This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/dqmaHvknKqQBSGx8vkJB5GIkMu8.roa File: dqmaHvknKqQBSGx8vkJB5GIkMu8.roa (raw, json) Hash identifier: eq7/0vS6xbSn3q6IVW/vVMX2uGZHddMDolDzXZEf0pA= Subject key identifier: 76:A9:9A:1E:F9:27:2A:A4:01:48:6C:7C:BE:42:41:E4:62:24:32:EF Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691 Certificate serial: 019B7B35A98C98A50EE1672ADDF4B7618C3B Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/dqmaHvknKqQBSGx8vkJB5GIkMu8.roa Signing time: Thu 01 Jan 2026 20:17:52 +0000 ROA not before: Thu 01 Jan 2026 20:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207488 IP address blocks: 2001:678:c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a9:8c:98:a5:0e:e1:67:2a:dd:f4:b7:61:8c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691 Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76a99a1ef9272aa401486c7cbe4241e4622432ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:7d:24:23:50:2e:8d:8b:ad:8a:75:7a:3c: 51:44:32:b8:9a:28:09:5d:24:69:f5:32:1a:7e:66: bc:a4:d0:6f:e5:2e:ec:64:7e:f8:a1:db:6c:63:67: 41:91:5b:3c:9e:5b:94:a9:5f:e2:d5:90:01:25:d5: 65:18:a3:77:e8:95:99:1c:76:a1:37:93:80:9b:4f: b2:f3:9f:7e:72:62:f2:14:a3:f8:de:67:58:fa:b3: 2e:9d:f9:a7:9c:f2:02:7c:39:76:0c:d1:2d:f3:1a: b8:97:2e:7e:68:2d:64:f3:c4:5d:ca:ba:67:47:14: 0f:47:3b:c9:21:37:8c:2c:aa:8f:1e:49:c1:a5:5c: 98:70:a4:27:3a:a2:75:fa:a7:6a:bc:53:35:20:df: 2c:81:90:87:b9:2c:cd:c2:01:d9:dd:47:af:8c:53: 08:3d:3a:99:7f:eb:5b:82:35:79:ec:7e:0c:b0:32: 10:76:a4:82:e7:21:f2:3f:c4:40:23:93:de:72:e5: 17:d2:85:8c:21:8a:5f:d2:01:59:2d:56:fa:db:5f: 2f:84:9c:fe:8c:84:e8:49:12:0e:72:d5:e5:4f:15: 7d:96:12:19:cf:e0:80:94:12:01:19:47:4a:f8:56: 26:a7:50:97:90:90:17:4b:46:34:c5:12:d5:0a:4e: a6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A9:9A:1E:F9:27:2A:A4:01:48:6C:7C:BE:42:41:E4:62:24:32:EF X509v3 Authority Key Identifier: keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/dqmaHvknKqQBSGx8vkJB5GIkMu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c10::/48 Signature Algorithm: sha256WithRSAEncryption 46:43:6c:a5:a2:66:41:ef:22:d9:61:a5:73:bb:81:02:42:34: 05:89:15:72:f1:f9:00:62:97:ea:79:07:47:c6:d7:c1:9a:2c: cf:94:56:41:c9:c4:f7:6d:35:e0:97:1f:c1:91:09:36:4c:de: 95:bf:b7:ea:fd:8f:7a:09:40:ef:85:b6:a7:e4:db:86:90:55: e0:92:4d:be:aa:0d:51:cd:91:ea:1d:d2:7c:6c:80:04:23:0b: 6c:3a:f1:d4:8c:73:38:6f:f5:6a:65:1c:0a:86:7e:f8:a1:44: cd:01:72:e2:e0:51:14:58:76:c8:ae:d8:6f:e5:17:10:14:a6: b0:81:b1:17:fd:77:3f:6c:a4:a3:cc:3f:8d:d8:97:f4:cf:ca: f1:69:ab:35:ee:bf:3f:86:ea:c1:41:70:78:a0:5a:1d:8a:f8: 7b:0a:c5:3e:dc:2e:4b:8a:2a:75:58:e6:c6:b8:f0:9d:50:c4: 67:06:dc:38:dd:04:ac:7c:6b:87:ad:33:84:46:03:4b:c3:43: ae:bb:eb:e3:78:2c:e8:36:dc:65:ab:b9:23:71:da:50:b5:b0: d2:61:ec:87:55:84:8f:e7:45:9c:99:b1:24:10:76:57:87:bc: d9:a5:1c:e8:17:72:ed:f5:3c:c7:b7:8a:ca:09:d3:d7:44:a3: 86:e4:c8:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NamMmKUO4Wcq3fS3YYw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWQ2MDJmZDBkNDZkMzhjZGUxZTczMmM2NTJlYTk5NThl OTc2OTEwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmE5OWExZWY5MjcyYWE0MDE0ODZjN2NiZTQyNDFlNDYyMjQzMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOd9JCNQLo2LrYp1ejxRRDK4migJ XSRp9TIafma8pNBv5S7sZH74odtsY2dBkVs8nluUqV/i1ZABJdVlGKN36JWZHHah N5OAm0+y859+cmLyFKP43mdY+rMunfmnnPICfDl2DNEt8xq4ly5+aC1k88Rdyrpn RxQPRzvJITeMLKqPHknBpVyYcKQnOqJ1+qdqvFM1IN8sgZCHuSzNwgHZ3UevjFMI PTqZf+tbgjV57H4MsDIQdqSC5yHyP8RAI5PecuUX0oWMIYpf0gFZLVb6218vhJz+ jIToSRIOctXlTxV9lhIZz+CAlBIBGUdK+FYmp1CXkJAXS0Y0xRLVCk6m7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHapmh75JyqkAUhsfL5CQeRiJDLvMB8GA1UdIwQY MBaAFOjtYC/Q1G04zeHnMsZS6plY6XaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjIt OTRmOGZiMzAwOWYyLzEvZHFtYUh2a25LcVFCU0d4OHZrSkI1R0lrTXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjItOTRmOGZiMzAwOWYy LzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwQ MA0GCSqGSIb3DQEBCwUAA4IBAQBGQ2ylomZB7yLZYaVzu4ECQjQFiRVy8fkAYpfq eQdHxtfBmizPlFZBycT3bTXglx/BkQk2TN6Vv7fq/Y96CUDvhban5NuGkFXgkk2+ qg1RzZHqHdJ8bIAEIwtsOvHUjHM4b/VqZRwKhn74oUTNAXLi4FEUWHbIrthv5RcQ FKawgbEX/Xc/bKSjzD+N2Jf0z8rxaas17r8/hurBQXB4oFodivh7CsU+3C5Liip1 WObGuPCdUMRnBtw43QSsfGuHrTOERgNLw0Ouu+vjeCzoNtxlq7kjcdpQtbDSYeyH VYSP50WcmbEkEHZXh7zZpRzoF3Lt9TzHt4rKCdPXRKOG5Mgh -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:45 2026 by rpki-client