This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/q365Cy2yH-xm97Eh4lxQEVLotIs.roa File: q365Cy2yH-xm97Eh4lxQEVLotIs.roa (raw, json) Hash identifier: 8b9LI13HlYpHjB5Xe5oOMJ0aFAreOnkTi540AjF4V/Q= Subject key identifier: AB:7E:B9:0B:2D:B2:1F:EC:66:F7:B1:21:E2:5C:50:11:52:E8:B4:8B Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910AE7865BC01D786982FB66432651A Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/q365Cy2yH-xm97Eh4lxQEVLotIs.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213898 IP address blocks: 2a12:bec4:15e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ae:78:65:bc:01:d7:86:98:2f:b6:64:32:65:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab7eb90b2db21fec66f7b121e25c501152e8b48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:9c:e5:f7:a4:e7:56:25:dd:5c:45:29:44: b0:91:6b:50:88:d1:c3:ec:7a:f2:d1:79:01:3c:bc: f4:2d:a1:1a:b7:fe:d8:03:8b:03:9d:66:ef:fe:c6: 58:be:e1:8e:8d:e0:d8:e9:22:01:ce:13:65:50:90: 8a:f5:75:b1:de:3d:ae:5e:24:e7:f9:c7:46:57:cb: 1a:16:c7:98:82:4c:bd:0f:1a:2f:13:62:b5:ef:1b: 6c:47:52:24:12:3a:33:7c:aa:17:36:a4:b2:9b:1d: 18:e7:0f:69:34:86:86:47:0f:9e:ba:35:1a:a7:cf: 5c:ce:48:3d:42:62:1c:10:7e:6e:39:8d:88:e7:23: 71:49:2d:3d:6f:8f:5b:c3:73:c8:32:e5:c5:44:ea: ec:f1:c8:b8:21:11:e8:1d:55:b5:03:9e:e6:1d:c1: a6:e7:04:6f:fa:82:3f:d8:73:85:b5:9c:ba:cb:68: 27:93:5d:4f:78:37:71:a6:0d:76:f7:8f:f1:54:e0: 86:cf:44:26:e0:80:25:a2:d4:48:f4:84:ef:56:cb: fc:fb:a3:95:bb:b3:16:83:21:5e:da:9f:ce:48:32: 1e:21:b7:8c:c3:16:59:17:b0:7e:1f:05:22:18:14: 13:9f:11:2d:f3:57:23:24:6d:41:d7:f8:ed:46:0e: c2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7E:B9:0B:2D:B2:1F:EC:66:F7:B1:21:E2:5C:50:11:52:E8:B4:8B X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/q365Cy2yH-xm97Eh4lxQEVLotIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:15e0::/44 Signature Algorithm: sha256WithRSAEncryption 78:32:02:47:51:ba:8a:42:f9:41:3f:79:1e:e6:b3:53:b0:95: c2:63:22:0e:3b:f0:a1:b2:01:cc:d0:80:b5:f8:4c:7c:1e:b2: e2:4d:f3:b4:29:18:9b:df:08:1a:c0:26:4a:05:0a:91:0d:d7: de:5d:17:4d:7d:e1:43:a4:46:c8:e1:75:17:d3:ce:48:08:2e: 4d:89:d8:07:dd:ff:cc:0f:1c:23:dc:0a:c8:e2:9d:62:11:07: 28:75:ed:4e:bd:93:cf:c7:79:55:b1:83:32:da:95:ec:13:94: 7e:85:cd:ff:e9:d0:4f:e0:2e:d9:24:86:a9:14:1a:80:8e:81: 1d:36:7e:71:7b:c7:0a:4d:0b:d2:12:c1:e9:d1:9a:67:9e:a2: b2:5d:d9:c1:bf:18:82:b8:c7:eb:2a:1c:75:03:16:4f:f7:4c: 04:5d:30:e7:cf:66:c1:ee:1f:26:0c:50:11:0f:f4:e3:a9:7e: 33:f9:14:44:be:a2:6c:7c:5d:c6:1d:07:da:87:88:e8:55:63: dc:0a:b8:b1:09:ef:27:30:7c:d6:77:e1:a1:61:a1:d8:97:d3: 2d:34:d4:3d:93:04:34:a3:95:30:6c:26:c3:fd:e7:3c:67:3b: f1:e2:b5:a9:f4:88:b6:a6:94:95:ba:0c:bd:c5:51:c9:7c:09: 58:91:5f:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EK54ZbwB14aYL7ZkMmUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjdlYjkwYjJkYjIxZmVjNjZmN2IxMjFlMjVjNTAxMTUyZThiNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCqc5fek51Yl3VxFKUSwkWtQiNHD 7Hry0XkBPLz0LaEat/7YA4sDnWbv/sZYvuGOjeDY6SIBzhNlUJCK9XWx3j2uXiTn +cdGV8saFseYgky9DxovE2K17xtsR1IkEjozfKoXNqSymx0Y5w9pNIaGRw+eujUa p89czkg9QmIcEH5uOY2I5yNxSS09b49bw3PIMuXFROrs8ci4IRHoHVW1A57mHcGm 5wRv+oI/2HOFtZy6y2gnk11PeDdxpg1294/xVOCGz0Qm4IAlotRI9ITvVsv8+6OV u7MWgyFe2p/OSDIeIbeMwxZZF7B+HwUiGBQTnxEt81cjJG1B1/jtRg7CpQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKt+uQstsh/sZvexIeJcUBFS6LSLMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvcTM2NUN5MnlILXhtOTdFaDRseFFFVkxvdElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBXg MA0GCSqGSIb3DQEBCwUAA4IBAQB4MgJHUbqKQvlBP3ke5rNTsJXCYyIOO/ChsgHM 0IC1+Ex8HrLiTfO0KRib3wgawCZKBQqRDdfeXRdNfeFDpEbI4XUX085ICC5NidgH 3f/MDxwj3ArI4p1iEQcode1OvZPPx3lVsYMy2pXsE5R+hc3/6dBP4C7ZJIapFBqA joEdNn5xe8cKTQvSEsHp0ZpnnqKyXdnBvxiCuMfrKhx1AxZP90wEXTDnz2bB7h8m DFARD/TjqX4z+RREvqJsfF3GHQfah4joVWPcCrixCe8nMHzWd+GhYaHYl9MtNNQ9 kwQ0o5UwbCbD/ec8Zzvx4rWp9Ii2ppSVugy9xVHJfAlYkV8s -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:47 2026 by rpki-client