This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/qW9AF__zUvkNDM1hwnTXNbw4MmE.roa File: qW9AF__zUvkNDM1hwnTXNbw4MmE.roa (raw, json) Hash identifier: L8YbidEFG/0Uh1hABI0PUB51vRjUgh6q12O5a/Ue0jc= Subject key identifier: A9:6F:40:17:FF:F3:52:F9:0D:0C:CD:61:C2:74:D7:35:BC:38:32:61 Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519 Certificate serial: 019B7AC8CF60E31402EB985E003DB9EB0B28 Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/qW9AF__zUvkNDM1hwnTXNbw4MmE.roa Signing time: Thu 01 Jan 2026 18:18:59 +0000 ROA not before: Thu 01 Jan 2026 18:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56656 IP address blocks: 31.134.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cf:60:e3:14:02:eb:98:5e:00:3d:b9:eb:0b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519 Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a96f4017fff352f90d0ccd61c274d735bc383261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:9e:fd:0f:88:ec:33:cc:14:78:47:ad:73: 95:4b:c1:3d:1d:1e:c2:3c:08:fa:e7:63:b5:a1:86: bf:ee:70:a8:d9:03:95:b7:be:c3:25:db:16:d2:77: 47:47:fa:7d:97:1a:00:30:e8:27:cf:e9:2f:79:1b: a7:de:22:77:ef:37:ff:00:cc:2f:f9:f4:df:48:7b: 27:9b:4b:1b:9f:1a:54:c1:d3:79:75:be:8c:a4:2a: c5:1a:dc:17:a8:71:b1:20:c2:d5:54:fa:b9:9a:53: 91:d6:c5:03:b0:9a:b6:1b:56:ed:48:4e:9e:95:d5: 8b:04:d8:fc:25:2e:26:27:ba:29:6b:cb:d6:24:18: c6:10:f4:0b:5b:7e:12:4f:b7:2f:8f:03:f0:7c:b7: fd:82:a5:86:66:21:df:eb:a9:1e:36:67:04:21:9c: 24:6d:ec:be:98:bd:34:e5:bc:b4:e4:b4:17:8b:4d: 17:6a:d8:cb:a6:6f:08:ef:8c:9b:87:35:34:9f:8f: f6:01:81:c8:be:b7:43:0c:51:df:05:0b:80:9f:43: b3:ec:4f:82:0f:27:33:5e:13:e0:88:fb:92:0f:9d: 28:c4:69:a1:c2:88:84:2c:6c:f4:f6:02:4a:8e:63: 7d:ea:6c:5b:d8:b8:eb:8c:0d:78:8c:77:f7:80:39: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:40:17:FF:F3:52:F9:0D:0C:CD:61:C2:74:D7:35:BC:38:32:61 X509v3 Authority Key Identifier: keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/qW9AF__zUvkNDM1hwnTXNbw4MmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.96.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:8f:e7:a9:b5:02:c2:43:b5:00:7e:9c:e4:48:ce:a9:8b:63: fc:c3:74:84:7d:ca:e3:3d:aa:fa:b8:18:bd:81:17:91:08:26: 6d:5d:b3:67:5f:0f:c0:84:78:10:a2:f9:56:5a:d9:27:86:a0: d3:b9:7b:92:e3:42:09:e8:b7:7e:b1:e6:96:47:ae:27:30:b7: 95:ce:8e:dd:bb:bd:52:f8:34:2a:69:6e:16:1e:11:d3:31:8e: 32:5e:aa:70:ff:16:1a:c7:92:c7:73:02:6f:3d:a0:ed:19:a2: 35:73:29:bd:07:03:c0:e3:d2:b8:b3:b6:79:46:b2:95:6a:f5: 51:bd:81:2e:4b:ab:c7:87:eb:0d:33:48:a9:81:c8:53:c6:3a: 41:86:09:06:ca:be:41:1e:8f:00:a8:b0:02:93:b5:b3:36:14: 39:2b:a9:57:1e:88:74:4a:42:fa:5d:5a:80:cc:cb:d0:0d:05: 9d:b6:b1:55:6a:4c:b8:61:69:1a:89:c3:43:46:c1:76:8e:6e: f8:af:9c:97:bd:64:6d:ac:e9:1d:81:fe:0d:7e:8b:00:ca:dc: e1:82:92:7c:67:b7:17:c2:b2:8d:5c:4b:7f:e9:91:73:e2:d9: 24:ae:f9:59:42:e2:65:99:9d:89:76:e1:60:00:1a:2c:75:c1: a9:10:67:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yM9g4xQC65heAD256wsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTQzNzBjNGJhOWJkZTJiOTgzNzZiZjhmOTQyYTk0OTI2 YzE1MTkwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTZmNDAxN2ZmZjM1MmY5MGQwY2NkNjFjMjc0ZDczNWJjMzgzMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Ge/Q+I7DPMFHhHrXOVS8E9HR7C PAj652O1oYa/7nCo2QOVt77DJdsW0ndHR/p9lxoAMOgnz+kveRun3iJ37zf/AMwv +fTfSHsnm0sbnxpUwdN5db6MpCrFGtwXqHGxIMLVVPq5mlOR1sUDsJq2G1btSE6e ldWLBNj8JS4mJ7opa8vWJBjGEPQLW34ST7cvjwPwfLf9gqWGZiHf66keNmcEIZwk bey+mL005by05LQXi00XatjLpm8I74ybhzU0n4/2AYHIvrdDDFHfBQuAn0Oz7E+C DyczXhPgiPuSD50oxGmhwoiELGz09gJKjmN96mxb2LjrjA14jHf3gDk1dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlvQBf/81L5DQzNYcJ01zW8ODJhMB8GA1UdIwQY MBaAFGpUNwxLqb3iuYN2v4+UKpSSbBUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmIt NTAzYjk5ZDVhZDY4LzEvcVc5QUZfX3pVdmtORE0xaHduVFhOYnc0TW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmItNTAzYjk5ZDVhZDY4 LzEvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4ZgMA0G CSqGSIb3DQEBCwUAA4IBAQAMj+eptQLCQ7UAfpzkSM6pi2P8w3SEfcrjPar6uBi9 gReRCCZtXbNnXw/AhHgQovlWWtknhqDTuXuS40IJ6Ld+seaWR64nMLeVzo7du71S +DQqaW4WHhHTMY4yXqpw/xYax5LHcwJvPaDtGaI1cym9BwPA49K4s7Z5RrKVavVR vYEuS6vHh+sNM0ipgchTxjpBhgkGyr5BHo8AqLACk7WzNhQ5K6lXHoh0SkL6XVqA zMvQDQWdtrFVaky4YWkaicNDRsF2jm74r5yXvWRtrOkdgf4NfosAytzhgpJ8Z7cX wrKNXEt/6ZFz4tkkrvlZQuJlmZ2JduFgABosdcGpEGcz -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:18 2026 by rpki-client