This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/QE4mWlynJcIb4WilZerciyCNIrM.roa File: QE4mWlynJcIb4WilZerciyCNIrM.roa (raw, json) Hash identifier: O9hvkcBv0v7y2K1dBWJ4Vo0JgVG4Safg6I/3GHzMudQ= Subject key identifier: 40:4E:26:5A:5C:A7:25:C2:1B:E1:68:A5:65:EA:DC:8B:20:8D:22:B3 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B76EB7D3053261EDECD408C5B24D36740 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/QE4mWlynJcIb4WilZerciyCNIrM.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6910 IP address blocks: 2a03:9c00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7d:30:53:26:1e:de:cd:40:8c:5b:24:d3:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=404e265a5ca725c21be168a565eadc8b208d22b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:c2:19:57:d9:ad:b1:0b:2b:70:03:9e:b2: f7:fd:80:98:4e:ef:d8:38:1e:77:47:a4:eb:f7:0e: df:e5:54:1b:a2:d3:34:be:48:2d:92:7c:8e:02:78: d9:2b:56:9f:58:b7:06:42:e8:31:eb:71:52:fd:d5: 95:13:19:b6:a2:e7:a4:36:b6:38:7f:6e:50:c8:6c: 86:81:52:56:65:4b:0c:47:1f:c0:60:78:2c:10:3e: be:eb:fc:2f:a4:45:3e:f5:45:88:56:3d:91:4b:05: 39:bb:96:2f:7b:ef:32:60:95:8e:19:5e:62:d4:28: b0:ea:be:f4:19:1b:1e:fa:36:34:28:32:18:c1:1f: 37:db:e7:f3:97:c7:cf:89:64:98:ca:db:f6:5e:4f: 40:2d:72:56:df:f7:e2:6b:58:33:14:55:6c:11:0d: 5c:7e:a0:ac:bf:f1:a2:13:da:86:53:90:c2:b6:23: ca:55:70:89:53:29:a8:89:32:32:39:b3:ba:ef:7b: 28:48:d9:34:76:29:a7:db:a8:e7:ae:ea:76:77:3b: fc:85:06:0a:b3:92:64:14:9b:88:94:5b:cc:9e:23: 19:bc:05:bd:78:13:06:7d:26:8b:52:65:d6:76:29: 5d:3e:fd:a2:34:87:6a:05:33:5f:52:e4:e5:64:c2: 13:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:26:5A:5C:A7:25:C2:1B:E1:68:A5:65:EA:DC:8B:20:8D:22:B3 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/QE4mWlynJcIb4WilZerciyCNIrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:9c00:1::/48 Signature Algorithm: sha256WithRSAEncryption d5:3f:99:ee:c1:17:ee:c1:4c:e6:70:db:62:ed:00:50:b6:51: 7e:9f:5d:45:52:c6:17:66:6d:1d:2d:18:ad:88:4c:28:d3:1b: 41:1a:cb:53:57:12:f0:cc:02:d4:3b:8c:7f:39:13:c7:30:14: d5:14:b7:f7:86:85:8b:9b:d6:31:47:56:70:92:26:ea:62:71: 71:69:d0:0b:e6:e2:34:0f:04:e8:b7:72:bd:34:0c:53:90:ed: c1:ae:44:47:bb:4c:5f:e4:a1:ac:16:f1:36:6c:4d:53:29:1d: 09:1d:57:32:85:a7:12:d7:88:87:00:89:0d:da:54:5f:65:68: 56:ae:af:26:d6:1e:42:9d:74:37:d3:c6:2c:b9:49:d4:fe:ab: 28:4c:ef:ab:8b:34:e7:16:a2:23:6f:6e:a4:09:06:b8:74:69: 82:4c:dc:e0:91:d0:de:75:40:3a:a3:4c:77:02:e9:0b:2d:35: 2e:09:e9:8d:f4:21:67:ce:4a:ed:39:17:cc:a6:e2:5f:1d:7f: bd:6b:11:6f:95:d3:2a:22:1e:21:c2:f0:63:13:3e:52:f9:dc: cc:4a:d1:3e:62:79:3a:22:a5:22:1f:82:a7:cc:10:57:80:17: d0:71:15:bc:90:68:ca:7f:4b:67:64:93:7d:aa:56:04:a5:44: 75:45:80:7f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt2630wUyYe3s1AjFsk02dAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDRlMjY1YTVjYTcyNWMyMWJlMTY4YTU2NWVhZGM4YjIwOGQyMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8TCGVfZrbELK3ADnrL3/YCYTu/Y OB53R6Tr9w7f5VQbotM0vkgtknyOAnjZK1afWLcGQugx63FS/dWVExm2ouekNrY4 f25QyGyGgVJWZUsMRx/AYHgsED6+6/wvpEU+9UWIVj2RSwU5u5Yve+8yYJWOGV5i 1Ciw6r70GRse+jY0KDIYwR832+fzl8fPiWSYytv2Xk9ALXJW3/fia1gzFFVsEQ1c fqCsv/GiE9qGU5DCtiPKVXCJUymoiTIyObO673soSNk0dimn26jnrup2dzv8hQYK s5JkFJuIlFvMniMZvAW9eBMGfSaLUmXWdildPv2iNIdqBTNfUuTlZMITwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEBOJlpcpyXCG+FopWXq3IsgjSKzMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvUUU0bVdseW5KY0liNFdpbFplcmNpeUNOSXJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOcAAAB MA0GCSqGSIb3DQEBCwUAA4IBAQDVP5nuwRfuwUzmcNti7QBQtlF+n11FUsYXZm0d LRitiEwo0xtBGstTVxLwzALUO4x/ORPHMBTVFLf3hoWLm9YxR1ZwkibqYnFxadAL 5uI0DwTot3K9NAxTkO3BrkRHu0xf5KGsFvE2bE1TKR0JHVcyhacS14iHAIkN2lRf ZWhWrq8m1h5CnXQ308YsuUnU/qsoTO+rizTnFqIjb26kCQa4dGmCTNzgkdDedUA6 o0x3AukLLTUuCemN9CFnzkrtORfMpuJfHX+9axFvldMqIh4hwvBjEz5S+dzMStE+ Ynk6IqUiH4KnzBBXgBfQcRW8kGjKf0tnZJN9qlYEpUR1RYB/ -----END CERTIFICATE-----Generated at Wed Jan 21 11:08:28 2026 by rpki-client