This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/q8wsMp1Y_CJ_xwQ88hUxtQO9jY0.roa File: q8wsMp1Y_CJ_xwQ88hUxtQO9jY0.roa (raw, json) Hash identifier: XKBS9Ud90qTtFpLQE2ZqQ7TR2bCtsjqPIAvgArsCqb8= Subject key identifier: AB:CC:2C:32:9D:58:FC:22:7F:C7:04:3C:F2:15:31:B5:03:BD:8D:8D Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019B7B3E46C440E52A5A10D2B741D4BF7148 Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/q8wsMp1Y_CJ_xwQ88hUxtQO9jY0.roa Signing time: Thu 01 Jan 2026 20:27:17 +0000 ROA not before: Thu 01 Jan 2026 20:27:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51722 IP address blocks: 2a0e:36c6:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:3e:46:c4:40:e5:2a:5a:10:d2:b7:41:d4:bf:71:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Jan 1 20:27:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abcc2c329d58fc227fc7043cf21531b503bd8d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ed:e6:8c:95:f2:f9:20:6e:a9:e3:9d:d1:0e: 49:59:da:fc:6b:4b:48:4a:c2:3c:8e:3f:a2:dc:4a: 95:f9:f3:2c:de:46:1d:a9:96:48:9c:2a:54:9c:b3: e0:d0:67:9d:a9:f9:98:3d:6e:b2:5c:ba:0b:86:57: c3:7a:26:dc:ff:e9:9a:9e:72:56:d5:b5:02:d8:85: b0:17:0d:1d:24:83:70:a7:b0:55:db:b5:8d:23:1d: 12:31:29:44:94:17:88:8f:cf:b3:ad:1e:76:4c:7d: 6d:b8:e1:28:85:c0:bf:9b:b2:83:3a:7f:c9:b2:c8: 63:45:3e:e2:73:db:d4:30:be:4a:80:f9:eb:96:ae: 5b:b5:2c:a3:d5:bd:78:7a:bb:d6:5b:4c:8d:31:04: e0:0d:6d:8f:70:f7:b9:f8:63:54:23:0c:1a:0b:7d: 60:6a:ab:23:4f:e9:4e:95:36:35:8b:3b:0a:07:65: ae:52:78:f3:ea:ab:13:c8:f4:cd:f2:b9:6b:bb:50: d6:9b:85:00:7b:58:f5:8e:6d:05:31:18:b1:28:eb: c7:ff:7b:67:d0:1a:c0:ad:24:ad:9b:1f:4e:83:5d: 58:3f:a8:49:67:a6:39:d5:25:7e:d6:4b:4f:05:8a: ac:18:0b:c8:4b:2f:e2:5d:89:9f:2d:3b:01:e8:0a: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:2C:32:9D:58:FC:22:7F:C7:04:3C:F2:15:31:B5:03:BD:8D:8D X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/q8wsMp1Y_CJ_xwQ88hUxtQO9jY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:36c6:2000::/48 Signature Algorithm: sha256WithRSAEncryption 6b:64:3f:a5:89:1a:b0:83:d3:e0:ab:0c:22:8b:58:49:ca:be: a5:24:73:ee:7d:8d:b0:47:5f:e6:ad:68:fd:b5:66:b1:11:30: 62:84:dd:c2:cb:92:94:28:6f:c8:7e:77:24:85:de:59:e5:67: 2e:de:94:cc:2e:fd:e0:e1:53:f0:7c:34:05:7e:9e:d5:ab:da: fc:17:0c:4d:59:3f:0b:e4:22:e5:58:34:d9:85:d6:8e:a4:1d: 8b:13:42:b7:38:14:6f:4c:05:4c:8c:8c:28:7d:d0:e1:82:a8: 88:16:70:b6:95:b4:3f:b1:ac:99:29:ce:e8:7e:2b:48:f6:78: 1e:a9:b9:24:01:41:97:8a:77:b2:9f:17:f1:a8:52:71:e6:db: 49:b9:92:3b:62:1f:ca:b7:82:e8:be:0b:65:2b:7f:e3:42:55: 53:67:ca:25:fc:9d:24:b4:7b:c1:c7:23:b3:27:07:81:aa:2c: b6:4f:40:4c:8a:6b:03:5d:fc:68:29:cf:56:21:2d:61:31:e2: 70:25:1d:a7:8b:01:ca:fd:60:03:ce:4d:f3:0d:f4:09:f3:9a: 81:80:01:a4:02:27:3f:9b:26:b7:dc:77:f4:21:2b:4a:da:49: c8:a5:42:4e:67:de:43:21:85:d0:9b:06:e8:6a:2b:ae:28:3a: d3:09:69:6c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7PkbEQOUqWhDSt0HUv3FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjYwMTAxMjAyNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmNjMmMzMjlkNThmYzIyN2ZjNzA0M2NmMjE1MzFiNTAzYmQ4ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u3mjJXy+SBuqeOd0Q5JWdr8a0tI SsI8jj+i3EqV+fMs3kYdqZZInCpUnLPg0GedqfmYPW6yXLoLhlfDeibc/+mannJW 1bUC2IWwFw0dJINwp7BV27WNIx0SMSlElBeIj8+zrR52TH1tuOEohcC/m7KDOn/J sshjRT7ic9vUML5KgPnrlq5btSyj1b14ervWW0yNMQTgDW2PcPe5+GNUIwwaC31g aqsjT+lOlTY1izsKB2WuUnjz6qsTyPTN8rlru1DWm4UAe1j1jm0FMRixKOvH/3tn 0BrArSStmx9Og11YP6hJZ6Y51SV+1ktPBYqsGAvISy/iXYmfLTsB6AqU+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKvMLDKdWPwif8cEPPIVMbUDvY2NMB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvcTh3c01wMVlfQ0pfeHdRODhoVXh0UU85alkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg42xiAA MA0GCSqGSIb3DQEBCwUAA4IBAQBrZD+liRqwg9Pgqwwii1hJyr6lJHPufY2wR1/m rWj9tWaxETBihN3Cy5KUKG/Ifnckhd5Z5Wcu3pTMLv3g4VPwfDQFfp7Vq9r8FwxN WT8L5CLlWDTZhdaOpB2LE0K3OBRvTAVMjIwofdDhgqiIFnC2lbQ/sayZKc7ofitI 9ngeqbkkAUGXineynxfxqFJx5ttJuZI7Yh/Kt4LovgtlK3/jQlVTZ8ol/J0ktHvB xyOzJweBqiy2T0BMimsDXfxoKc9WIS1hMeJwJR2niwHK/WADzk3zDfQJ85qBgAGk Aic/mya33Hf0IStK2knIpUJOZ95DIYXQmwboaiuuKDrTCWls -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:17 2026 by rpki-client