This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/QnmSXREuoJoxyzq3KCupQRfwqgk.roa File: QnmSXREuoJoxyzq3KCupQRfwqgk.roa (raw, json) Hash identifier: MCtPZ5mabEHaId0q3vGImpY/QoJAaPrM8Arw2t98V0U= Subject key identifier: 42:79:92:5D:11:2E:A0:9A:31:CB:3A:B7:28:2B:A9:41:17:F0:AA:09 Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019B2853F590F10D644C713F8F8D89618A8E Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/QnmSXREuoJoxyzq3KCupQRfwqgk.roa Signing time: Tue 16 Dec 2025 18:02:29 +0000 ROA not before: Tue 16 Dec 2025 18:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 2a09:1180::/32 maxlen: 32 2a09:1181::/32 maxlen: 32 2a09:1182::/32 maxlen: 32 2a09:1183::/32 maxlen: 32 2a09:1184::/32 maxlen: 32 2a09:1185::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:53:f5:90:f1:0d:64:4c:71:3f:8f:8d:89:61:8a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Dec 16 18:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4279925d112ea09a31cb3ab7282ba94117f0aa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:c9:4d:22:09:68:e8:99:9a:5f:96:bb:7e: 26:f0:bb:14:a3:61:69:2a:f1:20:2a:70:a1:ba:38: 69:08:86:bc:3b:75:3a:b6:84:fd:c0:64:79:ec:67: 05:2a:95:53:0d:05:cf:4d:cf:15:22:e7:5d:2b:ef: ef:87:4a:a5:62:6b:7e:da:3d:12:7f:e6:61:c0:69: 29:80:8d:b1:3e:13:83:21:4c:bc:5a:74:96:ef:b6: 9a:9d:84:80:fb:26:83:4f:a5:ad:21:34:fb:53:4a: fd:66:7f:9c:78:ce:be:91:f2:02:5d:70:b3:6a:bf: 0c:3a:78:2b:fb:c7:dd:4d:97:5f:34:b2:b6:b4:81: ae:4e:f0:ba:98:61:c3:5d:ca:63:8d:70:a9:25:6b: 4e:4a:a0:c5:5a:db:20:32:52:99:9f:f6:81:31:f7: 75:39:7b:60:91:97:f1:d1:82:34:5c:b8:d1:4b:28: a5:03:8c:b9:e4:45:da:42:34:1a:25:1b:2d:0f:df: ac:77:14:4b:7e:af:97:07:12:27:33:2a:bb:d9:9c: 98:9c:21:fa:2f:4b:4d:37:8c:b2:15:bc:3a:fd:3f: bb:8f:38:7f:2c:90:d7:58:86:8d:e8:21:52:29:30: 8c:05:cb:fb:75:f8:5d:32:01:03:41:89:42:f9:5d: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:92:5D:11:2E:A0:9A:31:CB:3A:B7:28:2B:A9:41:17:F0:AA:09 X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/QnmSXREuoJoxyzq3KCupQRfwqgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:1180::-2a09:1185:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1f:94:62:4b:d0:c1:cd:be:2f:10:85:10:8c:bb:f4:76:0b:35: 41:03:4a:90:4f:11:a2:3f:87:30:90:aa:84:fb:55:e0:d9:01: 87:f8:ad:b6:67:b5:b2:64:4c:53:2e:4f:f8:75:8b:a0:52:0d: 2e:f5:59:a0:d4:59:fb:19:42:8a:64:16:71:29:99:12:f0:db: 43:1e:eb:b4:48:48:3e:59:dd:06:88:e0:40:d8:70:df:63:cf: 70:b6:4e:c6:eb:55:c8:3f:f5:65:27:e5:76:69:eb:81:bf:e0: 44:65:0a:39:16:c3:69:21:8e:05:4d:e0:7d:a9:41:94:73:3e: 1a:64:7f:90:0f:c0:07:ef:0f:fd:1a:68:f5:22:3e:6c:a6:51: 21:f0:f5:0a:35:bb:07:5d:3f:64:8f:a9:92:45:33:44:47:2b: bf:c4:94:91:35:1e:12:76:14:8e:d6:db:8d:a9:16:f2:cf:a1: ca:dd:e7:b2:f4:1b:94:7d:08:ec:8d:ae:dd:90:1b:91:8d:ce: e9:09:c0:3e:52:06:36:38:02:4e:0e:9d:f3:51:35:97:1e:fb: c0:df:68:c2:60:93:ce:d6:58:65:32:07:cc:33:df:7c:65:2f: 24:c5:78:3c:ea:1c:c6:de:b1:96:95:ea:ee:5d:b0:98:29:bf: 4e:ed:5d:d4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZsoU/WQ8Q1kTHE/j42JYYqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjUxMjE2MTgwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mjc5OTI1ZDExMmVhMDlhMzFjYjNhYjcyODJiYTk0MTE3ZjBhYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5DJTSIJaOiZml+Wu34m8LsUo2Fp KvEgKnChujhpCIa8O3U6toT9wGR57GcFKpVTDQXPTc8VIuddK+/vh0qlYmt+2j0S f+ZhwGkpgI2xPhODIUy8WnSW77aanYSA+yaDT6WtITT7U0r9Zn+ceM6+kfICXXCz ar8MOngr+8fdTZdfNLK2tIGuTvC6mGHDXcpjjXCpJWtOSqDFWtsgMlKZn/aBMfd1 OXtgkZfx0YI0XLjRSyilA4y55EXaQjQaJRstD9+sdxRLfq+XBxInMyq72ZyYnCH6 L0tNN4yyFbw6/T+7jzh/LJDXWIaN6CFSKTCMBcv7dfhdMgEDQYlC+V3UOQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFEJ5kl0RLqCaMcs6tygrqUEX8KoJMB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvUW5tU1hSRXVvSm94eXpxM0tDdXBRUmZ3cWdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQcqCRGA AwUBKgkRhDANBgkqhkiG9w0BAQsFAAOCAQEAH5RiS9DBzb4vEIUQjLv0dgs1QQNK kE8Roj+HMJCqhPtV4NkBh/ittme1smRMUy5P+HWLoFINLvVZoNRZ+xlCimQWcSmZ EvDbQx7rtEhIPlndBojgQNhw32PPcLZOxutVyD/1ZSfldmnrgb/gRGUKORbDaSGO BU3gfalBlHM+GmR/kA/AB+8P/Rpo9SI+bKZRIfD1CjW7B10/ZI+pkkUzREcrv8SU kTUeEnYUjtbbjakW8s+hyt3nsvQblH0I7I2u3ZAbkY3O6QnAPlIGNjgCTg6d81E1 lx77wN9owmCTztZYZTIHzDPffGUvJMV4POocxt6xlpXq7l2wmCm/Tu1d1A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:37:22 2025 by rpki-client