This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/qKI5wAG2ROLePU2bxpTliU4_gOI.roa File: qKI5wAG2ROLePU2bxpTliU4_gOI.roa (raw, json) Hash identifier: 6rZKevOcyvBG0z3M8yuHlYMNPd59EunB5hcmpuXshjQ= Subject key identifier: A8:A2:39:C0:01:B6:44:E2:DE:3D:4D:9B:C6:94:E5:89:4E:3F:80:E2 Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a Certificate serial: 019B7DCADAB67B377676980F0DF8A9DECC32 Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/qKI5wAG2ROLePU2bxpTliU4_gOI.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41709 IP address blocks: 2001:67c:26f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:da:b6:7b:37:76:76:98:0f:0d:f8:a9:de:cc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8a239c001b644e2de3d4d9bc694e5894e3f80e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:41:94:35:da:e3:3c:33:29:78:56:88:0c: a8:8f:65:ed:33:30:9c:38:1d:fc:9d:21:11:4c:ca: 66:9e:b5:2d:c9:6b:75:2a:6f:9d:c5:c5:5e:a7:15: 21:56:3b:0d:69:72:5d:5c:c4:ba:5d:09:55:e3:60: 1d:1b:69:30:9c:2b:55:3a:9e:dd:59:58:8e:dc:40: 1b:64:c4:10:f2:66:2d:25:04:9a:7e:1a:c2:86:c3: dd:92:6b:b8:e0:b2:cd:eb:b8:2d:2a:08:26:42:55: a8:00:f6:82:1e:57:96:21:07:47:e0:39:92:c3:b2: de:83:87:4a:db:1a:a0:55:9f:9c:67:1e:f1:91:d5: 6f:43:b8:25:95:a0:2a:a4:59:71:b4:c5:d6:d3:ab: a4:2d:e6:01:31:55:b4:bc:4b:f7:98:77:62:2d:07: ac:09:ac:2c:72:8b:2b:fb:18:b9:32:fb:fa:f0:c6: 25:42:17:af:fb:3c:e4:ee:64:15:6d:eb:fd:fc:95: 3a:df:6f:37:75:5e:40:80:06:18:55:0f:21:b5:a6: 6b:bd:76:d5:34:dd:6f:0d:8e:0e:33:ca:11:31:27: 2b:3c:b9:22:99:ee:f9:ad:33:59:65:6b:e0:43:62: c6:73:4b:f2:35:7b:9d:ed:36:31:61:59:3b:0e:09: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:39:C0:01:B6:44:E2:DE:3D:4D:9B:C6:94:E5:89:4E:3F:80:E2 X509v3 Authority Key Identifier: keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/qKI5wAG2ROLePU2bxpTliU4_gOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:26f8::/48 Signature Algorithm: sha256WithRSAEncryption 20:4f:b3:21:2d:a8:8b:fc:ae:6e:b0:81:66:9d:59:e2:8e:32: 5b:53:f8:22:f2:5a:f9:e6:84:4d:50:b6:f4:1c:b1:8d:e5:b3: c8:07:98:d7:b5:5e:d7:4a:eb:6f:8e:ad:dd:37:8c:c6:cd:57: 3d:3e:5b:43:a3:dc:04:8f:97:d2:d9:6a:39:4c:bd:b9:18:04: d2:8b:cc:8b:96:85:f0:1c:95:88:c1:1c:0c:1c:40:ab:28:cc: aa:dd:b7:10:2d:07:f5:4e:73:16:24:a6:bc:35:a2:51:ef:42: 00:b6:3f:ff:c4:d3:f6:73:63:1b:8e:12:a2:08:39:d1:5b:c7: 11:eb:a4:18:cd:a0:5d:2e:4e:0c:ed:80:59:71:4a:af:31:37: 78:29:8f:1f:c4:d0:90:66:9a:8e:3d:e8:56:25:e7:2d:32:8f: f2:30:12:d6:59:c5:26:a9:68:76:ef:a5:47:23:24:e9:bb:4b: d5:8e:a2:15:f1:b3:a8:ab:15:c6:d3:15:b8:dc:19:99:f9:b1: c4:91:13:ea:3a:80:45:c4:86:3f:80:83:4a:eb:f8:c7:95:0d: db:7d:84:b0:7e:5e:1a:8c:de:5f:cb:d6:9f:b3:a7:68:71:c5: e1:41:90:a2:02:09:29:d7:1e:a4:87:05:d1:bc:ed:3e:fe:ae: 9f:85:a4:96 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ytq2ezd2dpgPDfip3swyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTY3YTc3NDczNjVjODE5ZGU2MDc2ZjdmNWFhMGJhM2M5 ZTU5OGEwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGEyMzljMDAxYjY0NGUyZGUzZDRkOWJjNjk0ZTU4OTRlM2Y4MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSdBlDXa4zwzKXhWiAyoj2XtMzCc OB38nSERTMpmnrUtyWt1Km+dxcVepxUhVjsNaXJdXMS6XQlV42AdG2kwnCtVOp7d WViO3EAbZMQQ8mYtJQSafhrChsPdkmu44LLN67gtKggmQlWoAPaCHleWIQdH4DmS w7Leg4dK2xqgVZ+cZx7xkdVvQ7gllaAqpFlxtMXW06ukLeYBMVW0vEv3mHdiLQes Cawscosr+xi5Mvv68MYlQhev+zzk7mQVbev9/JU63283dV5AgAYYVQ8htaZrvXbV NN1vDY4OM8oRMScrPLkime75rTNZZWvgQ2LGc0vyNXud7TYxYVk7Dgk5iQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKiiOcABtkTi3j1Nm8aU5YlOP4DiMB8GA1UdIwQY MBaAFDKWendHNlyBneYHb39aoLo8nlmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQt MmFjOGJjZDgzNTUwLzEvcUtJNXdBRzJST0xlUFUyYnhwVGxpVTRfZ09JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQtMmFjOGJjZDgzNTUw LzEvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCb4 MA0GCSqGSIb3DQEBCwUAA4IBAQAgT7MhLaiL/K5usIFmnVnijjJbU/gi8lr55oRN ULb0HLGN5bPIB5jXtV7XSutvjq3dN4zGzVc9PltDo9wEj5fS2Wo5TL25GATSi8yL loXwHJWIwRwMHECrKMyq3bcQLQf1TnMWJKa8NaJR70IAtj//xNP2c2MbjhKiCDnR W8cR66QYzaBdLk4M7YBZcUqvMTd4KY8fxNCQZpqOPehWJectMo/yMBLWWcUmqWh2 76VHIyTpu0vVjqIV8bOoqxXG0xW43BmZ+bHEkRPqOoBFxIY/gINK6/jHlQ3bfYSw fl4ajN5fy9afs6doccXhQZCiAgkp1x6khwXRvO0+/q6fhaSW -----END CERTIFICATE-----Generated at Tue Jan 27 07:43:47 2026 by rpki-client