This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa File: q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa (raw, json) Hash identifier: eotOUqJ53rWQxs9/sn9KK6XM4STngZxv7oKNTVxb9eI= Subject key identifier: AB:4E:66:6F:C2:91:A5:90:BE:75:98:D2:93:6A:CC:28:DD:A0:13:F6 Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120 Certificate serial: 019B7DCACF3C9D288995E6621333CD4134F6 Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa Signing time: Fri 02 Jan 2026 08:20:01 +0000 ROA not before: Fri 02 Jan 2026 08:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208731 IP address blocks: 2a0a:e5c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cf:3c:9d:28:89:95:e6:62:13:33:cd:41:34:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab4e666fc291a590be7598d2936acc28dda013f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:73:b8:0f:05:f7:63:7c:7f:12:1c:46:ab: 54:62:ae:41:c8:1a:2d:e0:8f:2b:24:ac:cf:2f:23: a6:7c:25:d0:30:29:b4:4d:9a:d6:81:39:6a:78:49: 0b:d3:47:ac:13:93:f3:00:4e:ae:d4:f6:14:6b:05: dd:03:e3:9b:ff:38:50:2f:25:46:09:8b:df:2c:be: da:bc:23:1c:02:46:6b:17:f8:96:21:40:94:f5:33: 47:4b:b4:fc:95:d0:47:57:ee:a5:ea:74:df:94:ea: 5e:40:07:13:1b:e8:11:20:bc:32:95:a7:21:ca:e6: 50:98:01:44:b8:0e:51:70:b8:44:d1:37:58:1f:ea: d0:51:eb:a4:84:49:c0:48:05:77:a2:6f:b0:a9:56: 9d:67:a3:58:69:78:0b:74:a0:64:67:24:82:9a:b1: 68:e8:8e:c0:03:82:5e:fe:08:e2:a1:b1:54:ad:ec: 74:ff:65:76:d4:cc:9d:40:41:33:a2:8b:c8:3e:6d: 75:09:21:67:43:e4:19:58:72:b7:22:5b:4f:ff:af: 08:01:ec:88:11:d8:f0:b3:a9:3b:ef:7e:5d:c6:ac: a5:a9:66:d2:ac:29:d5:25:2b:1c:d0:b9:df:c8:63: eb:da:3a:99:ff:df:a4:aa:fd:14:c4:ad:da:2a:1f: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4E:66:6F:C2:91:A5:90:BE:75:98:D2:93:6A:CC:28:DD:A0:13:F6 X509v3 Authority Key Identifier: keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:e5c0::/29 Signature Algorithm: sha256WithRSAEncryption 36:a6:fa:12:94:ed:29:54:b4:dd:19:c4:22:74:ae:b1:1c:3e: 87:1c:d9:ec:45:8b:3f:d1:e0:1e:df:5c:e0:80:db:83:23:7a: fe:d4:17:2b:8b:5e:19:31:c4:b8:92:76:5a:c2:ef:be:ab:cf: 1d:3d:e9:30:cf:08:4c:ab:85:cb:af:9f:a2:48:0d:ec:b8:a0: 8c:7b:0f:be:78:1d:bf:33:f4:52:ef:f2:30:c4:c1:40:0d:fd: 85:e1:83:fe:14:fa:38:b8:e6:3b:cc:32:db:b5:ee:9c:3f:d4: 84:fd:aa:5b:33:09:83:34:04:82:00:40:1a:be:5e:cb:0f:2e: 41:cc:0f:d6:f2:c7:84:e0:35:d8:de:0b:89:f6:a2:92:3d:36: f0:00:bb:08:4b:4a:10:99:1b:e3:11:9e:e9:6c:2c:2b:92:1f: 4b:67:c4:a7:92:fb:4c:5b:ec:0d:bb:f3:11:e8:c5:1a:16:69: d4:7e:af:bc:ee:d6:89:b1:44:10:ba:f7:34:b7:92:a3:b3:18: e0:40:97:e1:e2:c8:a5:7e:a4:d9:06:b7:c2:63:b0:d2:36:2c: 3a:91:a9:db:85:20:27:3a:e0:b8:84:f0:a2:b8:15:00:c0:8a: 7c:1e:32:c5:a7:08:98:67:a2:aa:7e:1d:8e:8b:ab:80:cb:e7: 13:3c:d5:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9ys88nSiJleZiEzPNQTT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy MzQxMjAwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjRlNjY2ZmMyOTFhNTkwYmU3NTk4ZDI5MzZhY2MyOGRkYTAxM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nFzuA8F92N8fxIcRqtUYq5ByBot 4I8rJKzPLyOmfCXQMCm0TZrWgTlqeEkL00esE5PzAE6u1PYUawXdA+Ob/zhQLyVG CYvfLL7avCMcAkZrF/iWIUCU9TNHS7T8ldBHV+6l6nTflOpeQAcTG+gRILwylach yuZQmAFEuA5RcLhE0TdYH+rQUeukhEnASAV3om+wqVadZ6NYaXgLdKBkZySCmrFo 6I7AA4Je/gjiobFUrex0/2V21MydQEEzoovIPm11CSFnQ+QZWHK3IltP/68IAeyI Edjws6k7735dxqylqWbSrCnVJSsc0LnfyGPr2jqZ/9+kqv0UxK3aKh/WFQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKtOZm/CkaWQvnWY0pNqzCjdoBP2MB8GA1UdIwQY MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt YmZmYjc1N2MzMTM0LzEvcTA1bWI4S1JwWkMtZFpqU2syck1LTjJnRV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0 LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrlwDAN BgkqhkiG9w0BAQsFAAOCAQEANqb6EpTtKVS03RnEInSusRw+hxzZ7EWLP9HgHt9c 4IDbgyN6/tQXK4teGTHEuJJ2WsLvvqvPHT3pMM8ITKuFy6+fokgN7LigjHsPvngd vzP0Uu/yMMTBQA39heGD/hT6OLjmO8wy27XunD/UhP2qWzMJgzQEggBAGr5eyw8u QcwP1vLHhOA12N4Lifaikj028AC7CEtKEJkb4xGe6WwsK5IfS2fEp5L7TFvsDbvz EejFGhZp1H6vvO7WibFEELr3NLeSo7MY4ECX4eLIpX6k2Qa3wmOw0jYsOpGp24Ug JzrguITworgVAMCKfB4yxacImGeiqn4djourgMvnEzzVTg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:39 2026 by rpki-client