL8315+dbsbUXE0YRvPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWEwMmRmOWQ1Njg4MmFlYTQwZmZkOGU2N2I1ZGJlZTNmNjAyYmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3oTqe2XJH9ln+Est12MJfzh2v15 ahvZZ+VW+f3UEC8txcoOcT6lN7Y/8qM83IgBotR3StZt+v4rYHO2Z9yP70spfeGL hCgTL0KsbhKBkaiXuqadvxS+bwPZs+dP3HJiQ95vVncpmjTMm4haPIH64q9QXLj0 RPx4yEUNL/vUu+HoFQ8glWFdDtS93cJvUeXc6twXugGdEt+cXRdeYUaqp6b3XZ2z xfM9lx7MKCu5H4l9p8aQS1PrhFvDeExvHipoOQX8mu9mDRCtROfSvY8bl0410IUY 2lj0PPPXHe4GDuLARl1keQZfapI86wl1MxrNzMXIpRSCNXViBcH9lDEfUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM6gLfnVaIKupA/9jme12+4/YCu0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvenFBdC1kVm9ncTZrRF8yT1o3WGI3ajlnSzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAEj MA0GCSqGSIb3DQEBCwUAA4IBAQCXBBqCUj7vSG8XhiUzuA4Ju8fa4BZO2HUjyILI uFjuR61O3W9iFAAGqaX/djAE3Qh6LrVoSnQUWpmE8SbVojgyTruu0u1MOTta7vJ6 Tgq/DMbGWDz4Zg/mWDlSQBfX5CDHxgcMz+y4RLJbtfb/tFWVGH1DzF1CRx3D+QqM dqfGweK35Y7RraVXLM7e+Wi5GS5DqkGVfEojPdSY7DRwjoC4Vngo0qQCXK/TSikt PgF3o1bZAfMnSloWVYLHNuHfXFPstHO1nzDgRSFtN0L5GVqtjN5bZOncs4EJ5nvS 97VQYH8j3Av63vnGCkBBoVfmflGia7VNdLmCfrh+AD5bhpgu -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:49 2026 by rpki-client