This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/Q6qjxwuDv8q30Lmdm9u-3YnRnzY.roa File: Q6qjxwuDv8q30Lmdm9u-3YnRnzY.roa (raw, json) Hash identifier: noeRjmqJpgvMjP8kakXGyWDtjjMrc5HKTzUHEEblCc0= Subject key identifier: 43:AA:A3:C7:0B:83:BF:CA:B7:D0:B9:9D:9B:DB:BE:DD:89:D1:9F:36 Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372 Certificate serial: 019B7835560868EF5770375D53C202E2C916 Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/Q6qjxwuDv8q30Lmdm9u-3YnRnzY.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60275 IP address blocks: 2001:67c:2b10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:56:08:68:ef:57:70:37:5d:53:c2:02:e2:c9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43aaa3c70b83bfcab7d0b99d9bdbbedd89d19f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:66:50:14:05:6d:ff:1d:bd:38:e4:4a:1c: c6:88:88:80:9c:e7:27:a8:d6:3e:c2:72:c6:15:7c: bc:3c:e4:09:12:ec:df:44:da:41:1b:a3:49:d3:3a: 7b:60:17:40:a9:a9:9f:1a:ff:ad:b2:29:24:bc:9b: 8a:f8:c4:89:a1:6d:1a:f0:c4:41:ea:6d:24:ed:d4: 4d:b8:6b:55:97:bb:9a:e3:73:ce:41:94:ff:5f:a9: 50:82:a4:ba:0b:21:35:d6:ea:1d:17:b4:10:a5:b5: 41:75:79:30:18:c2:d6:25:fa:44:eb:0d:23:62:c2: 3b:81:ac:95:99:12:6e:d6:ee:fa:d2:01:8a:dc:81: ca:35:f6:96:0a:0f:51:e3:41:28:ac:af:9d:7b:2d: 3f:18:19:94:39:e2:63:45:13:3b:96:2f:d7:38:b7: 3e:db:e1:c2:c1:21:7f:95:12:54:17:9e:73:8c:8e: ca:04:6b:e2:79:08:d7:5c:49:a1:21:82:0f:5d:25: eb:5b:ea:d8:9c:f9:82:46:ab:05:c0:49:10:23:80: de:43:cc:4a:1d:64:d0:96:30:2b:a6:b1:ea:29:ac: 13:ec:bf:55:e7:46:d5:ec:c5:09:77:b7:b0:b8:91: ac:0b:d9:a2:03:fd:ad:93:ad:44:c5:6f:2d:3d:fd: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AA:A3:C7:0B:83:BF:CA:B7:D0:B9:9D:9B:DB:BE:DD:89:D1:9F:36 X509v3 Authority Key Identifier: keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/Q6qjxwuDv8q30Lmdm9u-3YnRnzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2b10::/48 Signature Algorithm: sha256WithRSAEncryption 20:f8:81:29:b4:87:c0:87:bb:40:ce:98:ed:b2:a4:0b:7e:2c: 55:d1:c5:d3:8b:d3:e5:12:70:03:c6:b6:2b:e0:0e:1e:df:ee: 59:1c:d0:c0:ba:42:ea:98:ba:a6:07:9b:a5:43:e9:13:4a:ef: 81:0b:46:08:87:f9:45:9d:cc:a9:4f:89:53:10:3b:0f:f1:6a: 22:2a:ad:9f:ae:db:18:94:c3:9f:7f:0e:8f:f4:be:0d:fe:9c: 40:d7:dc:52:ad:03:ee:ac:a5:1d:0b:31:f5:dc:57:7e:6d:2d: 60:49:f3:55:58:73:85:cc:14:eb:fc:59:99:be:69:d2:d9:68: 36:d4:81:c7:f3:a8:29:ae:b6:73:06:27:da:2e:c2:eb:ef:2b: ba:4e:25:71:ac:7a:4a:98:19:65:b2:4d:64:b5:ed:02:28:da: 9c:3a:37:89:34:8c:5a:24:ec:74:89:1b:d6:4b:16:c2:f0:21: 33:88:8a:7c:e3:a9:ff:9c:3e:dc:aa:ad:2e:34:99:46:c9:20: 4c:56:6f:c4:02:4e:1f:e5:76:69:34:4f:ca:c2:dc:1b:a6:bb: 76:c3:8d:e8:f1:de:b6:5b:db:8c:67:e8:5f:e9:a1:bd:bb:e5: 5b:cb:a3:88:da:4c:72:58:18:76:e4:0b:5c:af:b8:19:3a:ad: 51:a4:20:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NVYIaO9XcDddU8IC4skWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYWQ2MjE4MDg2M2Q3MjJhYWE0ZjA4ODFlNDQzNzhlM2M4 MDgzNzIwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2FhYTNjNzBiODNiZmNhYjdkMGI5OWQ5YmRiYmVkZDg5ZDE5ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5hmUBQFbf8dvTjkShzGiIiAnOcn qNY+wnLGFXy8POQJEuzfRNpBG6NJ0zp7YBdAqamfGv+tsikkvJuK+MSJoW0a8MRB 6m0k7dRNuGtVl7ua43POQZT/X6lQgqS6CyE11uodF7QQpbVBdXkwGMLWJfpE6w0j YsI7gayVmRJu1u760gGK3IHKNfaWCg9R40EorK+dey0/GBmUOeJjRRM7li/XOLc+ 2+HCwSF/lRJUF55zjI7KBGvieQjXXEmhIYIPXSXrW+rYnPmCRqsFwEkQI4DeQ8xK HWTQljArprHqKawT7L9V50bV7MUJd7ewuJGsC9miA/2tk61ExW8tPf0+nQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEOqo8cLg7/Kt9C5nZvbvt2J0Z82MB8GA1UdIwQY MBaAFH2tYhgIY9ciqqTwiB5EN448gINyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmExaUdBaGoxeUtxcFBDSUhrUTNqanlBZzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84MGVkOTgtZGE4NC00ZTRhLWI4NmMt NjgxODYyYTE4ZjBjLzEvUTZxanh3dUR2OHEzMExtZG05dS0zWW5SbnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84MGVkOTgtZGE4NC00ZTRhLWI4NmMtNjgxODYyYTE4ZjBj LzEvZmExaUdBaGoxeUtxcFBDSUhrUTNqanlBZzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCsQ MA0GCSqGSIb3DQEBCwUAA4IBAQAg+IEptIfAh7tAzpjtsqQLfixV0cXTi9PlEnAD xrYr4A4e3+5ZHNDAukLqmLqmB5ulQ+kTSu+BC0YIh/lFncypT4lTEDsP8WoiKq2f rtsYlMOffw6P9L4N/pxA19xSrQPurKUdCzH13Fd+bS1gSfNVWHOFzBTr/FmZvmnS 2Wg21IHH86gprrZzBifaLsLr7yu6TiVxrHpKmBllsk1kte0CKNqcOjeJNIxaJOx0 iRvWSxbC8CEziIp846n/nD7cqq0uNJlGySBMVm/EAk4f5XZpNE/Kwtwbprt2w43o 8d62W9uMZ+hf6aG9u+Vby6OI2kxyWBh25Atcr7gZOq1RpCCU -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:49 2026 by rpki-client