This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa File: dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa (raw, json) Hash identifier: NGvNDCH8JOp3+J18djkqIKrsn9XAQSXC2Ct+Fov8XNs= Subject key identifier: 75:07:91:15:7E:B8:C3:B1:A3:E6:D4:4F:F2:40:EE:63:7F:AA:19:83 Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Certificate serial: 019B7F8331461A5B4561F51669E2E1E6CDE3 Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa Signing time: Fri 02 Jan 2026 16:21:02 +0000 ROA not before: Fri 02 Jan 2026 16:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211935 IP address blocks: 2a0e:f43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:31:46:1a:5b:45:61:f5:16:69:e2:e1:e6:cd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Validity Not Before: Jan 2 16:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=750791157eb8c3b1a3e6d44ff240ee637faa1983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:e3:d4:8f:3c:66:b5:f8:37:21:1d:f2:61: b5:02:a5:66:06:aa:2f:6f:de:ac:fe:eb:61:2e:ab: 6e:58:dd:98:6a:5c:2b:d9:3b:55:fb:50:4c:bd:af: 02:49:a7:27:64:af:88:ff:fe:d7:cb:47:b9:2a:a4: 0a:ff:a3:45:aa:09:4f:e8:ae:97:a3:5e:35:c6:44: 9d:27:01:80:2b:00:af:e1:63:9c:9d:fa:45:df:78: f7:14:b4:97:c5:32:10:a8:df:4f:3d:57:5d:a5:c9: 52:dc:3a:7f:ca:49:44:78:60:a6:5f:ce:8d:c6:46: 84:3c:6a:e1:73:cf:1c:79:26:e8:30:95:44:e6:a5: 91:a6:e6:9a:66:24:66:db:2a:53:1f:77:0e:4d:70: 23:83:5f:56:6a:de:07:2f:80:38:00:b1:24:8c:b6: 35:3b:f5:43:03:a7:0a:d2:68:ea:b1:05:f1:6c:eb: 22:ce:81:9f:e7:d0:6d:1e:bf:e6:2f:52:71:33:a3: c2:10:54:06:10:81:b0:df:db:30:c5:fb:d0:65:e4: bc:ad:c5:03:68:af:72:ad:af:c7:97:12:ef:ae:01: 50:1f:9c:de:d1:63:fe:9f:70:18:ba:6d:42:d4:fb: 82:7c:80:2e:e9:f6:f8:02:89:73:b8:ed:fe:be:74: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:91:15:7E:B8:C3:B1:A3:E6:D4:4F:F2:40:EE:63:7F:AA:19:83 X509v3 Authority Key Identifier: keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:f43::/48 Signature Algorithm: sha256WithRSAEncryption 86:b2:17:5a:ae:94:c5:d8:69:47:19:83:66:1f:55:9c:da:82: ac:ac:10:bb:37:97:a4:f2:8c:ac:13:96:6b:e2:e5:b5:bb:7e: 31:96:0c:60:86:62:a9:12:36:c4:23:52:6f:ae:89:0c:75:36: a5:fc:06:ac:8f:12:08:3d:6a:dd:c7:23:24:9f:5b:06:a8:2b: ac:47:6e:79:59:61:c7:58:3e:31:d4:fa:ff:06:04:5c:11:e5: 0f:77:68:4d:ae:09:09:fe:3e:be:bc:80:2a:50:26:6c:ab:34: 84:7f:9a:31:4e:0f:47:45:ee:34:e6:da:77:7a:56:45:36:43: 84:ce:3b:9e:65:8b:3f:cd:8d:f0:80:9d:d1:96:19:6c:55:87: 01:de:09:3a:c7:87:1a:25:4e:79:b4:65:6e:a4:23:64:6e:0e: bd:e9:5c:42:f0:56:e5:42:c0:e7:3c:12:f6:88:55:45:8e:45: f7:db:ba:bf:2a:e8:28:a4:57:ce:8d:14:04:9d:4b:62:d1:ef: cf:0d:00:cb:d2:3c:db:c2:c4:7e:76:4b:07:31:87:31:24:9f: 24:f3:b9:d1:09:be:60:40:c1:b3:5d:8c:3a:92:ca:c6:94:a0: a0:fd:6c:8a:ba:80:29:88:eb:e5:12:28:37:8f:c3:94:97:21: 9a:f6:91:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gzFGGltFYfUWaeLh5s3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx MWZkMTAwHhcNMjYwMTAyMTYyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTA3OTExNTdlYjhjM2IxYTNlNmQ0NGZmMjQwZWU2MzdmYWExOTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cPj1I88ZrX4NyEd8mG1AqVmBqov b96s/uthLqtuWN2Yalwr2TtV+1BMva8CSacnZK+I//7Xy0e5KqQK/6NFqglP6K6X o141xkSdJwGAKwCv4WOcnfpF33j3FLSXxTIQqN9PPVddpclS3Dp/yklEeGCmX86N xkaEPGrhc88ceSboMJVE5qWRpuaaZiRm2ypTH3cOTXAjg19Wat4HL4A4ALEkjLY1 O/VDA6cK0mjqsQXxbOsizoGf59BtHr/mL1JxM6PCEFQGEIGw39swxfvQZeS8rcUD aK9yra/HlxLvrgFQH5ze0WP+n3AYum1C1PuCfIAu6fb4AolzuO3+vnRPDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHUHkRV+uMOxo+bUT/JA7mN/qhmDMB8GA1UdIwQY MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt MjFkZjU1YmE5ZWJmLzEvZFFlUkZYNjR3N0dqNXRSUDhrRHVZMy1xR1lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4PQwAA MA0GCSqGSIb3DQEBCwUAA4IBAQCGshdarpTF2GlHGYNmH1Wc2oKsrBC7N5ek8oys E5Zr4uW1u34xlgxghmKpEjbEI1JvrokMdTal/AasjxIIPWrdxyMkn1sGqCusR255 WWHHWD4x1Pr/BgRcEeUPd2hNrgkJ/j6+vIAqUCZsqzSEf5oxTg9HRe405tp3elZF NkOEzjueZYs/zY3wgJ3RlhlsVYcB3gk6x4caJU55tGVupCNkbg696VxC8FblQsDn PBL2iFVFjkX327q/KugopFfOjRQEnUti0e/PDQDL0jzbwsR+dksHMYcxJJ8k87nR Cb5gQMGzXYw6ksrGlKCg/WyKuoApiOvlEig3j8OUlyGa9pHu -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:55 2026 by rpki-client