This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/QiANL6hD31O5NTAaW1W-Nvlf9gY.roa File: QiANL6hD31O5NTAaW1W-Nvlf9gY.roa (raw, json) Hash identifier: uXLv0uniDn8Rar8jmxGxebjw15OBJXAN7sUxsLeh2Ro= Subject key identifier: 42:20:0D:2F:A8:43:DF:53:B9:35:30:1A:5B:55:BE:36:F9:5F:F6:06 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BD23CF8B040E91CECC62F6BA438B3 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/QiANL6hD31O5NTAaW1W-Nvlf9gY.roa Signing time: Mon 24 Nov 2025 16:04:16 +0000 ROA not before: Mon 24 Nov 2025 16:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207252 IP address blocks: 2a05:b0c6:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:d2:3c:f8:b0:40:e9:1c:ec:c6:2f:6b:a4:38:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=42200d2fa843df53b935301a5b55be36f95ff606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:9c:bf:5b:64:65:d1:16:cd:dd:d1:b5:29: 14:36:66:5b:8f:c6:56:31:a5:bc:6b:73:fb:4e:5a: 2b:6d:f3:6e:68:03:0f:2d:0c:1f:f1:fb:76:2d:95: ce:43:ff:b1:86:f1:31:c8:7d:13:da:fc:ef:c2:b3: cb:f5:5f:c8:8d:17:a1:aa:b9:a0:f3:6a:ca:7b:57: db:35:ba:13:a7:5e:f3:ba:12:25:76:46:ee:23:b5: a4:53:c8:f1:f9:27:49:ae:d1:35:15:58:f2:a8:67: 9c:ed:68:3d:69:b7:5e:93:eb:0a:b1:1b:a7:b1:c1: fb:8b:33:cf:89:e3:56:65:3c:23:80:6d:42:8e:3c: ea:60:0d:76:c3:ae:5b:8d:69:62:92:1e:49:d7:4f: 38:5b:ae:a3:cc:93:33:26:4e:04:6f:e3:e8:7d:9a: 21:2f:80:8b:c0:b3:e6:a6:6b:91:67:40:be:8d:55: a7:d2:0b:c6:75:36:a3:92:c3:be:68:b9:50:2d:f2: a4:09:d1:20:db:f5:72:a2:7d:c2:eb:b9:c8:49:37: 17:45:e0:af:88:4e:b4:18:c0:1b:a3:1d:2c:d6:0d: fd:9e:b6:0e:ad:62:ec:af:5c:73:07:ce:25:11:3a: d9:92:c8:04:e2:12:20:2a:ed:ab:43:c0:99:e4:e2: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:20:0D:2F:A8:43:DF:53:B9:35:30:1A:5B:55:BE:36:F9:5F:F6:06 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/QiANL6hD31O5NTAaW1W-Nvlf9gY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c6:3001::/48 Signature Algorithm: sha256WithRSAEncryption 4b:2d:7f:5d:ca:37:9f:29:90:dc:1d:d4:95:b4:9a:68:ae:a0: 1b:05:8f:17:77:78:53:c9:e3:d3:94:6e:7c:4a:fb:84:a5:02: 03:60:7c:d8:57:bf:4c:26:a0:21:c6:e9:14:e2:91:03:e0:28: 90:5f:69:a1:c5:1d:2d:9c:89:68:f0:6a:68:6a:91:21:c8:be: fe:06:6a:7e:02:28:52:5f:64:75:0a:01:42:ad:4b:c1:d8:9a: 19:63:44:1f:56:d5:0b:62:73:91:3e:a6:02:51:60:2a:90:58: cc:15:21:2f:42:65:9d:bd:5f:bf:43:3d:07:60:f1:1d:d9:ae: 73:24:f1:d3:94:6a:af:9a:d3:4a:1a:a1:0b:a5:38:a4:29:77: 17:02:8f:0d:5a:4e:ed:0c:eb:26:91:19:58:c4:7b:7c:75:6e: ed:9a:c8:ea:12:82:3c:fa:dc:65:f9:19:c0:77:10:71:8d:82: 19:b6:4e:93:0e:56:be:e8:74:d6:30:99:4a:69:87:f0:d9:cb: f2:5e:b8:cf:14:98:67:3a:fa:0a:08:0f:6c:a8:c7:b1:c3:21: 6b:d2:46:a5:7c:12:2f:4b:11:07:51:d0:f7:45:98:ba:3a:ff: 56:81:99:0f:15:75:01:f4:f8:ce:ee:1b:0b:f5:70:3d:d0:0c: ed:97:29:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZq2m9I8+LBA6Rzsxi9rpDizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjIwMGQyZmE4NDNkZjUzYjkzNTMwMWE1YjU1YmUzNmY5NWZmNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ6cv1tkZdEWzd3RtSkUNmZbj8ZW MaW8a3P7TlorbfNuaAMPLQwf8ft2LZXOQ/+xhvExyH0T2vzvwrPL9V/IjRehqrmg 82rKe1fbNboTp17zuhIldkbuI7WkU8jx+SdJrtE1FVjyqGec7Wg9abdek+sKsRun scH7izPPieNWZTwjgG1CjjzqYA12w65bjWlikh5J1084W66jzJMzJk4Eb+PofZoh L4CLwLPmpmuRZ0C+jVWn0gvGdTajksO+aLlQLfKkCdEg2/Vyon3C67nISTcXReCv iE60GMAbox0s1g39nrYOrWLsr1xzB84lETrZksgE4hIgKu2rQ8CZ5OKlAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEIgDS+oQ99TuTUwGltVvjb5X/YGMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvUWlBTkw2aEQzMU81TlRBYVcxVy1OdmxmOWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWwxjAB MA0GCSqGSIb3DQEBCwUAA4IBAQBLLX9dyjefKZDcHdSVtJporqAbBY8Xd3hTyePT lG58SvuEpQIDYHzYV79MJqAhxukU4pED4CiQX2mhxR0tnIlo8GpoapEhyL7+Bmp+ AihSX2R1CgFCrUvB2JoZY0QfVtULYnORPqYCUWAqkFjMFSEvQmWdvV+/Qz0HYPEd 2a5zJPHTlGqvmtNKGqELpTikKXcXAo8NWk7tDOsmkRlYxHt8dW7tmsjqEoI8+txl +RnAdxBxjYIZtk6TDla+6HTWMJlKaYfw2cvyXrjPFJhnOvoKCA9sqMexwyFr0kal fBIvSxEHUdD3RZi6Ov9WgZkPFXUB9PjO7hsL9XA90AztlykQ -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:46 2025 by rpki-client