This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qLbiyquIzgdDMzt2v4mPCdpg23I.roa File: qLbiyquIzgdDMzt2v4mPCdpg23I.roa (raw, json) Hash identifier: U7xczbtAOcscuWbyD7VR1Q7TfDofzXarwHsXscDFLFI= Subject key identifier: A8:B6:E2:CA:AB:88:CE:07:43:33:3B:76:BF:89:8F:09:DA:60:DB:72 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75EB3B2DABD2FDDE4AD1ED4AC08FB Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qLbiyquIzgdDMzt2v4mPCdpg23I.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209364 IP address blocks: 2a06:e881:6400::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5e:b3:b2:da:bd:2f:dd:e4:ad:1e:d4:ac:08:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b6e2caab88ce0743333b76bf898f09da60db72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:82:24:d9:3a:da:88:ca:ab:0e:5b:3d:d9: 36:f3:4c:e1:56:12:e9:50:4f:ab:49:d7:82:21:1a: 5e:83:e3:9f:e8:a0:39:4b:64:8f:92:a0:5e:04:5b: 12:ee:d8:3d:60:3b:f5:0c:5b:d0:cc:9c:66:4d:33: 3c:bb:4e:74:d9:81:fa:b6:40:a0:09:25:e4:de:1d: 3e:d4:c7:f1:7e:0d:dc:46:60:f8:2e:40:fe:e7:7e: eb:80:cd:4d:12:0c:d3:ae:3b:a6:23:64:6b:56:c1: c4:e4:e4:72:c2:99:f8:4b:74:a6:c7:39:6f:0c:e6: 7c:02:b2:97:36:ca:f7:bd:e9:cc:15:c2:92:9e:86: e8:f7:20:e9:57:25:b0:96:f9:c1:f5:4b:eb:9d:43: b3:54:c5:3c:94:6b:b8:0a:1a:ce:37:4a:68:23:a8: 7e:95:35:a5:52:ce:6f:78:c2:4b:5e:41:41:6c:87: 47:08:11:bd:7b:91:3a:75:be:08:a0:94:cf:a0:3e: ea:9b:52:b3:01:30:ad:ec:3c:f3:4b:5f:1c:c8:ee: 17:66:bf:7f:6a:f8:79:de:cd:df:79:39:a2:23:ea: 63:a1:99:af:39:5e:c2:8d:e0:9b:f1:a4:6c:4b:7c: 9a:4d:9e:2f:73:c6:7c:4d:50:fb:ec:bc:8d:82:c0: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:E2:CA:AB:88:CE:07:43:33:3B:76:BF:89:8F:09:DA:60:DB:72 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qLbiyquIzgdDMzt2v4mPCdpg23I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:6400::/44 Signature Algorithm: sha256WithRSAEncryption da:0b:af:9d:18:9f:34:b4:f9:63:24:53:84:20:a0:b6:bc:95: 0a:6a:4a:32:ce:78:8b:0a:c7:28:f5:cd:de:37:39:69:12:8c: 60:07:cd:86:be:d4:e3:cd:dd:4d:f0:bf:b6:21:f3:1a:29:62: 8a:31:79:e8:cf:39:1a:1a:33:18:c9:c7:d5:f8:e2:b0:a5:70: 18:9e:fb:da:44:33:1f:40:36:5a:0b:3c:d1:4b:e4:b4:9a:9a: 55:f0:68:15:7f:99:56:c3:52:42:7e:ef:ea:7c:47:18:58:5c: be:bb:61:a6:9d:02:ac:5b:04:4f:ae:e9:21:de:d2:f9:25:91: 9b:54:7c:6e:22:b6:9d:d4:97:94:fd:ba:35:ca:f2:63:bc:5f: 07:e4:3b:91:5a:80:8f:ce:47:09:fa:ff:b4:5d:51:af:d8:71: 2d:46:94:21:56:dd:11:8a:17:6b:cd:d0:67:a6:de:6a:19:26: c8:da:fb:7d:f3:7c:2e:15:48:10:e2:69:c7:4f:52:c2:26:3b: e5:14:1c:21:ad:36:2f:69:f9:19:07:4d:91:9e:79:1e:da:88: f5:62:20:7c:e9:5d:21:43:b4:42:90:f5:51:5b:af:37:d5:80: 9e:d4:1e:dc:86:96:c4:24:9e:98:53:83:2c:2c:47:b3:3a:01: 9e:eb:fd:64 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p16zstq9L93krR7UrAj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGI2ZTJjYWFiODhjZTA3NDMzMzNiNzZiZjg5OGYwOWRhNjBkYjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiyCJNk62ojKqw5bPdk280zhVhLp UE+rSdeCIRpeg+Of6KA5S2SPkqBeBFsS7tg9YDv1DFvQzJxmTTM8u0502YH6tkCg CSXk3h0+1Mfxfg3cRmD4LkD+537rgM1NEgzTrjumI2RrVsHE5ORywpn4S3Smxzlv DOZ8ArKXNsr3venMFcKSnobo9yDpVyWwlvnB9UvrnUOzVMU8lGu4ChrON0poI6h+ lTWlUs5veMJLXkFBbIdHCBG9e5E6db4IoJTPoD7qm1KzATCt7DzzS18cyO4XZr9/ avh53s3feTmiI+pjoZmvOV7CjeCb8aRsS3yaTZ4vc8Z8TVD77LyNgsB/iwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKi24sqriM4HQzM7dr+JjwnaYNtyMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvcUxiaXlxdUl6Z2RETXp0MnY0bVBDZHBnMjNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogWQA MA0GCSqGSIb3DQEBCwUAA4IBAQDaC6+dGJ80tPljJFOEIKC2vJUKakoyzniLCsco 9c3eNzlpEoxgB82GvtTjzd1N8L+2IfMaKWKKMXnozzkaGjMYycfV+OKwpXAYnvva RDMfQDZaCzzRS+S0mppV8GgVf5lWw1JCfu/qfEcYWFy+u2GmnQKsWwRPrukh3tL5 JZGbVHxuIrad1JeU/bo1yvJjvF8H5DuRWoCPzkcJ+v+0XVGv2HEtRpQhVt0Rihdr zdBnpt5qGSbI2vt983wuFUgQ4mnHT1LCJjvlFBwhrTYvafkZB02Rnnke2oj1YiB8 6V0hQ7RCkPVRW6831YCe1B7chpbEJJ6YU4MsLEezOgGe6/1k -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:39 2026 by rpki-client