This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/0_QYSKDM1E8AIeaj5A3-e2-IZDQ.roa File: 0_QYSKDM1E8AIeaj5A3-e2-IZDQ.roa (raw, json) Hash identifier: iSrziuFWhwGiTIYynmk/3TshTVjLewHwXF7ynz9OoD4= Subject key identifier: D3:F4:18:48:A0:CC:D4:4F:00:21:E6:A3:E4:0D:FE:7B:6F:88:64:34 Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Certificate serial: 019B7C8030573036B5D4147EEB050143AA74 Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/0_QYSKDM1E8AIeaj5A3-e2-IZDQ.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a02:ed1:cc::/48 maxlen: 48 2a02:ed1:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:30:57:30:36:b5:d4:14:7e:eb:05:01:43:aa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3f41848a0ccd44f0021e6a3e40dfe7b6f886434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:ea:3e:b4:4c:c9:be:03:61:51:da:24:8f: ac:47:a4:f4:9f:de:b7:a7:f8:99:59:4d:ae:1c:72: d0:e8:27:29:69:8b:54:20:82:c1:49:02:9b:30:61: 97:d1:fe:db:42:c5:4c:1b:85:19:af:ef:10:f6:d9: fd:52:1f:d8:64:b9:98:67:5f:52:d5:d9:d5:8d:2c: ac:d8:9a:a7:7f:78:46:3a:86:8f:4e:80:f7:c9:ef: 6b:a6:72:e7:94:da:35:4f:39:5a:2d:f2:3c:d7:90: 9d:b3:5c:64:6c:ef:32:d1:00:10:72:3b:14:28:83: bf:a4:ee:af:de:06:47:9f:dd:0d:d9:f9:0d:bf:8f: 24:9a:2e:95:59:bc:a8:9f:c2:73:93:67:2d:10:1b: 3f:d2:db:6c:aa:e5:de:ba:8d:f7:e9:ed:88:a4:0a: 05:7b:db:ff:6c:03:6c:04:0a:f8:bd:e8:f8:11:4a: ca:91:b1:bc:8f:3a:61:b0:1a:68:32:8c:ca:b5:09: ff:bb:3c:f2:49:54:69:49:0a:3b:00:8c:8b:27:62: 57:60:b9:45:14:3e:d8:c0:7f:9f:8b:ef:bc:19:5c: 88:c3:b3:b6:0e:96:8f:5b:4c:7c:e5:01:ed:75:e8: ea:42:5b:37:f3:9f:7e:9d:62:e5:ff:c2:87:11:f3: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F4:18:48:A0:CC:D4:4F:00:21:E6:A3:E4:0D:FE:7B:6F:88:64:34 X509v3 Authority Key Identifier: keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/0_QYSKDM1E8AIeaj5A3-e2-IZDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ed1:cc::/48 2a02:ed1:ee::/48 Signature Algorithm: sha256WithRSAEncryption 03:11:13:9e:d7:45:1c:f9:58:f7:84:8c:58:0b:b1:da:63:92: c0:78:58:cc:6b:57:79:c1:fa:ab:33:2e:13:0c:d1:b3:34:4b: 3b:d7:c6:6a:87:62:46:82:b9:75:bc:67:f8:14:42:3a:8c:21: d1:84:bd:31:54:de:86:d4:4a:49:6a:10:3b:1a:7a:aa:65:c2: e3:a3:db:83:1d:5f:cf:b8:7d:f9:e4:a0:5c:65:5b:ef:c6:eb: 4b:89:75:ed:96:20:8e:c2:1c:cb:f6:61:39:d7:31:ea:9b:00: da:c1:91:fa:50:76:f2:b8:6e:dc:a5:3b:67:50:10:9c:0d:e3: c6:27:a9:dc:bc:20:8f:e3:fe:92:c1:13:25:12:3e:37:2e:38: 9a:a1:e3:f2:4f:53:87:c2:93:d2:e9:f8:29:46:81:dc:e8:ce: be:31:b4:ef:8a:da:20:08:33:e7:6e:8a:36:44:bc:0d:c0:a3: b4:96:f5:42:e9:bc:65:59:75:ce:d0:2e:b5:72:d6:52:21:51: bc:d3:df:85:64:d7:31:9f:06:12:1e:08:26:c7:3a:ab:9d:f6: d3:f6:83:c8:b6:a2:4f:25:29:34:a2:86:b7:aa:79:bd:03:fc: 29:a1:12:5e:af:2e:38:75:0a:53:ac:7e:49:69:4d:00:f7:3b: 8d:4e:1a:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDBXMDa11BR+6wUBQ6p0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzBhYTdiM2UzY2JmZjg4MjYyYWRkOTJiMzM5ZTM1MDUx Y2UxYTAwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2Y0MTg0OGEwY2NkNDRmMDAyMWU2YTNlNDBkZmU3YjZmODg2NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQnqPrRMyb4DYVHaJI+sR6T0n963 p/iZWU2uHHLQ6CcpaYtUIILBSQKbMGGX0f7bQsVMG4UZr+8Q9tn9Uh/YZLmYZ19S 1dnVjSys2Jqnf3hGOoaPToD3ye9rpnLnlNo1TzlaLfI815Cds1xkbO8y0QAQcjsU KIO/pO6v3gZHn90N2fkNv48kmi6VWbyon8Jzk2ctEBs/0ttsquXeuo336e2IpAoF e9v/bANsBAr4vej4EUrKkbG8jzphsBpoMozKtQn/uzzySVRpSQo7AIyLJ2JXYLlF FD7YwH+fi++8GVyIw7O2DpaPW0x85QHtdejqQls3859+nWLl/8KHEfOqaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNP0GEigzNRPACHmo+QN/ntviGQ0MB8GA1UdIwQY MBaAFPTAqns+PL/4gmKt2SsznjUFHOGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEt ZWE3NWRkZjQ3YjRhLzEvMF9RWVNLRE0xRThBSWVhajVBMy1lMi1JWkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEtZWE3NWRkZjQ3YjRh LzEvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgIO0QDM AwcAKgIO0QDuMA0GCSqGSIb3DQEBCwUAA4IBAQADEROe10Uc+Vj3hIxYC7HaY5LA eFjMa1d5wfqrMy4TDNGzNEs718Zqh2JGgrl1vGf4FEI6jCHRhL0xVN6G1EpJahA7 GnqqZcLjo9uDHV/PuH355KBcZVvvxutLiXXtliCOwhzL9mE51zHqmwDawZH6UHby uG7cpTtnUBCcDePGJ6ncvCCP4/6SwRMlEj43LjiaoePyT1OHwpPS6fgpRoHc6M6+ MbTvitogCDPnboo2RLwNwKO0lvVC6bxlWXXO0C61ctZSIVG809+FZNcxnwYSHggm xzqrnfbT9oPItqJPJSk0ooa3qnm9A/wpoRJery44dQpTrH5JaU0A9zuNThrh -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:30 2026 by rpki-client