This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/QLDoP-ReOcESMl3rWUUCK8Ent8E.roa File: QLDoP-ReOcESMl3rWUUCK8Ent8E.roa (raw, json) Hash identifier: Z9tbQwfRK+5qo3RF9MBtyxEakl6h5R/1FbFvKf2xcj8= Subject key identifier: 40:B0:E8:3F:E4:5E:39:C1:12:32:5D:EB:59:45:02:2B:C1:27:B7:C1 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801848C8499895050459A44FC44998 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/QLDoP-ReOcESMl3rWUUCK8Ent8E.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 2a0f:7803:fb4e::/48 maxlen: 48 2a0f:7803:fe50::/44 maxlen: 48 2a0f:7803:fec0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:18:48:c8:49:98:95:05:04:59:a4:4f:c4:49:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40b0e83fe45e39c112325deb5945022bc127b7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:5f:0f:78:5b:cd:b3:3a:0e:04:08:bd:3f: 87:4f:06:94:16:dc:b1:57:83:84:cd:60:d8:37:44: 4c:a5:30:bb:46:1b:8f:2a:a1:6e:9a:75:ab:4f:72: 79:13:49:67:7c:b3:96:41:a6:37:f0:bc:9f:07:63: b7:92:40:9e:2e:a0:70:ae:ce:b2:92:19:39:68:79: 62:f5:92:9d:3a:8f:03:0e:a0:37:4e:0c:92:79:3c: 72:1e:0f:f7:ce:61:a7:9a:cd:8d:62:d6:71:c7:10: e3:c2:a4:ee:a5:09:f1:b9:4d:14:f7:5a:e7:d3:16: d9:64:52:fa:df:23:e8:83:d3:c6:1e:6c:17:8a:0d: 39:8a:ac:0b:44:8f:46:a4:2f:43:f6:c8:92:91:ab: 10:1a:ec:d1:30:a2:c4:2a:ca:61:40:9b:d6:23:d4: 43:20:3d:3c:71:88:d2:39:6d:d0:cf:03:cb:fd:f7: 85:38:fc:c6:44:f0:54:ea:c9:04:1d:4d:e8:3a:01: 72:49:b5:6a:93:95:e7:8a:8d:33:bd:62:53:bf:98: c5:8a:5b:24:57:fb:1f:c3:c1:e1:40:fe:31:56:5d: 8f:08:e0:5b:14:31:f9:2c:f6:80:4b:29:d2:d5:b5: ba:50:a2:b5:10:73:50:14:80:5e:5e:78:ae:ad:9a: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:E8:3F:E4:5E:39:C1:12:32:5D:EB:59:45:02:2B:C1:27:B7:C1 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/QLDoP-ReOcESMl3rWUUCK8Ent8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fb4e::/48 2a0f:7803:fe50::/44 2a0f:7803:fec0::/44 Signature Algorithm: sha256WithRSAEncryption ae:d5:34:49:d2:97:86:4a:8c:fc:24:6a:03:eb:51:78:cc:11: 16:d2:06:56:c2:ec:77:74:2d:77:0c:be:88:ac:41:d0:92:70: 6a:82:2b:80:df:e4:b4:c3:08:c4:bf:97:05:fd:20:e3:79:f1: f7:05:e5:c2:c3:99:01:ae:74:7a:8f:0f:74:20:a6:b9:1e:9c: 15:73:b1:23:58:c5:77:ba:ef:e6:0c:99:dc:22:53:51:fb:1e: a0:7a:28:2e:bb:a2:f5:66:96:0d:5f:ab:af:7a:a5:46:29:fc: 34:2f:f2:e5:92:bf:b6:46:0a:74:e3:d3:38:63:b7:2e:d1:04: d7:e8:58:a9:72:01:b1:42:cc:b3:f6:83:ca:a2:c6:82:58:22: a7:39:a3:f0:5c:c8:bc:35:28:4f:9e:44:f5:9d:b6:93:16:04: cf:2b:27:3d:91:4a:aa:68:67:0e:25:24:ef:47:60:f7:df:70: 15:0c:f0:38:0e:3f:d3:b2:6e:14:6c:44:e5:0a:82:c0:7d:ee: c8:02:c4:d7:96:70:e1:59:f6:35:c0:9d:17:bf:01:8f:fc:0f: a1:d3:44:ae:8f:83:8a:08:cf:e9:dc:57:bc:ef:5f:ae:f1:fc: d6:b5:93:2c:92:b5:1d:dc:c4:f6:e0:98:d7:e9:92:69:36:56: 32:c5:44:8b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gBhIyEmYlQUEWaRPxEmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGIwZTgzZmU0NWUzOWMxMTIzMjVkZWI1OTQ1MDIyYmMxMjdiN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EtfD3hbzbM6DgQIvT+HTwaUFtyx V4OEzWDYN0RMpTC7RhuPKqFumnWrT3J5E0lnfLOWQaY38LyfB2O3kkCeLqBwrs6y khk5aHli9ZKdOo8DDqA3TgySeTxyHg/3zmGnms2NYtZxxxDjwqTupQnxuU0U91rn 0xbZZFL63yPog9PGHmwXig05iqwLRI9GpC9D9siSkasQGuzRMKLEKsphQJvWI9RD ID08cYjSOW3QzwPL/feFOPzGRPBU6skEHU3oOgFySbVqk5Xnio0zvWJTv5jFilsk V/sfw8HhQP4xVl2PCOBbFDH5LPaASynS1bW6UKK1EHNQFIBeXniurZrDHQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFECw6D/kXjnBEjJd61lFAivBJ7fBMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvUUxEb1AtUmVPY0VTTWwzcldVVUNLOEVudDhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg94A/tO AwcEKg94A/5QAwcEKg94A/7AMA0GCSqGSIb3DQEBCwUAA4IBAQCu1TRJ0peGSoz8 JGoD61F4zBEW0gZWwux3dC13DL6IrEHQknBqgiuA3+S0wwjEv5cF/SDjefH3BeXC w5kBrnR6jw90IKa5HpwVc7EjWMV3uu/mDJncIlNR+x6geiguu6L1ZpYNX6uveqVG Kfw0L/Llkr+2Rgp049M4Y7cu0QTX6FipcgGxQsyz9oPKosaCWCKnOaPwXMi8NShP nkT1nbaTFgTPKyc9kUqqaGcOJSTvR2D333AVDPA4Dj/Tsm4UbETlCoLAfe7IAsTX lnDhWfY1wJ0XvwGP/A+h00Suj4OKCM/p3Fe871+u8fzWtZMskrUd3MT24JjX6ZJp NlYyxUSL -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client