This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qHI-i9e-LEj28TmbgQWuV5wKlhM.roa File: qHI-i9e-LEj28TmbgQWuV5wKlhM.roa (raw, json) Hash identifier: okrYNBNLNMBx4Zd901c36nv0ybvuNoMv3WkOMCQRYYM= Subject key identifier: A8:72:3E:8B:D7:BE:2C:48:F6:F1:39:9B:81:05:AE:57:9C:0A:96:13 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EC0EC234663739E7FA8CEAC76C5E9 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qHI-i9e-LEj28TmbgQWuV5wKlhM.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216173 IP address blocks: 2a0e:aa07:e130::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c0:ec:23:46:63:73:9e:7f:a8:ce:ac:76:c5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8723e8bd7be2c48f6f1399b8105ae579c0a9613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5e:05:e9:01:21:d2:c2:9a:08:03:ec:b4:96: f5:93:3b:24:a8:b7:4b:06:0a:99:71:28:1e:e1:be: 5c:0b:2d:97:6b:64:13:c4:b4:f0:15:17:4a:54:90: 25:1a:aa:30:fd:49:69:c4:68:c2:bd:8e:bf:77:4c: 7e:d3:0c:c8:a1:7b:7b:6e:cf:d7:dd:0a:18:d3:66: 49:64:e0:7e:51:89:86:76:d5:9d:cb:e8:9f:cc:88: f6:83:39:6f:a0:c3:36:60:a8:e1:22:b2:15:c5:0c: 51:4d:40:53:4a:de:b9:e1:74:c4:eb:59:df:e1:f0: 83:2d:fa:2b:d9:50:14:bf:2b:fd:58:1d:0f:72:c9: af:a1:3f:08:78:f6:a3:44:1e:e2:90:86:60:6d:80: 13:ff:64:73:e4:f8:d2:7e:c9:44:b0:37:a0:35:79: 16:e4:b5:97:08:9e:07:04:b5:a9:ad:fe:75:cb:a3: 87:08:aa:f6:4e:df:09:6a:b6:1b:50:ab:db:d7:05: 99:7f:dd:43:a9:9d:59:6b:96:ea:7b:98:cc:cb:0d: 29:b8:aa:2d:67:68:07:a3:53:2b:f0:80:b4:e9:49: e6:69:99:ad:47:9b:b5:54:9b:4e:30:ed:d1:f0:67: 89:b4:34:56:e6:4a:1d:b9:c0:fe:8c:57:16:ff:f7: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:3E:8B:D7:BE:2C:48:F6:F1:39:9B:81:05:AE:57:9C:0A:96:13 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qHI-i9e-LEj28TmbgQWuV5wKlhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e130::/44 Signature Algorithm: sha256WithRSAEncryption ab:52:db:eb:e7:d8:9c:32:7c:00:1a:47:ca:26:0c:d3:85:67: 9b:91:53:81:6c:c6:df:9c:45:97:9e:57:ee:a1:e0:4e:64:dd: 7a:88:0c:5c:db:93:8d:41:bf:39:f4:21:00:aa:4a:bd:58:88: e4:40:de:f3:f2:41:ac:a3:f3:1f:30:6b:cb:02:c3:78:e4:eb: 98:ca:8b:1e:34:6d:1b:18:c8:72:5c:0b:1d:8e:2f:43:ac:7b: 1c:48:ec:18:0e:fb:8d:94:12:fc:89:d9:7b:76:0c:dd:45:f6: 56:00:65:04:ac:5b:32:ef:51:ef:ed:7d:b5:8c:65:19:29:b2: 8e:fd:a4:94:00:ab:3c:36:91:0e:d1:f6:25:c5:01:63:a3:59: 72:e8:2e:cf:36:d8:f6:bb:13:a9:42:54:be:8e:7a:bd:ca:3e: 87:b9:34:3b:23:ad:f2:13:d6:e0:80:da:d8:01:8b:cb:47:aa: b6:80:60:09:66:f3:ea:b2:96:47:41:ee:92:94:76:f5:93:dc: 95:87:34:23:1c:b8:cd:00:af:58:0d:cb:d1:fd:de:84:69:5d: d8:33:8c:79:86:a0:10:6f:0c:a7:24:ec:16:12:b4:44:38:af: 50:db:bf:8d:4c:6d:f6:f7:38:ca:c3:2d:a5:32:83:74:12:2b: 05:6b:85:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fsDsI0Zjc55/qM6sdsXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODcyM2U4YmQ3YmUyYzQ4ZjZmMTM5OWI4MTA1YWU1NzljMGE5NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V4F6QEh0sKaCAPstJb1kzskqLdL BgqZcSge4b5cCy2Xa2QTxLTwFRdKVJAlGqow/UlpxGjCvY6/d0x+0wzIoXt7bs/X 3QoY02ZJZOB+UYmGdtWdy+ifzIj2gzlvoMM2YKjhIrIVxQxRTUBTSt654XTE61nf 4fCDLfor2VAUvyv9WB0PcsmvoT8IePajRB7ikIZgbYAT/2Rz5PjSfslEsDegNXkW 5LWXCJ4HBLWprf51y6OHCKr2Tt8JarYbUKvb1wWZf91DqZ1Za5bqe5jMyw0puKot Z2gHo1Mr8IC06UnmaZmtR5u1VJtOMO3R8GeJtDRW5koducD+jFcW//e0qQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKhyPovXvixI9vE5m4EFrlecCpYTMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvcUhJLWk5ZS1MRWoyOFRtYmdRV3VWNXdLbGhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Ew MA0GCSqGSIb3DQEBCwUAA4IBAQCrUtvr59icMnwAGkfKJgzThWebkVOBbMbfnEWX nlfuoeBOZN16iAxc25ONQb859CEAqkq9WIjkQN7z8kGso/MfMGvLAsN45OuYyose NG0bGMhyXAsdji9DrHscSOwYDvuNlBL8idl7dgzdRfZWAGUErFsy71Hv7X21jGUZ KbKO/aSUAKs8NpEO0fYlxQFjo1ly6C7PNtj2uxOpQlS+jnq9yj6HuTQ7I63yE9bg gNrYAYvLR6q2gGAJZvPqspZHQe6SlHb1k9yVhzQjHLjNAK9YDcvR/d6EaV3YM4x5 hqAQbwynJOwWErREOK9Q27+NTG329zjKwy2lMoN0EisFa4XQ -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:10 2026 by rpki-client