This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qw0gesvS9oGsDEelrLGcsHQiENY.roa File: qw0gesvS9oGsDEelrLGcsHQiENY.roa (raw, json) Hash identifier: mzbDD1s/T3X1bQ3/JyAiL6zqGqNuwwVb9xk+XsVZFGM= Subject key identifier: AB:0D:20:7A:CB:D2:F6:81:AC:0C:47:A5:AC:B1:9C:B0:74:22:10:D6 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79109D450F7259182FEF9997389535D8 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qw0gesvS9oGsDEelrLGcsHQiENY.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200950 IP address blocks: 2a12:bec4:1db0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9d:45:0f:72:59:18:2f:ef:99:97:38:95:35:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab0d207acbd2f681ac0c47a5acb19cb0742210d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:8e:13:c1:d0:1a:30:15:86:cd:42:40:a4: 42:60:79:91:27:fb:f1:cf:a8:11:cd:51:63:3a:6c: 1f:c8:e0:cf:a7:e9:50:15:c9:00:7f:28:62:a9:08: 84:65:26:66:de:f7:59:f1:92:69:6e:ab:d9:ba:63: f2:d1:4d:a8:8a:eb:11:6f:c4:7a:50:4d:7b:03:7a: cf:64:5f:40:b7:0d:cd:5a:f9:7c:87:28:44:d6:09: 43:61:7f:ac:c6:75:59:c8:6d:f7:8d:08:85:ac:fd: 25:6a:cf:a0:1d:66:23:c4:9f:4c:e0:91:ae:98:76: 86:33:94:c2:ce:8f:b7:5e:2c:0f:75:d4:a3:41:37: 96:dc:77:79:13:b6:f7:05:ff:56:33:28:70:7a:26: e0:ce:cf:be:ae:ef:89:ab:2f:d5:0d:69:81:45:37: ce:07:dc:05:ac:75:1c:54:0e:77:9c:31:b7:64:1b: f1:56:e4:82:2c:a1:05:d2:f7:e4:a0:83:07:12:e5: 68:1c:15:47:17:0e:39:54:a1:38:e3:28:09:37:0f: 70:e1:25:19:b0:cf:86:d4:94:ed:99:6b:23:5e:8d: 19:a8:1b:c0:04:b0:5d:cb:45:d2:02:f4:72:bb:52: ae:43:6b:84:48:1f:7b:89:0f:9a:0e:f5:8e:23:5b: 34:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0D:20:7A:CB:D2:F6:81:AC:0C:47:A5:AC:B1:9C:B0:74:22:10:D6 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qw0gesvS9oGsDEelrLGcsHQiENY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1db0::/44 Signature Algorithm: sha256WithRSAEncryption 8c:99:6d:5b:8b:b1:53:cb:47:70:79:42:4a:e8:ce:b7:a3:c3: 62:3c:e7:7c:87:2a:11:a5:09:61:db:68:aa:71:d5:f3:b6:32: 06:a1:d6:43:0e:02:0a:2b:5b:e2:0f:be:21:54:1a:60:35:bb: ad:78:c2:a7:fe:02:5f:09:ce:86:28:b2:c9:b5:84:34:9b:17: 90:77:81:b1:92:12:85:b7:f6:7f:a2:df:1b:9d:4e:05:eb:d7: a2:d3:43:46:eb:93:d6:ea:a5:2c:46:e0:cf:ac:73:ed:7b:7b: 1b:46:17:3c:35:33:ce:17:c1:60:6d:76:18:98:e1:7c:4c:f4: 41:cb:92:7b:98:0b:24:6c:b9:be:ec:01:e6:93:49:4d:44:cd: 9f:ae:cc:55:bd:55:15:e1:a3:65:fd:fa:d7:47:bb:0f:15:d8: e8:ae:5f:0e:21:85:e9:7c:0c:67:3b:48:9b:93:8c:91:ac:9f: 22:71:6e:56:c2:e1:fd:1e:06:d3:03:55:00:aa:c0:65:38:9e: 06:88:dd:f9:a9:d6:32:7f:87:c9:81:6f:99:65:00:05:15:1d: ab:76:1f:1f:a4:9c:f1:63:3d:dc:dd:b4:78:ca:b1:5a:56:fd: 5f:66:75:64:50:a4:cf:5f:87:93:b4:75:49:ce:86:d3:29:b6: 33:66:26:25 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJ1FD3JZGC/vmZc4lTXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjBkMjA3YWNiZDJmNjgxYWMwYzQ3YTVhY2IxOWNiMDc0MjIxMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsmOE8HQGjAVhs1CQKRCYHmRJ/vx z6gRzVFjOmwfyODPp+lQFckAfyhiqQiEZSZm3vdZ8ZJpbqvZumPy0U2oiusRb8R6 UE17A3rPZF9Atw3NWvl8hyhE1glDYX+sxnVZyG33jQiFrP0las+gHWYjxJ9M4JGu mHaGM5TCzo+3XiwPddSjQTeW3Hd5E7b3Bf9WMyhweibgzs++ru+Jqy/VDWmBRTfO B9wFrHUcVA53nDG3ZBvxVuSCLKEF0vfkoIMHEuVoHBVHFw45VKE44ygJNw9w4SUZ sM+G1JTtmWsjXo0ZqBvABLBdy0XSAvRyu1KuQ2uESB97iQ+aDvWOI1s0HwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKsNIHrL0vaBrAxHpayxnLB0IhDWMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvcXcwZ2VzdlM5b0dzREVlbHJMR2NzSFFpRU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xB2w MA0GCSqGSIb3DQEBCwUAA4IBAQCMmW1bi7FTy0dweUJK6M63o8NiPOd8hyoRpQlh 22iqcdXztjIGodZDDgIKK1viD74hVBpgNbuteMKn/gJfCc6GKLLJtYQ0mxeQd4Gx khKFt/Z/ot8bnU4F69ei00NG65PW6qUsRuDPrHPte3sbRhc8NTPOF8FgbXYYmOF8 TPRBy5J7mAskbLm+7AHmk0lNRM2frsxVvVUV4aNl/frXR7sPFdjorl8OIYXpfAxn O0ibk4yRrJ8icW5WwuH9HgbTA1UAqsBlOJ4GiN35qdYyf4fJgW+ZZQAFFR2rdh8f pJzxYz3c3bR4yrFaVv1fZnVkUKTPX4eTtHVJzobTKbYzZiYl -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:16 2026 by rpki-client