This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/QT2R92MEog6S2kX8diRhn9AMRUo.roa File: QT2R92MEog6S2kX8diRhn9AMRUo.roa (raw, json) Hash identifier: GUbhSc43W2rXK/nCQX1GjK70J6SuHq3CBZ5lHerlh88= Subject key identifier: 41:3D:91:F7:63:04:A2:0E:92:DA:45:FC:76:24:61:9F:D0:0C:45:4A Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E416C823A547EF4F45A2C0840461 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/QT2R92MEog6S2kX8diRhn9AMRUo.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205298 IP address blocks: 2a0f:5707:aaa0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e4:16:c8:23:a5:47:ef:4f:45:a2:c0:84:04:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=413d91f76304a20e92da45fc7624619fd00c454a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:0c:e7:48:f0:7b:2b:f4:89:8d:ee:f3:c5: ee:d7:9f:b0:31:e9:e3:09:bb:ef:10:96:6b:19:16: 42:83:93:6e:2d:9e:3f:14:55:c4:76:dc:f8:f7:57: e1:64:f7:91:d3:e2:60:78:72:22:29:89:c6:6a:d5: 57:dd:81:d0:21:cf:93:01:23:8e:fe:56:b5:66:52: 62:5c:43:6e:af:a1:cf:90:88:b1:4c:4f:77:fd:cb: 4d:61:26:8f:c8:0c:21:bf:85:96:04:ad:8c:87:d2: ea:ff:4f:79:97:e4:2a:34:80:5d:cb:8a:11:e5:c0: 36:e3:f7:f0:36:1f:23:d0:ef:6c:09:b7:4a:84:88: 72:99:6e:b4:25:fb:62:6a:0a:55:8b:45:17:ca:8b: b2:48:e0:c6:b6:35:a4:20:81:2c:18:98:9a:16:fd: 9d:7f:06:57:bf:9a:04:e7:5b:22:d0:6f:58:12:c6: 16:bc:35:77:11:dc:ce:4f:52:e5:ac:ab:29:a6:15: 3a:5f:f6:ee:29:cb:f3:77:8b:1d:64:34:1b:b9:22: ee:c1:78:80:40:4a:f1:e9:b4:ce:b3:f3:78:79:8f: f7:e3:96:9f:5e:4d:b0:7e:38:ba:da:a4:41:4b:60: 62:b1:af:65:6b:12:9d:bb:a2:3a:7b:58:e8:0d:4a: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3D:91:F7:63:04:A2:0E:92:DA:45:FC:76:24:61:9F:D0:0C:45:4A X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/QT2R92MEog6S2kX8diRhn9AMRUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:aaa0::/44 Signature Algorithm: sha256WithRSAEncryption 54:7c:49:15:26:24:7c:9f:ea:16:47:ce:22:cc:28:a8:1b:5a: 81:44:05:a6:89:21:3b:0d:fe:f2:18:4b:c5:05:b5:72:59:84: 20:d4:44:e1:d8:a5:07:63:cc:d2:20:14:51:ec:70:05:eb:57: 27:41:60:5f:ab:9b:17:b0:22:de:59:ef:23:e4:81:21:da:75: 49:be:f3:96:c8:a8:30:8e:15:50:8b:76:6e:f3:ad:68:76:10: d8:28:04:ad:61:88:a6:73:b4:fb:49:33:62:a4:9b:18:f2:2f: 2c:2d:c0:5a:87:f4:d1:48:04:f5:ff:13:64:1c:3b:a8:ea:50: a4:df:c2:e8:05:df:3b:7f:e0:12:83:cf:3d:8a:ab:b8:58:5d: ab:18:68:01:25:1f:96:b4:f9:a3:3e:4d:56:17:a4:39:8a:c7: 3a:d1:2a:50:67:df:57:f9:90:af:55:57:c0:13:82:62:61:3a: 08:1d:bb:37:06:fe:a8:9c:19:a2:04:4a:21:14:ba:a9:ca:cb: 2a:40:cc:23:13:7b:20:7c:8e:8c:1b:9a:0c:d2:fb:88:be:4c: d0:29:d4:38:1f:a1:0a:82:70:d0:f6:e5:9a:19:ca:cf:7e:b2: d9:54:cf:4c:10:34:15:00:61:ad:12:0c:f6:13:ae:34:5e:d4: 58:e7:a2:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOQWyCOlR+9PRaLAhARhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTNkOTFmNzYzMDRhMjBlOTJkYTQ1ZmM3NjI0NjE5ZmQwMGM0NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFIM50jweyv0iY3u88Xu15+wMenj CbvvEJZrGRZCg5NuLZ4/FFXEdtz491fhZPeR0+JgeHIiKYnGatVX3YHQIc+TASOO /la1ZlJiXENur6HPkIixTE93/ctNYSaPyAwhv4WWBK2Mh9Lq/095l+QqNIBdy4oR 5cA24/fwNh8j0O9sCbdKhIhymW60JftiagpVi0UXyouySODGtjWkIIEsGJiaFv2d fwZXv5oE51si0G9YEsYWvDV3EdzOT1LlrKspphU6X/buKcvzd4sdZDQbuSLuwXiA QErx6bTOs/N4eY/345afXk2wfji62qRBS2Bisa9laxKdu6I6e1joDUo99wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEE9kfdjBKIOktpF/HYkYZ/QDEVKMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvUVQyUjkyTUVvZzZTMmtYOGRpUmhuOUFNUlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6qg MA0GCSqGSIb3DQEBCwUAA4IBAQBUfEkVJiR8n+oWR84izCioG1qBRAWmiSE7Df7y GEvFBbVyWYQg1ETh2KUHY8zSIBRR7HAF61cnQWBfq5sXsCLeWe8j5IEh2nVJvvOW yKgwjhVQi3Zu861odhDYKAStYYimc7T7STNipJsY8i8sLcBah/TRSAT1/xNkHDuo 6lCk38LoBd87f+ASg889iqu4WF2rGGgBJR+WtPmjPk1WF6Q5isc60SpQZ99X+ZCv VVfAE4JiYToIHbs3Bv6onBmiBEohFLqpyssqQMwjE3sgfI6MG5oM0vuIvkzQKdQ4 H6EKgnDQ9uWaGcrPfrLZVM9MEDQVAGGtEgz2E640XtRY56LW -----END CERTIFICATE-----Generated at Fri Jan 9 00:14:58 2026 by rpki-client