This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa File: Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa (raw, json) Hash identifier: u+F0D46TeogunUYjDLBQ/aHLUk0cfPyyk8VSCqcft9w= Subject key identifier: 41:D9:26:E8:F2:A0:88:1B:13:E0:96:75:9F:CA:C9:13:32:10:60:7B Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Certificate serial: 019B7B36EFFFB631305F775F35D6F93B180A Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205365 IP address blocks: 2a00:1908:fffa::/48 maxlen: 48 2a00:1908:fffb::/48 maxlen: 48 2a00:1908:fffc::/48 maxlen: 48 2a00:1908:fffd::/48 maxlen: 48 2a00:1908:fffe::/48 maxlen: 48 2a00:1908:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ef:ff:b6:31:30:5f:77:5f:35:d6:f9:3b:18:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41d926e8f2a0881b13e096759fcac9133210607b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:7f:23:23:54:ef:06:dc:12:56:9f:b4:30: a8:5a:28:ac:72:a3:39:31:6b:4e:b2:35:79:77:8e: ff:ad:9b:fa:7c:d9:95:ea:98:b4:6b:60:eb:36:1a: c4:d2:46:1d:85:b6:e9:81:48:86:7e:83:28:31:39: b6:b9:de:1d:27:66:f0:b0:11:f8:27:17:d0:4a:c2: 1b:65:d8:da:ff:6b:5c:59:6e:c2:20:64:72:78:9b: a4:ba:28:5b:06:b1:d1:e2:dd:a7:aa:f4:12:3a:3c: 68:23:35:36:06:ad:d4:af:cd:f4:26:64:9f:ae:6f: af:84:48:91:f5:8e:12:6c:8b:2a:4c:59:0b:5f:dd: 2e:8b:37:7b:9f:af:a8:d7:48:04:c0:e1:7c:94:2d: ad:c3:41:02:83:66:97:a7:80:16:4b:96:43:11:ae: a4:85:af:f7:24:bf:35:13:45:c3:0d:cb:22:bc:4c: ff:9e:af:7a:d7:dc:e5:29:c1:44:72:ec:71:7b:6b: 6c:13:9f:c8:2f:6d:6e:89:71:0b:39:f8:b8:1c:82: d1:57:0d:10:ed:86:22:c4:b1:04:75:77:fd:8e:e9: 84:f2:77:d0:21:a9:4a:a5:54:6d:9e:42:dd:a4:41: 54:13:40:61:c9:ca:0f:c8:e5:7e:4f:5c:cb:e3:45: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D9:26:E8:F2:A0:88:1B:13:E0:96:75:9F:CA:C9:13:32:10:60:7B X509v3 Authority Key Identifier: keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/Qdkm6PKgiBsT4JZ1n8rJEzIQYHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1908:fffa::-2a00:1908:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 17:05:a9:73:79:0b:89:f6:2c:36:13:5a:97:0b:5b:cc:14:f6: df:b4:fa:ff:52:28:46:0e:f7:5c:69:2f:e9:36:4e:e1:9f:e0: f9:ef:36:91:58:23:68:90:fb:16:9d:54:f1:b7:83:26:2a:0e: b3:45:72:36:65:1e:ae:9d:06:9d:ae:85:70:5b:e1:68:ec:5f: 8d:f2:eb:1b:c9:37:14:6a:c0:ed:fb:fd:bb:31:6e:1e:8f:b8: e5:cb:8e:80:46:4d:b3:79:32:01:45:bd:01:b1:b2:fb:37:b7: 10:20:db:3e:2e:97:66:e0:a0:ef:e4:bf:de:b0:4c:c5:28:0c: 9e:0d:03:dd:92:63:4b:43:7a:b0:54:dc:1d:ab:54:aa:da:dc: e0:95:0d:7f:e2:8f:95:52:51:39:24:91:04:23:9b:b3:a6:22: 4b:5d:1f:e9:20:56:38:6f:1a:64:da:82:23:1f:74:a9:0c:46: 5a:55:da:be:80:ef:26:f8:25:44:a7:37:b4:f3:c5:cd:ad:10: 47:ee:68:29:a5:d1:e6:c2:13:42:f5:d7:ea:29:2d:a7:0c:a2: 78:87:66:8e:e8:a2:34:37:d2:39:94:98:fd:f3:6a:67:6e:c6: e9:d7:1e:6d:90:fb:1c:1e:af:ac:3d:4d:32:30:43:4d:6f:9e: 8a:45:30:34 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Nu//tjEwX3dfNdb5OxgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl MTBkNGUwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWQ5MjZlOGYyYTA4ODFiMTNlMDk2NzU5ZmNhYzkxMzMyMTA2MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHR/IyNU7wbcElaftDCoWiiscqM5 MWtOsjV5d47/rZv6fNmV6pi0a2DrNhrE0kYdhbbpgUiGfoMoMTm2ud4dJ2bwsBH4 JxfQSsIbZdja/2tcWW7CIGRyeJukuihbBrHR4t2nqvQSOjxoIzU2Bq3Ur830JmSf rm+vhEiR9Y4SbIsqTFkLX90uizd7n6+o10gEwOF8lC2tw0ECg2aXp4AWS5ZDEa6k ha/3JL81E0XDDcsivEz/nq9619zlKcFEcuxxe2tsE5/IL21uiXELOfi4HILRVw0Q 7YYixLEEdXf9jumE8nfQIalKpVRtnkLdpEFUE0BhycoPyOV+T1zL40VG+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEHZJujyoIgbE+CWdZ/KyRMyEGB7MB8GA1UdIwQY MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt MjA1NGQ0ZTkwM2JjLzEvUWRrbTZQS2dpQnNUNEpaMW44ckpFeklRWUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBwEqABkI //oDBQAqABkIMA0GCSqGSIb3DQEBCwUAA4IBAQAXBalzeQuJ9iw2E1qXC1vMFPbf tPr/UihGDvdcaS/pNk7hn+D57zaRWCNokPsWnVTxt4MmKg6zRXI2ZR6unQadroVw W+Fo7F+N8usbyTcUasDt+/27MW4ej7jly46ARk2zeTIBRb0BsbL7N7cQINs+Lpdm 4KDv5L/esEzFKAyeDQPdkmNLQ3qwVNwdq1Sq2tzglQ1/4o+VUlE5JJEEI5uzpiJL XR/pIFY4bxpk2oIjH3SpDEZaVdq+gO8m+CVEpze088XNrRBH7mgppdHmwhNC9dfq KS2nDKJ4h2aO6KI0N9I5lJj982pnbsbp1x5tkPscHq+sPU0yMENNb56KRTA0 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:09 2026 by rpki-client