This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/q-BYaRY5-rYADWaAizqNDo5R5LQ.roa File: q-BYaRY5-rYADWaAizqNDo5R5LQ.roa (raw, json) Hash identifier: jj+b5N3chaFLsM/vwPEzUIxkZ/wHaz7s3j5EcQbL1tU= Subject key identifier: AB:E0:58:69:16:39:FA:B6:00:0D:66:80:8B:3A:8D:0E:8E:51:E4:B4 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8019E1FCA40238201D2661077B7C0D Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/q-BYaRY5-rYADWaAizqNDo5R5LQ.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47741 IP address blocks: 2a0f:7803:ff00::/44 maxlen: 48 2a0f:7806:fffb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:19:e1:fc:a4:02:38:20:1d:26:61:07:7b:7c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abe058691639fab6000d66808b3a8d0e8e51e4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:8b:52:da:dc:82:ef:8d:17:0b:85:6b:f5: 19:d8:fd:09:9c:a2:c0:75:b3:df:2b:eb:87:8a:7b: 29:3f:74:00:c5:12:39:a1:af:fa:b9:66:38:c3:31: 25:04:df:25:47:b1:d8:9c:11:71:59:72:c8:ca:99: 24:c5:3e:9d:ab:38:e1:0d:02:1c:d6:29:02:d6:99: 32:ff:59:74:e9:bd:96:51:62:80:ce:0a:93:9b:43: 58:f4:e1:e4:5f:a8:38:59:35:d2:6b:da:e8:20:f7: 58:2b:68:3a:de:c5:02:55:67:bc:79:3e:6d:dc:7e: 8e:1e:ea:e7:a9:eb:26:4c:22:66:59:24:c2:df:49: f1:c9:8e:8d:3b:83:cd:01:14:93:97:c7:c2:0e:55: 4c:11:74:bc:68:e8:f6:cd:74:24:5d:3d:83:c8:39: 73:93:dd:1d:94:d8:0c:c3:21:eb:38:17:4f:20:29: 4c:2f:ce:e5:61:00:f2:1d:d0:5e:b1:96:9a:2c:c3: 8a:26:63:10:36:62:57:e4:1a:5f:a8:7c:62:15:40: 6d:1f:05:a0:f6:6a:58:62:de:13:9e:28:4b:bf:65: 6e:49:b3:ae:c7:75:ec:97:95:2b:55:b4:0a:c4:83: 89:f6:55:db:09:f5:ea:35:54:03:56:42:2f:19:bf: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:58:69:16:39:FA:B6:00:0D:66:80:8B:3A:8D:0E:8E:51:E4:B4 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/q-BYaRY5-rYADWaAizqNDo5R5LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:ff00::/44 2a0f:7806:fffb::/48 Signature Algorithm: sha256WithRSAEncryption 14:9a:b3:34:23:f1:8f:20:ef:67:5c:b6:a9:6d:e2:7d:fa:44: 1a:8d:a0:a5:05:c4:c0:36:80:70:b4:d1:e1:e7:90:2d:09:4e: 93:82:78:6f:d6:b3:55:61:c5:22:38:e2:2e:02:01:a8:8a:7b: a4:2e:e3:20:89:40:ea:d8:bb:8b:f1:81:df:aa:32:5b:fe:07: 83:52:ea:12:4d:9f:4c:f1:e2:3a:fa:2b:f5:a3:f9:b5:9a:ec: 09:1e:13:ab:44:3c:0e:b9:6c:0a:8e:00:b4:54:f7:4d:9c:4f: 24:de:3c:c6:bd:df:0e:96:a0:b3:7a:62:2b:bb:d2:6d:cb:42: de:c5:3b:86:08:af:8a:b6:53:00:f4:41:f4:78:31:3d:c2:56: d5:18:27:36:8f:ee:a6:82:78:1e:6d:29:94:0a:20:36:50:6c: 46:8c:fb:ae:1c:10:19:92:ff:e1:c6:84:6d:f2:c4:7a:d8:d1: 8a:e5:51:6a:4c:f6:81:2a:95:1f:52:6b:58:7e:c0:f4:a3:fd: ba:6b:6b:9d:d4:9a:c9:fd:a6:62:f1:6e:27:7c:9d:92:c6:c1: 5f:52:4b:93:d9:69:70:f8:4e:4c:3b:69:37:b9:65:7e:5f:3a: 5f:27:09:c3:fd:43:cf:16:99:c1:6e:50:c1:5a:04:60:2b:08: f2:4b:d9:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gBnh/KQCOCAdJmEHe3wNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmUwNTg2OTE2MzlmYWI2MDAwZDY2ODA4YjNhOGQwZThlNTFlNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2+LUtrcgu+NFwuFa/UZ2P0JnKLA dbPfK+uHinspP3QAxRI5oa/6uWY4wzElBN8lR7HYnBFxWXLIypkkxT6dqzjhDQIc 1ikC1pky/1l06b2WUWKAzgqTm0NY9OHkX6g4WTXSa9roIPdYK2g63sUCVWe8eT5t 3H6OHurnqesmTCJmWSTC30nxyY6NO4PNARSTl8fCDlVMEXS8aOj2zXQkXT2DyDlz k90dlNgMwyHrOBdPIClML87lYQDyHdBesZaaLMOKJmMQNmJX5BpfqHxiFUBtHwWg 9mpYYt4TnihLv2VuSbOux3Xsl5UrVbQKxIOJ9lXbCfXqNVQDVkIvGb8dRQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKvgWGkWOfq2AA1mgIs6jQ6OUeS0MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvcS1CWWFSWTUtcllBRFdhQWl6cU5EbzVSNUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg94A/8A AwcAKg94Bv/7MA0GCSqGSIb3DQEBCwUAA4IBAQAUmrM0I/GPIO9nXLapbeJ9+kQa jaClBcTANoBwtNHh55AtCU6Tgnhv1rNVYcUiOOIuAgGoinukLuMgiUDq2LuL8YHf qjJb/geDUuoSTZ9M8eI6+iv1o/m1muwJHhOrRDwOuWwKjgC0VPdNnE8k3jzGvd8O lqCzemIru9Jty0LexTuGCK+KtlMA9EH0eDE9wlbVGCc2j+6mgngebSmUCiA2UGxG jPuuHBAZkv/hxoRt8sR62NGK5VFqTPaBKpUfUmtYfsD0o/26a2ud1JrJ/aZi8W4n fJ2SxsFfUkuT2Wlw+E5MO2k3uWV+XzpfJwnD/UPPFpnBblDBWgRgKwjyS9kx -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:56 2026 by rpki-client