This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/qfbmdAxrKJhL7MuKfw49467oMe0.roa File: qfbmdAxrKJhL7MuKfw49467oMe0.roa (raw, json) Hash identifier: tAJCqrPUfCnpIMZF6i2OOK4HRvotFOEnPGbHmvdQqEg= Subject key identifier: A9:F6:E6:74:0C:6B:28:98:4B:EC:CB:8A:7F:0E:3D:E3:AE:E8:31:ED Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8 Certificate serial: 019B797EEC5BC03E09D257E46913DC2B8213 Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/qfbmdAxrKJhL7MuKfw49467oMe0.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a0b:4581::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ec:5b:c0:3e:09:d2:57:e4:69:13:dc:2b:82:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f6e6740c6b28984beccb8a7f0e3de3aee831ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:13:5b:c0:7d:a4:7f:27:cf:ab:52:4b:99: 09:80:e9:4d:12:09:12:b5:49:35:62:11:6f:b6:5f: e4:80:93:24:fe:73:6b:8d:be:46:c0:f2:19:ce:89: b7:f0:cb:2d:cc:f7:b8:96:52:ed:49:f3:4b:59:da: 84:1e:b4:38:a2:dc:f0:e2:60:09:0b:39:1a:ce:82: 9d:b3:a0:4c:a1:1e:07:40:16:8b:5d:8e:09:12:f3: 30:9f:5a:99:08:f6:f1:69:87:31:29:4f:ec:60:ee: 9a:5a:9a:bc:b5:76:15:57:3f:89:42:eb:b4:db:c8: 6a:f0:12:6b:33:cd:39:4b:c6:ad:f9:34:b0:39:fd: 76:6f:c1:7e:3f:90:3d:34:fb:bc:08:54:b0:17:d8: d7:87:33:3e:08:83:6c:38:e6:1c:ff:12:b1:b8:7f: 06:f9:6f:e5:06:5a:b4:c2:3f:65:34:b3:67:a5:5f: e7:10:65:c1:b4:89:dd:1e:ed:cc:65:5c:d7:05:7e: 30:6b:d9:e8:a3:34:3e:9a:9d:66:db:0b:66:67:ae: 9d:1d:2c:b4:9b:07:e7:4a:0a:70:1a:5a:39:c4:c7: ff:22:f8:7c:57:f0:74:19:e1:f2:5d:c0:c1:dd:7c: 96:c7:f8:d8:9a:b8:9e:2d:73:fa:12:33:dc:c1:96: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:E6:74:0C:6B:28:98:4B:EC:CB:8A:7F:0E:3D:E3:AE:E8:31:ED X509v3 Authority Key Identifier: keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/qfbmdAxrKJhL7MuKfw49467oMe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4581::/48 Signature Algorithm: sha256WithRSAEncryption 27:06:de:db:33:f5:e5:65:fe:78:45:b0:29:9f:82:92:a3:b5: f9:d9:28:10:13:3a:66:2d:dc:b3:9e:97:08:b1:d3:13:32:35: 30:aa:62:5c:90:06:fb:81:50:e3:2b:d5:63:cf:11:b0:97:85: 8f:97:48:5a:f8:f1:0c:7e:d9:a8:92:03:a3:d3:d0:42:b8:f9: 22:cb:39:05:88:29:1e:ce:aa:4c:97:bf:04:b4:36:58:3f:02: b4:41:30:98:4c:a3:70:8b:c3:7f:4e:49:22:47:24:dd:ae:67: 8c:07:f4:7f:36:aa:40:5b:aa:63:9f:ed:5f:8d:de:17:96:57: 7a:91:5a:bb:d3:07:d9:8f:dd:cb:64:99:dc:09:93:70:5a:de: fe:81:05:22:02:b1:77:9a:c2:aa:71:50:1d:f3:9f:a5:17:7a: 56:31:74:fb:b9:1b:99:95:c6:49:37:b9:4c:6f:59:4a:d7:f4: e7:f6:20:ff:12:f5:22:6c:e4:83:2d:c8:02:e2:20:16:f1:87: fc:18:51:28:c6:07:ce:29:f9:14:05:dc:ae:9f:f4:bb:be:da: fa:d1:71:80:a2:f9:a8:07:14:20:f3:31:83:1e:14:c1:50:9a: 62:5b:eb:fd:6c:16:49:a5:b0:e8:11:03:46:8a:ae:ec:fa:89: 5e:bf:e6:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fuxbwD4J0lfkaRPcK4ITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz YjBmYjgwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWY2ZTY3NDBjNmIyODk4NGJlY2NiOGE3ZjBlM2RlM2FlZTgzMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmETW8B9pH8nz6tSS5kJgOlNEgkS tUk1YhFvtl/kgJMk/nNrjb5GwPIZzom38MstzPe4llLtSfNLWdqEHrQ4otzw4mAJ CzkazoKds6BMoR4HQBaLXY4JEvMwn1qZCPbxaYcxKU/sYO6aWpq8tXYVVz+JQuu0 28hq8BJrM805S8at+TSwOf12b8F+P5A9NPu8CFSwF9jXhzM+CINsOOYc/xKxuH8G +W/lBlq0wj9lNLNnpV/nEGXBtIndHu3MZVzXBX4wa9noozQ+mp1m2wtmZ66dHSy0 mwfnSgpwGlo5xMf/Ivh8V/B0GeHyXcDB3XyWx/jYmrieLXP6EjPcwZYrmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKn25nQMayiYS+zLin8OPeOu6DHtMB8GA1UdIwQY MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt ZmZiMmVmNGJmZTI1LzEvcWZibWRBeHJLSmhMN011S2Z3NDk0NjdvTWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1 LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtFgQAA MA0GCSqGSIb3DQEBCwUAA4IBAQAnBt7bM/XlZf54RbApn4KSo7X52SgQEzpmLdyz npcIsdMTMjUwqmJckAb7gVDjK9VjzxGwl4WPl0ha+PEMftmokgOj09BCuPkiyzkF iCkezqpMl78EtDZYPwK0QTCYTKNwi8N/TkkiRyTdrmeMB/R/NqpAW6pjn+1fjd4X lld6kVq70wfZj93LZJncCZNwWt7+gQUiArF3msKqcVAd85+lF3pWMXT7uRuZlcZJ N7lMb1lK1/Tn9iD/EvUibOSDLcgC4iAW8Yf8GFEoxgfOKfkUBdyun/S7vtr60XGA ovmoBxQg8zGDHhTBUJpiW+v9bBZJpbDoEQNGiq7s+olev+Zn -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:56 2026 by rpki-client