This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/q7k3Jgi45VhxVB2FaU-fxYdycok.roa File: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (raw, json) Hash identifier: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY= Subject key identifier: AB:B9:37:26:08:B8:E5:58:71:54:1D:85:69:4F:9F:C5:87:72:72:89 Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21 Certificate serial: 019B7DCA43C5ED5EA6DC1C4A9F4F9C245766 Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/q7k3Jgi45VhxVB2FaU-fxYdycok.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215869 IP address blocks: 2001:67c:23bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:43:c5:ed:5e:a6:dc:1c:4a:9f:4f:9c:24:57:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abb9372608b8e55871541d85694f9fc587727289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:80:a6:b6:ce:7b:ce:c7:45:8f:4c:23:6e: 24:83:a3:93:00:af:46:19:5a:ab:43:30:09:f1:54: 02:48:c6:f1:4b:ac:73:b5:fc:0d:d6:1c:06:d8:6d: e7:f8:d8:20:e4:3e:36:8f:8c:97:25:e3:7f:6c:e0: 2c:aa:95:06:0b:ee:f2:3f:bd:fe:8b:1f:78:c2:ea: dd:db:ee:6e:0e:78:d0:17:2b:47:63:2b:42:1b:b7: 71:ac:b6:b1:a8:8c:e7:25:66:10:f5:84:63:5e:48: 28:f6:c4:cd:b9:40:98:da:f3:f7:35:29:e2:5e:ba: 7c:fa:6e:2b:ff:1c:16:3e:76:33:88:c9:fc:e8:f4: 18:ea:3d:b6:26:f1:f2:0d:67:fb:e3:b5:15:aa:51: 7c:f2:10:be:18:2b:41:68:36:b5:2f:e8:fc:1c:5f: 9c:0c:95:77:0a:9b:c5:45:7f:99:54:ff:ce:5b:eb: 84:93:74:22:cc:ba:2d:97:0b:0c:90:f9:5a:4a:5c: 37:91:88:30:41:3f:52:ce:e1:26:36:11:a1:72:42: 09:a4:69:80:f1:c0:96:cf:c9:56:73:f4:5a:8d:e2: bc:e9:72:01:42:5c:86:af:5a:bb:3e:ef:4d:b5:8a: 42:1b:71:6b:69:20:2c:62:24:32:da:36:37:36:30: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:37:26:08:B8:E5:58:71:54:1D:85:69:4F:9F:C5:87:72:72:89 X509v3 Authority Key Identifier: keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/q7k3Jgi45VhxVB2FaU-fxYdycok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:23bc::/48 Signature Algorithm: sha256WithRSAEncryption 95:0d:ca:7a:a3:69:b4:7f:52:89:4e:50:5d:37:2e:b8:eb:c0: 4b:74:cc:84:d6:a4:6c:76:57:c7:c6:9a:11:08:6d:8b:a9:ee: bd:b2:24:83:5d:d2:53:ab:25:66:5c:e7:f4:a2:79:97:7f:12: 08:ee:e7:d9:21:69:dc:20:0b:b7:f6:24:ce:01:b2:66:29:c9: de:9e:b2:f4:5a:79:5b:44:6b:b9:58:f6:71:38:45:8c:e9:f2: 31:63:57:79:4b:bc:5e:47:1e:d3:aa:d8:22:60:07:81:31:7b: 8c:51:a0:f9:58:b9:fd:d0:02:e5:8d:62:78:ff:a2:60:23:7d: 78:f5:2e:01:6d:42:8b:69:6e:c4:b2:5f:d9:c1:70:3e:21:d6: ea:0c:09:a7:f2:df:f1:32:e4:a1:47:32:49:34:da:6c:06:13: 7b:9a:50:d7:b1:31:72:ff:1f:86:59:c3:6f:00:bd:f9:b6:42: 2d:63:f9:be:24:a1:41:6b:a9:9a:d5:ae:7d:81:85:7e:52:05: 21:8b:54:fc:35:8a:c0:f6:87:ba:80:04:5a:7b:85:84:eb:80: 0e:b9:82:c9:d8:2e:e0:b6:42:9a:2c:61:7e:80:b2:ae:c7:ee: 6f:ba:e8:2a:a8:59:4a:a4:32:bf:85:13:79:92:7b:5b:a6:7e: 83:6f:3e:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ykPF7V6m3BxKn0+cJFdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzZjMTYyNzhmYzgyMWUxZWVmOTMyZmRlYTliM2RkNjNj YTZiMjEwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmI5MzcyNjA4YjhlNTU4NzE1NDFkODU2OTRmOWZjNTg3NzI3Mjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+uAprbOe87HRY9MI24kg6OTAK9G GVqrQzAJ8VQCSMbxS6xztfwN1hwG2G3n+Ngg5D42j4yXJeN/bOAsqpUGC+7yP73+ ix94wurd2+5uDnjQFytHYytCG7dxrLaxqIznJWYQ9YRjXkgo9sTNuUCY2vP3NSni Xrp8+m4r/xwWPnYziMn86PQY6j22JvHyDWf747UVqlF88hC+GCtBaDa1L+j8HF+c DJV3CpvFRX+ZVP/OW+uEk3QizLotlwsMkPlaSlw3kYgwQT9SzuEmNhGhckIJpGmA 8cCWz8lWc/RajeK86XIBQlyGr1q7Pu9NtYpCG3FraSAsYiQy2jY3NjATdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKu5NyYIuOVYcVQdhWlPn8WHcnKJMB8GA1UdIwQY MBaAFBB2wWJ4/IIeHu+TL96ps91jymshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQt ZDQ5NGQ5OTdkMzk4LzEvcTdrM0pnaTQ1Vmh4VkIyRmFVLWZ4WWR5Y29rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQtZDQ5NGQ5OTdkMzk4 LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCO8 MA0GCSqGSIb3DQEBCwUAA4IBAQCVDcp6o2m0f1KJTlBdNy6468BLdMyE1qRsdlfH xpoRCG2Lqe69siSDXdJTqyVmXOf0onmXfxII7ufZIWncIAu39iTOAbJmKcnenrL0 WnlbRGu5WPZxOEWM6fIxY1d5S7xeRx7TqtgiYAeBMXuMUaD5WLn90ALljWJ4/6Jg I3149S4BbUKLaW7Esl/ZwXA+IdbqDAmn8t/xMuShRzJJNNpsBhN7mlDXsTFy/x+G WcNvAL35tkItY/m+JKFBa6ma1a59gYV+UgUhi1T8NYrA9oe6gARae4WE64AOuYLJ 2C7gtkKaLGF+gLKux+5vuugqqFlKpDK/hRN5kntbpn6Dbz7u -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:00 2026 by rpki-client