This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/Q2DLWLGDEaWiiNckO3xm2gTZMxc.roa File: Q2DLWLGDEaWiiNckO3xm2gTZMxc.roa (raw, json) Hash identifier: fu6puCFSXOhmvdstgYFNniwp8CQNss2JS4c7MbUiXmA= Subject key identifier: 43:60:CB:58:B1:83:11:A5:A2:88:D7:24:3B:7C:66:DA:04:D9:33:17 Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a Certificate serial: 019B21971B9F4DFA31E8ED5858DE56D5619F Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/Q2DLWLGDEaWiiNckO3xm2gTZMxc.roa Signing time: Mon 15 Dec 2025 10:38:29 +0000 ROA not before: Mon 15 Dec 2025 10:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202909 IP address blocks: 2001:678:1180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:97:1b:9f:4d:fa:31:e8:ed:58:58:de:56:d5:61:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a Validity Not Before: Dec 15 10:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4360cb58b18311a5a288d7243b7c66da04d93317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:7e:f7:1c:c8:7e:ba:9b:5e:1d:d9:3c:4c: 2f:db:75:e3:63:fd:b8:61:9b:5e:0a:7f:cd:97:f4: 83:15:c7:f6:9b:f4:67:8d:d5:67:9d:83:1d:9a:f7: d4:7f:d4:20:cf:30:fe:f8:9b:78:77:86:77:0b:31: 04:a3:d2:55:80:4e:1e:ef:30:2f:ab:84:cc:43:c0: 86:2b:aa:82:7f:b3:dd:7d:a4:71:1b:68:91:b2:6a: f7:61:b8:73:d1:75:17:8d:a6:e7:66:11:75:20:0b: 20:76:a6:2f:7d:a5:58:c0:c5:5c:c6:fc:7b:e8:90: 69:e3:81:21:73:33:83:56:be:05:19:4c:0d:19:79: b3:90:93:b9:6d:6c:48:8f:64:c8:cf:1b:7b:9b:ad: 2b:52:5e:6c:3c:3a:a7:5c:c3:15:1c:34:82:35:df: 0f:85:ac:9f:6b:15:0a:59:39:36:47:99:9f:29:7b: 0a:a6:3e:4b:23:09:64:ea:49:da:57:a8:5f:bc:ce: f8:69:f4:ae:09:b4:cd:45:4d:63:f2:9e:ab:22:7b: a0:c7:6f:f3:58:5c:8f:00:22:0e:8c:df:c6:6d:cb: 0b:87:05:82:6b:7e:ec:ab:f7:93:5f:1a:01:90:64: 58:9b:89:12:0d:47:2f:29:00:09:05:e6:9c:17:49: d8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:60:CB:58:B1:83:11:A5:A2:88:D7:24:3B:7C:66:DA:04:D9:33:17 X509v3 Authority Key Identifier: keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/Q2DLWLGDEaWiiNckO3xm2gTZMxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1180::/48 Signature Algorithm: sha256WithRSAEncryption cc:46:76:34:65:36:de:7f:91:37:51:e8:0e:70:18:74:ff:20: bc:47:28:dd:33:69:4a:51:2e:1d:ca:51:13:93:6f:d3:c0:99: 63:c1:f3:43:16:07:b0:ea:99:b7:62:e9:8b:ca:64:06:ed:c3: 70:82:d8:b1:6c:98:74:7b:fe:bc:72:30:96:7c:ba:ea:b3:d2: 02:e9:8f:9a:5d:cc:f7:c2:44:7c:11:fe:27:84:5c:5f:a3:8b: 8c:3f:3c:89:5d:f3:a5:24:69:41:cd:7a:bd:19:0c:e1:d2:7f: 37:3a:a2:b7:e1:1d:d7:4b:34:69:f7:40:10:5f:29:19:60:0d: fb:82:45:5e:b1:7b:4d:67:93:77:ab:ba:7c:65:23:b4:dd:97: c2:8b:8f:1c:f3:d9:28:76:c2:67:7a:00:91:af:c3:24:c9:fd: 94:52:12:b1:47:37:d9:35:77:c2:99:8a:63:11:21:ec:07:b3: 60:9e:8d:5e:55:a0:72:c9:98:42:aa:ca:c3:4b:94:77:97:b3: 26:f9:24:fa:2a:ec:58:93:5f:4f:d6:7f:c5:83:4f:b3:71:26: 70:06:b2:2c:f5:a7:2a:e1:f6:64:bb:82:d3:15:b5:59:cb:43: d8:f3:55:a3:89:f5:7a:df:a8:28:2a:6a:86:02:61:07:a0:31: 2e:7a:12:86 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZshlxufTfox6O1YWN5W1WGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Y2JhOTgxY2U1OGExMGVkZDJjOTk4MDFlMDQzYWQ4MDRh ODVmOWEwHhcNMjUxMjE1MTAzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzYwY2I1OGIxODMxMWE1YTI4OGQ3MjQzYjdjNjZkYTA0ZDkzMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTN+9xzIfrqbXh3ZPEwv23XjY/24 YZteCn/Nl/SDFcf2m/RnjdVnnYMdmvfUf9QgzzD++Jt4d4Z3CzEEo9JVgE4e7zAv q4TMQ8CGK6qCf7PdfaRxG2iRsmr3Ybhz0XUXjabnZhF1IAsgdqYvfaVYwMVcxvx7 6JBp44EhczODVr4FGUwNGXmzkJO5bWxIj2TIzxt7m60rUl5sPDqnXMMVHDSCNd8P hayfaxUKWTk2R5mfKXsKpj5LIwlk6knaV6hfvM74afSuCbTNRU1j8p6rInugx2/z WFyPACIOjN/GbcsLhwWCa37sq/eTXxoBkGRYm4kSDUcvKQAJBeacF0nYKwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFENgy1ixgxGloojXJDt8ZtoE2TMXMB8GA1UdIwQY MBaAFMfLqYHOWKEO3SyZgB4EOtgEqF+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEt ZDlhMWJmMTBjNTdmLzEvUTJETFdMR0RFYVdpaU5ja08zeG0yZ1RaTXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEtZDlhMWJmMTBjNTdm LzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGA MA0GCSqGSIb3DQEBCwUAA4IBAQDMRnY0ZTbef5E3UegOcBh0/yC8RyjdM2lKUS4d ylETk2/TwJljwfNDFgew6pm3YumLymQG7cNwgtixbJh0e/68cjCWfLrqs9IC6Y+a Xcz3wkR8Ef4nhFxfo4uMPzyJXfOlJGlBzXq9GQzh0n83OqK34R3XSzRp90AQXykZ YA37gkVesXtNZ5N3q7p8ZSO03ZfCi48c89kodsJnegCRr8Mkyf2UUhKxRzfZNXfC mYpjESHsB7Ngno1eVaByyZhCqsrDS5R3l7Mm+ST6KuxYk19P1n/Fg0+zcSZwBrIs 9acq4fZku4LTFbVZy0PY81WjifV636goKmqGAmEHoDEuehKG -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:19 2025 by rpki-client