This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/CqxV1eA1GBG3a2D5f_pPgzG42eU.roa File: CqxV1eA1GBG3a2D5f_pPgzG42eU.roa (raw, json) Hash identifier: e3jb5BkEW8pwm4wMD1gq76Tk/yf9hJs9RYXqndmqFv8= Subject key identifier: 0A:AC:55:D5:E0:35:18:11:B7:6B:60:F9:7F:FA:4F:83:31:B8:D9:E5 Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03 Certificate serial: 019B7FF2BB0A8262545BD085964C1F875DD4 Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/CqxV1eA1GBG3a2D5f_pPgzG42eU.roa Signing time: Fri 02 Jan 2026 18:22:52 +0000 ROA not before: Fri 02 Jan 2026 18:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213622 IP address blocks: 2a14:9d00::/29 maxlen: 29 2a14:9d07:110::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:bb:0a:82:62:54:5b:d0:85:96:4c:1f:87:5d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03 Validity Not Before: Jan 2 18:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aac55d5e0351811b76b60f97ffa4f8331b8d9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:88:81:1b:0d:66:d1:b4:6a:6b:d2:de:fc: d9:4c:14:ca:00:74:12:ca:61:75:a0:55:93:e5:c4: 60:8f:f8:d2:d2:2c:58:d8:04:a1:d3:ab:c2:ba:77: 52:5a:ff:11:3e:e0:5a:19:63:a1:16:52:d3:a9:20: 08:eb:a7:bd:c4:84:2d:bd:5b:c6:a1:bc:da:c1:d3: 46:c0:ab:0a:2a:09:ad:0b:7e:fd:08:89:3e:7f:a7: f3:89:41:d3:b6:06:ae:1c:12:a8:66:00:ee:5d:9c: e2:9b:c4:b1:3e:52:cd:21:d9:38:ed:44:ec:8a:89: ea:b2:4d:c8:e6:6d:66:36:b0:22:b3:c6:fa:f7:bf: f2:eb:8e:67:dd:bb:e8:3a:f3:9d:49:7c:d1:c1:d2: b2:bf:e9:0d:80:64:30:56:91:30:31:9b:5c:d0:45: d4:fe:d2:db:a5:86:cc:13:9d:52:f2:f6:69:5a:27: b5:7b:7d:da:1d:60:d2:af:dc:30:d6:d7:dc:7f:cc: 4c:29:3a:24:da:1f:da:95:4c:2d:52:ed:98:38:85: a0:da:24:9b:4e:36:54:92:6c:17:6c:9d:e7:98:47: 3b:b7:c2:8a:9c:66:78:c1:09:f5:dd:d3:30:24:73: 97:6b:d6:16:d8:37:6c:dc:df:30:2f:ae:d4:16:29: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AC:55:D5:E0:35:18:11:B7:6B:60:F9:7F:FA:4F:83:31:B8:D9:E5 X509v3 Authority Key Identifier: keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/CqxV1eA1GBG3a2D5f_pPgzG42eU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9d00::/29 Signature Algorithm: sha256WithRSAEncryption 3a:e4:39:c8:68:85:b8:ca:0f:e5:fd:18:b9:34:e1:f0:65:80: 3e:f5:bf:3a:07:0d:27:d2:ea:46:0e:f7:bb:24:e9:3c:bc:36: ef:72:50:52:05:9e:ff:89:fc:e1:8e:9a:4b:d4:77:b9:4f:38: 06:0e:40:20:5c:61:2e:c3:76:e0:cf:bb:8d:28:08:95:42:5a: ca:7c:10:7b:21:dd:68:79:d2:62:cc:a0:7f:1b:5e:3b:91:2c: ab:45:78:e7:1a:47:1a:8c:49:a3:19:e4:be:07:89:19:2a:d1: ea:5c:46:15:64:d0:7e:21:e1:6c:f4:8b:f6:0a:e9:93:b4:fc: 45:d8:fa:b0:41:56:42:95:08:8d:30:81:fc:28:fd:cf:8c:96: 75:4d:1c:8a:92:45:c2:7f:80:3b:71:a9:87:33:8b:18:f7:34: be:f9:54:22:84:0a:fb:aa:82:56:7c:fb:f6:57:cd:cc:8d:c3: 7b:2c:03:47:84:d8:49:f4:8c:f1:e2:fd:b5:a0:6f:80:e7:21: 58:13:69:0d:43:9c:87:b9:fe:28:86:ab:c7:fa:a6:63:e0:f5: b6:c2:67:cd:4b:eb:1e:b7:c3:15:92:50:91:95:26:9d:53:f9: c8:12:b7:b2:f6:d1:79:44:8b:84:3a:c8:0f:4e:69:61:99:d0: fe:05:9a:19 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8rsKgmJUW9CFlkwfh13UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjY1YThiYWViYTRmZjYyMTQ5MmViZWU2ZmMxZTg4YWRi MjFiMDMwHhcNMjYwMTAyMTgyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWFjNTVkNWUwMzUxODExYjc2YjYwZjk3ZmZhNGY4MzMxYjhkOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxyIgRsNZtG0amvS3vzZTBTKAHQS ymF1oFWT5cRgj/jS0ixY2ASh06vCundSWv8RPuBaGWOhFlLTqSAI66e9xIQtvVvG obzawdNGwKsKKgmtC379CIk+f6fziUHTtgauHBKoZgDuXZzim8SxPlLNIdk47UTs ionqsk3I5m1mNrAis8b697/y645n3bvoOvOdSXzRwdKyv+kNgGQwVpEwMZtc0EXU /tLbpYbME51S8vZpWie1e33aHWDSr9ww1tfcf8xMKTok2h/alUwtUu2YOIWg2iSb TjZUkmwXbJ3nmEc7t8KKnGZ4wQn13dMwJHOXa9YW2Dds3N8wL67UFikQ4QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAqsVdXgNRgRt2tg+X/6T4MxuNnlMB8GA1UdIwQY MBaAFDO2Wouuuk/2IUkuvub8HoitshsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0Njkt ZDU0NzE4NTUxMmRlLzEvQ3F4VjFlQTFHQkczYTJENWZfcFBnekc0MmVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0NjktZDU0NzE4NTUxMmRl LzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhSdADAN BgkqhkiG9w0BAQsFAAOCAQEAOuQ5yGiFuMoP5f0YuTTh8GWAPvW/OgcNJ9LqRg73 uyTpPLw273JQUgWe/4n84Y6aS9R3uU84Bg5AIFxhLsN24M+7jSgIlUJaynwQeyHd aHnSYsygfxteO5Esq0V45xpHGoxJoxnkvgeJGSrR6lxGFWTQfiHhbPSL9grpk7T8 Rdj6sEFWQpUIjTCB/Cj9z4yWdU0cipJFwn+AO3GphzOLGPc0vvlUIoQK+6qCVnz7 9lfNzI3DeywDR4TYSfSM8eL9taBvgOchWBNpDUOch7n+KIarx/qmY+D1tsJnzUvr HrfDFZJQkZUmnVP5yBK3svbReUSLhDrID05pYZnQ/gWaGQ== -----END CERTIFICATE-----Generated at Sun Jan 11 20:02:40 2026 by rpki-client