This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa File: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (raw, json) Hash identifier: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI= Subject key identifier: 43:8C:D0:17:47:2B:18:8B:40:FF:5C:34:23:DC:50:EE:11:80:81:64 Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51 Certificate serial: 019B7C12C14D1C657199AB361B7A0CCDB3D7 Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 2001:678:330::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c1:4d:1c:65:71:99:ab:36:1b:7a:0c:cd:b3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=438cd017472b188b40ff5c3423dc50ee11808164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:5c:a6:e5:2c:11:3b:dc:d3:be:47:44:89: 38:80:16:66:ec:6b:9c:b2:0e:52:e0:ec:f9:af:4b: 81:c6:8a:0a:31:ee:99:d0:21:eb:0f:f4:f6:5f:c4: 06:dc:14:82:77:27:2d:11:8b:81:9f:a9:b8:a9:b9: 06:87:ac:24:05:3f:5a:fd:f6:c2:6a:f0:76:7b:99: 48:da:ad:21:aa:d6:ca:b1:14:f5:31:4a:0c:a1:46: fa:b6:2f:96:13:20:27:de:90:c5:cb:b1:60:50:91: 41:a4:b0:b4:96:3d:71:4f:08:08:1d:a8:0c:75:e7: 40:4d:b9:ab:e4:a3:d1:03:48:3d:c8:bf:6d:47:c0: 88:fe:73:cf:22:c4:b8:bc:13:13:72:a6:49:6e:34: 79:9d:9e:70:21:6a:a5:4c:3f:54:a9:2b:61:db:e0: 8b:7b:27:30:0f:85:82:45:b8:a6:e5:d6:2e:bb:9a: 4c:e8:1d:e4:67:62:dd:5b:52:96:ae:e5:8f:c7:45: 3a:ed:f3:c2:03:f5:c1:56:9e:28:ae:dd:2b:f0:dc: 81:6f:81:eb:80:69:c6:af:87:72:16:60:d4:6e:02: 90:49:40:e8:56:ad:99:fc:98:6d:cd:ff:3a:42:d3: 39:7f:1a:4a:b3:08:f8:45:d3:3d:0b:6c:a5:76:1a: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8C:D0:17:47:2B:18:8B:40:FF:5C:34:23:DC:50:EE:11:80:81:64 X509v3 Authority Key Identifier: keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:330::/48 Signature Algorithm: sha256WithRSAEncryption 33:c8:de:30:8f:c0:a1:3c:f0:46:a0:ef:b3:c3:0a:38:8f:15: 96:f2:73:6d:8d:00:54:c4:5f:ea:1c:4c:d1:f8:cd:f9:41:d7: 7c:52:2d:de:f6:f7:4c:fd:86:49:c3:01:15:ff:82:d7:f5:94: 8e:9f:01:dd:5b:0c:72:f4:e4:98:83:9e:59:b4:ab:14:d3:2f: 2b:b0:fd:da:e3:78:64:31:0c:09:2e:da:bc:ca:d9:cc:1d:a9: e3:24:79:5d:e0:cc:1e:06:ba:01:4f:7c:a9:bd:a4:13:0d:db: 07:45:ee:65:40:a5:1c:5f:a6:81:d3:5b:99:8e:2f:5b:5b:33: 87:af:ef:5a:4d:c8:12:d6:0f:c7:ce:b0:39:87:73:38:45:09: 68:02:51:26:68:d1:5e:3c:af:92:0b:8e:29:73:0a:30:d7:d3: be:e1:1f:11:55:a0:35:e7:e2:44:60:58:15:e0:f6:76:74:ab: 90:78:18:53:5f:bb:c0:83:99:72:c5:03:4c:84:cd:d4:ae:bf: e5:c2:ca:d9:c3:6b:46:f0:66:9b:d6:c7:63:5f:75:4e:f9:d7: 05:26:e3:60:a1:49:4c:2a:a1:cc:a8:9a:6b:dd:0d:72:52:de: a4:fa:4b:9b:69:4a:08:07:85:29:4f:bf:5f:0f:28:05:26:2d: 69:85:38:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EsFNHGVxmas2G3oMzbPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkN2QxY2IxMTQ5NGViMzg5OGYxMGQzZDYzNWJlNzVmMTZi MmRjNTEwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzhjZDAxNzQ3MmIxODhiNDBmZjVjMzQyM2RjNTBlZTExODA4MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVBcpuUsETvc075HRIk4gBZm7Guc sg5S4Oz5r0uBxooKMe6Z0CHrD/T2X8QG3BSCdyctEYuBn6m4qbkGh6wkBT9a/fbC avB2e5lI2q0hqtbKsRT1MUoMoUb6ti+WEyAn3pDFy7FgUJFBpLC0lj1xTwgIHagM dedATbmr5KPRA0g9yL9tR8CI/nPPIsS4vBMTcqZJbjR5nZ5wIWqlTD9UqSth2+CL eycwD4WCRbim5dYuu5pM6B3kZ2LdW1KWruWPx0U67fPCA/XBVp4ort0r8NyBb4Hr gGnGr4dyFmDUbgKQSUDoVq2Z/Jhtzf86QtM5fxpKswj4RdM9C2yldhrsCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEOM0BdHKxiLQP9cNCPcUO4RgIFkMB8GA1UdIwQY MBaAFP19HLEUlOs4mPENPWNb518WstxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUt NzY1OWJmODZhYzRjLzEvUTR6UUYwY3JHSXRBXzF3MEk5eFE3aEdBZ1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUtNzY1OWJmODZhYzRj LzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAMw MA0GCSqGSIb3DQEBCwUAA4IBAQAzyN4wj8ChPPBGoO+zwwo4jxWW8nNtjQBUxF/q HEzR+M35Qdd8Ui3e9vdM/YZJwwEV/4LX9ZSOnwHdWwxy9OSYg55ZtKsU0y8rsP3a 43hkMQwJLtq8ytnMHanjJHld4MweBroBT3ypvaQTDdsHRe5lQKUcX6aB01uZji9b WzOHr+9aTcgS1g/HzrA5h3M4RQloAlEmaNFePK+SC44pcwow19O+4R8RVaA15+JE YFgV4PZ2dKuQeBhTX7vAg5lyxQNMhM3Urr/lwsrZw2tG8Gab1sdjX3VO+dcFJuNg oUlMKqHMqJpr3Q1yUt6k+kubaUoIB4UpT79fDygFJi1phThN -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:31 2026 by rpki-client