This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/QqeydQshq5wVgPFowaH8kSdulJE.roa File: QqeydQshq5wVgPFowaH8kSdulJE.roa (raw, json) Hash identifier: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc= Subject key identifier: 42:A7:B2:75:0B:21:AB:9C:15:80:F1:68:C1:A1:FC:91:27:6E:94:91 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B8D9F70F3AE881500D4C48D33CA88925E Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/QqeydQshq5wVgPFowaH8kSdulJE.roa Signing time: Mon 05 Jan 2026 10:06:35 +0000 ROA not before: Mon 05 Jan 2026 10:06:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215828 IP address blocks: 2a14:6781::/48 maxlen: 48 2a14:6781:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:9f:70:f3:ae:88:15:00:d4:c4:8d:33:ca:88:92:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 5 10:06:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42a7b2750b21ab9c1580f168c1a1fc91276e9491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:ff:5c:a8:79:3c:90:98:9d:87:a1:90:74: f0:35:90:a7:22:f4:a5:98:a0:67:f9:ee:64:17:b5: a6:8c:ab:0e:0d:ce:0a:0f:b1:68:e8:7b:17:a8:53: d9:df:be:0a:09:01:1f:46:69:2a:ae:15:bf:76:6c: ac:ae:07:5d:2f:49:79:da:9a:41:1b:d4:fd:2d:eb: 4e:d4:6d:6e:01:d1:69:36:b6:28:ef:53:81:87:d6: 47:32:a4:89:07:5a:55:fc:5b:09:5d:17:e9:b6:62: df:82:00:99:dd:85:c3:96:fa:b9:92:d8:64:8f:d2: ac:1d:0f:5c:8e:f1:d2:23:5d:7c:9c:84:9f:95:61: 15:2c:bf:33:d9:36:50:fd:9b:fa:2a:99:42:3c:6e: 59:b3:57:23:01:b3:da:45:35:69:30:9a:3e:bd:7f: c1:23:4e:2d:91:68:72:6f:cb:f3:55:90:cb:37:9f: b0:0e:d9:2a:59:da:dd:d1:71:3c:93:aa:a2:9b:91: 0c:4d:d4:d4:af:1a:40:ec:06:6e:f7:b0:51:34:f7: db:32:b8:85:5c:b4:09:c6:4b:e8:27:8e:e0:89:c3: d0:a2:c2:0d:d4:da:d0:92:c1:28:f0:f8:74:cb:d3: 1c:52:72:30:5f:54:36:67:41:86:2d:91:6e:cd:dc: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A7:B2:75:0B:21:AB:9C:15:80:F1:68:C1:A1:FC:91:27:6E:94:91 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/QqeydQshq5wVgPFowaH8kSdulJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6781::/48 2a14:6781:f000::/36 Signature Algorithm: sha256WithRSAEncryption 85:f0:c4:d1:40:26:db:c7:99:06:c5:7e:0e:8b:29:f9:89:43: cb:ab:ae:ad:8d:36:09:3d:c7:b6:90:30:6c:44:db:5f:f6:10: 2d:7f:23:e3:9a:d7:77:78:08:32:ce:58:e8:88:94:86:f7:d9: c2:6a:ba:3c:18:56:ac:30:c4:f3:10:17:94:fb:88:5f:c0:8a: e2:8a:b9:3c:00:c0:1a:81:40:11:11:fa:70:d1:e7:99:63:3a: 72:ef:39:3f:17:b3:ff:06:88:52:a5:5f:48:0b:23:03:f4:93: d5:6f:f0:4f:59:89:9b:46:53:cd:c0:4d:9e:f2:fa:7f:1b:26: ef:9e:11:79:7b:55:eb:09:e0:98:05:99:f1:e3:7b:1d:17:d1: 89:ab:f0:21:25:d6:8c:ea:fa:28:58:fd:65:e6:8d:9d:0a:d7: 02:7e:e8:e2:d3:c6:90:34:16:6a:ed:71:c6:cd:c7:88:a4:8c: d1:e0:b8:24:36:a2:6c:07:3a:a3:86:69:7a:02:3f:f4:95:aa: 30:d5:87:a9:69:d2:34:54:6e:16:8f:b8:f0:c1:e5:f1:a3:f4: 26:0b:a1:d9:ac:9c:dc:17:ea:b7:be:e8:1d:82:8c:66:31:54: 03:28:0e:a9:e6:9a:1d:cb:08:73:24:b6:cc:41:dd:a4:b0:b3: e5:2b:2c:8b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZuNn3DzrogVANTEjTPKiJJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTA1MTAwNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmE3YjI3NTBiMjFhYjljMTU4MGYxNjhjMWExZmM5MTI3NmU5NDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotX/XKh5PJCYnYehkHTwNZCnIvSl mKBn+e5kF7WmjKsODc4KD7Fo6HsXqFPZ374KCQEfRmkqrhW/dmysrgddL0l52ppB G9T9LetO1G1uAdFpNrYo71OBh9ZHMqSJB1pV/FsJXRfptmLfggCZ3YXDlvq5kthk j9KsHQ9cjvHSI118nISflWEVLL8z2TZQ/Zv6KplCPG5Zs1cjAbPaRTVpMJo+vX/B I04tkWhyb8vzVZDLN5+wDtkqWdrd0XE8k6qim5EMTdTUrxpA7AZu97BRNPfbMriF XLQJxkvoJ47gicPQosIN1NrQksEo8Ph0y9McUnIwX1Q2Z0GGLZFuzdxDxQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFEKnsnULIaucFYDxaMGh/JEnbpSRMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvUXFleWRRc2hxNXdWZ1BGb3dhSDhrU2R1bEpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhRngQAA AwYEKhRngfAwDQYJKoZIhvcNAQELBQADggEBAIXwxNFAJtvHmQbFfg6LKfmJQ8ur rq2NNgk9x7aQMGxE21/2EC1/I+Oa13d4CDLOWOiIlIb32cJqujwYVqwwxPMQF5T7 iF/AiuKKuTwAwBqBQBER+nDR55ljOnLvOT8Xs/8GiFKlX0gLIwP0k9Vv8E9ZiZtG U83ATZ7y+n8bJu+eEXl7VesJ4JgFmfHjex0X0Ymr8CEl1ozq+ihY/WXmjZ0K1wJ+ 6OLTxpA0FmrtccbNx4ikjNHguCQ2omwHOqOGaXoCP/SVqjDVh6lp0jRUbhaPuPDB 5fGj9CYLodmsnNwX6re+6B2CjGYxVAMoDqnmmh3LCHMktsxB3aSws+UrLIs= -----END CERTIFICATE-----Generated at Wed Jan 21 11:10:00 2026 by rpki-client