This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qhXZKSkw_kjrfTzW3qYB5fpk84Q.roa File: qhXZKSkw_kjrfTzW3qYB5fpk84Q.roa (raw, json) Hash identifier: X7cb4+KtPdM4yXKp/HqorTisdA4WoqjRdkiyqd36obY= Subject key identifier: AA:15:D9:29:29:30:FE:48:EB:7D:3C:D6:DE:A6:01:E5:FA:64:F3:84 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B791092ADC11FEB50F3AD9D8F1C70714C Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qhXZKSkw_kjrfTzW3qYB5fpk84Q.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199415 IP address blocks: 2a12:bec4:1f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:92:ad:c1:1f:eb:50:f3:ad:9d:8f:1c:70:71:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa15d9292930fe48eb7d3cd6dea601e5fa64f384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:b4:c2:31:67:ea:6e:0f:c1:6a:e0:5c:d0: e5:72:97:8e:c1:52:a2:c7:5c:fd:18:0f:b9:96:02: f6:ca:b9:0a:71:10:2f:6a:e8:a8:62:e0:a1:8a:eb: 42:f1:9c:9a:b0:78:65:0b:ba:e6:91:a8:f2:36:b8: 7b:79:0d:5a:fb:3d:59:1a:ef:f9:94:cc:a2:09:40: 22:5b:d0:b9:5a:90:ed:9d:c2:c5:b1:ac:e4:0b:d3: b6:98:72:e3:c1:ca:5d:94:dc:4e:f1:04:ff:c0:68: a9:ca:b7:1d:a2:a9:41:75:ba:d5:3f:ce:c6:f1:0a: 53:ce:06:42:94:c1:ae:c5:f3:e7:c5:38:ac:17:27: 2a:e9:df:5b:98:26:a3:34:20:ad:46:78:d4:f2:c6: 29:5f:26:d1:d1:c7:17:c0:fb:5c:ce:11:03:9a:a7: f6:96:e5:7a:30:1c:b3:ad:00:67:59:51:05:0b:2e: 6a:dd:8d:b5:46:ef:19:3f:80:0e:eb:90:83:1d:fa: da:58:d3:a4:1b:43:70:70:d9:60:3c:87:95:cb:11: 8f:02:60:c5:f5:f8:34:79:66:c9:8d:40:65:6f:8d: 65:62:00:5d:9c:5b:58:b5:79:12:3f:a4:09:e4:2b: 23:52:fc:2d:fb:ed:86:69:c0:c7:e1:04:18:31:d2: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:15:D9:29:29:30:FE:48:EB:7D:3C:D6:DE:A6:01:E5:FA:64:F3:84 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qhXZKSkw_kjrfTzW3qYB5fpk84Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1f0::/44 Signature Algorithm: sha256WithRSAEncryption 97:18:98:2b:4e:00:50:7a:8e:ea:2b:f3:a8:3e:b8:23:36:92: f9:10:ed:4f:6f:90:2c:82:74:4d:ea:a8:4f:d4:b4:4a:7e:13: 68:d4:6d:49:38:f6:ff:19:2c:72:40:fd:d3:89:0c:10:fc:c9: 32:ab:09:83:d6:0e:9e:eb:75:20:99:d7:52:4b:ec:15:74:ea: b9:e3:50:02:b6:42:8e:48:4c:24:d9:68:7f:60:71:4e:49:b6: 97:b8:e7:de:57:8f:57:2b:c4:93:ca:b9:ed:19:4b:88:b1:14: 1c:af:24:d8:1c:22:a2:88:30:30:4d:97:50:23:3e:bd:54:80: 79:31:7d:21:fd:02:6e:63:d3:b4:09:c0:2e:87:5a:f1:43:9e: 3f:30:c9:f1:6b:12:4d:0b:71:fa:d3:84:9c:5c:b9:91:62:8f: f3:fe:a4:25:a9:0e:c3:b5:00:b6:df:75:07:82:b5:35:c1:e1: 0b:ff:7f:54:14:a6:d2:7c:53:d4:2c:98:4f:3a:2e:34:90:05: 2e:0e:55:1d:ed:66:ce:0b:3b:07:7d:e1:fe:b4:fb:2c:3f:d8: fa:f6:23:f0:77:50:c7:55:34:8e:af:ba:54:22:01:51:5e:ad: 83:75:bc:31:43:15:96:17:e2:cc:19:b3:7f:ee:67:c7:8d:76: c9:9f:4d:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJKtwR/rUPOtnY8ccHFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTE1ZDkyOTI5MzBmZTQ4ZWI3ZDNjZDZkZWE2MDFlNWZhNjRmMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmom0wjFn6m4PwWrgXNDlcpeOwVKi x1z9GA+5lgL2yrkKcRAvauioYuChiutC8ZyasHhlC7rmkajyNrh7eQ1a+z1ZGu/5 lMyiCUAiW9C5WpDtncLFsazkC9O2mHLjwcpdlNxO8QT/wGipyrcdoqlBdbrVP87G 8QpTzgZClMGuxfPnxTisFycq6d9bmCajNCCtRnjU8sYpXybR0ccXwPtczhEDmqf2 luV6MByzrQBnWVEFCy5q3Y21Ru8ZP4AO65CDHfraWNOkG0NwcNlgPIeVyxGPAmDF 9fg0eWbJjUBlb41lYgBdnFtYtXkSP6QJ5CsjUvwt++2GacDH4QQYMdJtowIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKoV2SkpMP5I63081t6mAeX6ZPOEMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvcWhYWktTa3dfa2pyZlR6VzNxWUI1ZnBrODRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xAHw MA0GCSqGSIb3DQEBCwUAA4IBAQCXGJgrTgBQeo7qK/OoPrgjNpL5EO1Pb5AsgnRN 6qhP1LRKfhNo1G1JOPb/GSxyQP3TiQwQ/MkyqwmD1g6e63UgmddSS+wVdOq541AC tkKOSEwk2Wh/YHFOSbaXuOfeV49XK8STyrntGUuIsRQcryTYHCKiiDAwTZdQIz69 VIB5MX0h/QJuY9O0CcAuh1rxQ54/MMnxaxJNC3H604ScXLmRYo/z/qQlqQ7DtQC2 33UHgrU1weEL/39UFKbSfFPULJhPOi40kAUuDlUd7WbOCzsHfeH+tPssP9j69iPw d1DHVTSOr7pUIgFRXq2DdbwxQxWWF+LMGbN/7mfHjXbJn03z -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:13 2026 by rpki-client