This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/qp1FBJGBC3T0wFz_sf0nu2OPHrc.roa File: qp1FBJGBC3T0wFz_sf0nu2OPHrc.roa (raw, json) Hash identifier: XU0Zg/9I708k3OyT919uPrErmEddz4YrPPmgHTVL7Lw= Subject key identifier: AA:9D:45:04:91:81:0B:74:F4:C0:5C:FF:B1:FD:27:BB:63:8F:1E:B7 Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Certificate serial: 019B783439D8E3C3CECD63D36258E07635CF Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/qp1FBJGBC3T0wFz_sf0nu2OPHrc.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214895 IP address blocks: 2a13:2a40::/29 maxlen: 29 2a13:3d40::/29 maxlen: 29 2a13:3dc0::/29 maxlen: 29 2a14:5900::/29 maxlen: 29 2a14:5b00::/29 maxlen: 29 2a14:5d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:39:d8:e3:c3:ce:cd:63:d3:62:58:e0:76:35:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa9d450491810b74f4c05cffb1fd27bb638f1eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:4e:0c:35:cc:e2:74:54:cc:15:bc:9a:17: 19:14:c5:27:b9:7f:23:19:ef:24:46:e4:ad:1d:b6: cc:4d:a0:4d:f6:10:e8:69:2e:79:c6:3c:e0:9e:5b: 5c:7c:b2:dd:11:f0:e5:81:32:5b:a5:26:1c:d8:7c: 08:e0:bc:71:63:0a:6c:53:60:cb:cc:7a:6e:a4:dc: 39:59:b9:a3:d3:57:1e:64:05:5f:e8:87:18:af:64: d5:bf:f0:cc:5f:c2:2b:0c:97:04:5a:6d:f6:3e:6b: d5:a5:84:78:59:e7:4c:c6:96:b4:a9:4d:5c:e4:49: 73:ba:15:10:eb:fd:94:12:90:a8:44:b0:8e:ed:a7: 19:51:4a:8a:f1:8a:35:02:8f:75:5f:92:53:fd:29: e2:1a:0e:4a:f0:be:2e:84:45:6c:ef:ca:32:09:a5: cb:0b:9b:2b:a7:f7:b3:ef:8e:00:91:0f:42:55:3d: 28:fd:19:0c:1f:fa:03:9a:00:5a:49:58:87:b3:f4: bd:2b:cb:d1:1c:bd:ff:62:3a:f8:5f:b8:8b:60:3c: 34:d8:a1:7a:ad:fc:54:95:0a:c4:51:79:c1:cd:fa: 7a:d1:54:d4:35:87:40:e0:4f:53:57:4a:b2:b9:48: d4:07:5c:ca:39:a3:19:1e:12:8a:b0:b3:3c:2c:7b: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9D:45:04:91:81:0B:74:F4:C0:5C:FF:B1:FD:27:BB:63:8F:1E:B7 X509v3 Authority Key Identifier: keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/qp1FBJGBC3T0wFz_sf0nu2OPHrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2a40::/29 2a13:3d40::/29 2a13:3dc0::/29 2a14:5900::/29 2a14:5b00::/29 2a14:5d00::/29 Signature Algorithm: sha256WithRSAEncryption 49:47:84:cd:14:bc:c6:c9:8b:c1:0e:ea:76:b4:03:3e:76:aa: a0:1a:85:e4:da:ad:a3:78:c9:b9:31:d4:82:e6:83:b6:36:e1: 3a:27:21:f3:8c:2c:95:35:d8:80:04:e1:06:2f:7f:6c:f7:71: 44:71:0d:3f:16:39:be:68:2a:89:2a:1f:37:c6:66:19:49:31: 5f:42:0d:63:44:e7:0f:2c:1c:a6:0b:ba:a2:25:b2:f2:8b:2f: 9e:4e:18:cb:f2:0e:a6:8f:8c:ab:10:2f:15:c8:e7:7b:76:6c: 7e:c4:e0:f0:59:ea:5e:4e:c3:44:70:20:34:7a:e2:72:00:a0: f5:9e:77:fa:34:19:f5:6c:a6:fc:dc:c6:29:20:5a:a3:19:bd: c8:d6:d8:49:dc:28:74:f3:4e:44:d7:e4:47:c0:f6:7f:5e:29: 4e:0b:80:24:20:2d:52:ba:29:af:70:8e:fc:7e:bd:d8:74:7f: b0:27:ab:ad:3c:cd:60:d1:f4:a2:14:d3:ec:38:00:c5:e6:48: 63:4e:1e:90:15:32:aa:62:8f:54:82:58:ac:ee:54:ac:e9:3f: d7:70:4f:6f:e5:79:51:70:e8:35:6a:2f:10:5c:f7:bf:7c:3d: 70:90:70:52:bc:88:b1:33:bf:6d:bb:03:b4:c3:83:77:b2:af: fd:b5:44:a6 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NDnY48POzWPTYljgdjXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODU2YzMwODJhYjJmYzhkZDFiMzU5YTdiMzk5MTM2ODUz OGI0ZDAwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTlkNDUwNDkxODEwYjc0ZjRjMDVjZmZiMWZkMjdiYjYzOGYxZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpVODDXM4nRUzBW8mhcZFMUnuX8j Ge8kRuStHbbMTaBN9hDoaS55xjzgnltcfLLdEfDlgTJbpSYc2HwI4LxxYwpsU2DL zHpupNw5Wbmj01ceZAVf6IcYr2TVv/DMX8IrDJcEWm32PmvVpYR4WedMxpa0qU1c 5ElzuhUQ6/2UEpCoRLCO7acZUUqK8Yo1Ao91X5JT/SniGg5K8L4uhEVs78oyCaXL C5srp/ez744AkQ9CVT0o/RkMH/oDmgBaSViHs/S9K8vRHL3/Yjr4X7iLYDw02KF6 rfxUlQrEUXnBzfp60VTUNYdA4E9TV0qyuUjUB1zKOaMZHhKKsLM8LHtpJwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFKqdRQSRgQt09MBc/7H9J7tjjx63MB8GA1UdIwQY MBaAFOGFbDCCqy/I3Rs1mns5kTaFOLTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmIt OGVhYTZiZjQwMzU3LzEvcXAxRkJKR0JDM1Qwd0Z6X3NmMG51Mk9QSHJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmItOGVhYTZiZjQwMzU3 LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKhMqQAMF AyoTPUADBQMqEz3AAwUDKhRZAAMFAyoUWwADBQMqFF0AMA0GCSqGSIb3DQEBCwUA A4IBAQBJR4TNFLzGyYvBDup2tAM+dqqgGoXk2q2jeMm5MdSC5oO2NuE6JyHzjCyV NdiABOEGL39s93FEcQ0/Fjm+aCqJKh83xmYZSTFfQg1jROcPLBymC7qiJbLyiy+e ThjL8g6mj4yrEC8VyOd7dmx+xODwWepeTsNEcCA0euJyAKD1nnf6NBn1bKb83MYp IFqjGb3I1thJ3Ch0805E1+RHwPZ/XilOC4AkIC1SuimvcI78fr3YdH+wJ6utPM1g 0fSiFNPsOADF5khjTh6QFTKqYo9Uglis7lSs6T/XcE9v5XlRcOg1ai8QXPe/fD1w kHBSvIixM79tuwO0w4N3sq/9tUSm -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:31 2026 by rpki-client