This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/QzeP51koEMjHeE88RWvwCqM_qGQ.roa File: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (raw, json) Hash identifier: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY= Subject key identifier: 43:37:8F:E7:59:28:10:C8:C7:78:4F:3C:45:6B:F0:0A:A3:3F:A8:64 Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2 Certificate serial: 019B7EA6B876BCE19F4193B5B219761C0FD7 Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/QzeP51koEMjHeE88RWvwCqM_qGQ.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212495 IP address blocks: 2001:678:e98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b8:76:bc:e1:9f:41:93:b5:b2:19:76:1c:0f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43378fe7592810c8c7784f3c456bf00aa33fa864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:62:5a:a4:98:16:37:f2:bc:f1:d1:f7:43: 44:c8:73:d4:39:5a:a0:41:cf:74:4c:1d:7d:76:d3: 56:0a:1f:9a:8d:ed:ff:88:97:3f:24:96:c1:d9:14: 77:97:b9:2f:fa:27:a9:a8:dc:85:b8:2b:1f:5c:f5: 8a:0d:ef:eb:44:01:30:a4:2f:46:68:59:ea:30:dc: 74:16:1d:05:f4:a2:62:73:3a:5e:f9:c0:af:a8:e7: 65:74:21:45:50:11:c9:93:fa:65:c3:7d:1e:bc:1c: b0:f8:78:49:95:02:55:f8:19:6d:db:c3:8b:a2:bd: 0b:46:84:e8:22:7d:73:99:b4:e5:2c:e0:75:96:68: e6:01:f2:ad:8d:36:b8:13:c4:19:ed:ab:e3:05:a7: 08:6b:91:44:28:fc:da:af:73:e6:71:45:4d:91:04: ff:6c:d0:65:bd:ac:ba:19:f5:83:0f:6d:44:ec:79: 27:c6:60:a8:b4:26:75:03:d7:bf:8b:f2:fd:4c:12: 75:a7:66:0b:c0:84:7a:57:00:fe:df:8b:d5:a5:5b: 10:dd:92:b4:f2:c1:78:1f:25:b5:c8:c7:57:75:ef: 42:90:1b:5f:ef:70:50:c0:3a:b7:75:d5:3c:79:b9: fc:9c:33:83:63:34:c3:77:c9:3c:d0:0a:97:68:ff: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:8F:E7:59:28:10:C8:C7:78:4F:3C:45:6B:F0:0A:A3:3F:A8:64 X509v3 Authority Key Identifier: keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/QzeP51koEMjHeE88RWvwCqM_qGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e98::/48 Signature Algorithm: sha256WithRSAEncryption 24:09:dc:dd:c1:2f:2d:99:9a:8b:b5:c7:32:e4:fb:9f:db:a7: b4:f3:64:f4:d6:a6:1f:dd:dd:22:47:9d:49:3d:ff:2b:c4:1e: c2:28:e2:64:1b:9a:ef:3b:d4:f0:db:ee:3c:a1:49:ba:5a:e3: bc:7d:43:67:b7:ee:7a:4c:d9:01:ff:90:5c:c3:9a:43:8e:35: a1:8d:cd:4a:62:79:95:5b:cb:80:02:ba:42:34:1a:46:d6:5d: 9f:ad:d2:b9:89:48:9c:ce:b9:98:e9:38:0f:c9:e2:43:4d:de: de:01:90:d8:75:fa:7f:3f:90:29:d8:4f:b7:8f:8d:6d:24:a7: 4e:bd:02:4b:db:93:00:06:fd:6d:53:a0:fd:f6:99:6b:74:f8: eb:8e:12:90:8f:51:ba:86:d6:12:b5:87:26:09:3a:15:62:e1: 67:b8:46:65:ba:b0:6b:a7:fb:3e:31:12:a9:3a:4c:e3:5e:43: f9:93:73:c3:9e:db:8b:cb:ab:50:74:76:b6:a9:42:15:f3:fc: 07:e8:fd:c6:57:38:88:39:2d:c4:29:ae:00:db:00:c4:11:7d: da:4c:58:97:a9:62:2f:fd:d8:28:f1:8b:29:11:5e:d1:66:88: 20:98:a5:2b:a8:46:ac:de:c5:4b:09:0b:86:54:d7:2b:92:00: 58:a0:a2:f9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+prh2vOGfQZO1shl2HA/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNGIyOGExOWRiZjUzNGFkNjFjYjA0OTk4NmU1NDI0YzMy ODRkZTIwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzM3OGZlNzU5MjgxMGM4Yzc3ODRmM2M0NTZiZjAwYWEzM2ZhODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h1iWqSYFjfyvPHR90NEyHPUOVqg Qc90TB19dtNWCh+aje3/iJc/JJbB2RR3l7kv+iepqNyFuCsfXPWKDe/rRAEwpC9G aFnqMNx0Fh0F9KJiczpe+cCvqOdldCFFUBHJk/plw30evByw+HhJlQJV+Blt28OL or0LRoToIn1zmbTlLOB1lmjmAfKtjTa4E8QZ7avjBacIa5FEKPzar3PmcUVNkQT/ bNBlvay6GfWDD21E7HknxmCotCZ1A9e/i/L9TBJ1p2YLwIR6VwD+34vVpVsQ3ZK0 8sF4HyW1yMdXde9CkBtf73BQwDq3ddU8ebn8nDODYzTDd8k80AqXaP9F1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEM3j+dZKBDIx3hPPEVr8AqjP6hkMB8GA1UdIwQY MBaAFOBLKKGdv1NK1hywSZhuVCTDKE3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYt YWNmMDQ0ODEwNjRkLzEvUXplUDUxa29FTWpIZUU4OFJXdndDcU1fcUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYtYWNmMDQ0ODEwNjRk LzEvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA6Y MA0GCSqGSIb3DQEBCwUAA4IBAQAkCdzdwS8tmZqLtccy5Puf26e082T01qYf3d0i R51JPf8rxB7CKOJkG5rvO9Tw2+48oUm6WuO8fUNnt+56TNkB/5Bcw5pDjjWhjc1K YnmVW8uAArpCNBpG1l2frdK5iUiczrmY6TgPyeJDTd7eAZDYdfp/P5Ap2E+3j41t JKdOvQJL25MABv1tU6D99plrdPjrjhKQj1G6htYStYcmCToVYuFnuEZlurBrp/s+ MRKpOkzjXkP5k3PDntuLy6tQdHa2qUIV8/wH6P3GVziIOS3EKa4A2wDEEX3aTFiX qWIv/dgo8YspEV7RZoggmKUrqEas3sVLCQuGVNcrkgBYoKL5 -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:29 2026 by rpki-client