This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/Q0BAQv9Y2KCGzUH12IIJCejGo9E.roa File: Q0BAQv9Y2KCGzUH12IIJCejGo9E.roa (raw, json) Hash identifier: ZXRjv/WoTKdvC9GZzFdW6WbAOuxyKMhJM7y9cqTP30I= Subject key identifier: 43:40:40:42:FF:58:D8:A0:86:CD:41:F5:D8:82:09:09:E8:C6:A3:D1 Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581 Certificate serial: 019B7D5AB0FD8BCE71C356CF1E06A6CD1BC0 Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/Q0BAQv9Y2KCGzUH12IIJCejGo9E.roa Signing time: Fri 02 Jan 2026 06:17:34 +0000 ROA not before: Fri 02 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208076 IP address blocks: 2001:67c:2098::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b0:fd:8b:ce:71:c3:56:cf:1e:06:a6:cd:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581 Validity Not Before: Jan 2 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43404042ff58d8a086cd41f5d8820909e8c6a3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:62:9b:2a:03:04:29:0e:fd:9d:2d:42:67: ee:0f:91:f4:24:59:50:9b:40:c5:3c:63:a2:e6:51: 52:ba:74:43:46:08:5c:f8:2f:80:5d:2b:4f:fe:c4: a1:35:c1:6e:c7:f6:21:0e:8c:bd:f1:f7:00:9f:9c: b3:a8:26:27:2a:0f:66:34:16:cc:84:36:44:3e:fa: 48:a5:70:85:83:b8:c0:cb:63:03:21:9a:e0:71:91: 6c:89:b3:04:d3:32:d6:09:f1:32:9c:e1:35:ea:5d: 27:71:e8:6a:4c:08:b1:bf:99:48:a9:92:55:00:5a: 99:e1:d7:aa:fa:f5:c1:7c:81:02:dc:b1:3c:4e:5b: 6d:8e:b3:64:3b:76:3e:d5:04:b8:b3:d3:7e:90:8a: 2d:07:f9:1c:5b:04:31:04:2e:5a:20:47:7b:ee:81: aa:01:50:f3:e2:3c:07:c4:d8:c9:0b:c7:2b:92:d9: e8:69:0c:66:d8:ed:66:15:58:cc:15:8c:4c:7f:f0: 7f:8d:e6:e3:13:de:3b:87:4c:27:f5:ed:9b:33:84: c2:3f:4d:56:9c:51:71:9e:37:fb:db:3a:dd:ee:ce: fc:74:ba:fc:67:0a:2d:35:ec:05:36:d2:19:63:67: 53:a2:6f:0f:56:a3:78:20:44:16:df:3b:d0:5b:5a: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:40:40:42:FF:58:D8:A0:86:CD:41:F5:D8:82:09:09:E8:C6:A3:D1 X509v3 Authority Key Identifier: keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/Q0BAQv9Y2KCGzUH12IIJCejGo9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2098::/48 Signature Algorithm: sha256WithRSAEncryption 84:00:7a:f0:14:2a:bb:91:3f:70:5d:4a:ce:a1:89:a5:66:5d: 1e:70:5c:c5:05:81:2d:60:f2:90:7a:36:94:ab:b0:da:75:5b: e5:2e:7d:49:c1:65:8d:c2:fe:ab:b1:23:23:f6:25:c3:79:9e: 81:c6:4b:ab:c5:09:0a:30:08:60:67:71:de:12:fd:3a:59:66: 49:9e:e1:01:07:ed:ad:78:66:bb:9e:6f:af:fe:58:55:95:19: 70:e3:c6:44:5b:ac:0a:c3:64:c8:b4:87:de:5b:8d:b5:1e:2c: 5c:ce:e6:2c:a8:cc:5c:f2:3c:1c:a0:bc:ed:b8:6a:fd:22:c0: 2f:19:e5:25:d0:8f:58:53:5d:48:3f:ff:75:df:60:3b:58:56: 9d:af:67:53:82:0e:13:86:b8:8b:e1:75:6c:c6:d4:c7:5d:33: 20:dc:85:6c:64:da:ca:ee:07:00:11:b2:63:02:a2:7d:84:f4: 0f:b8:60:ed:08:a3:3a:40:6e:a6:f1:cb:5b:87:7e:41:30:9a: 47:65:9e:49:53:74:a7:28:77:b0:e7:98:ee:83:3b:85:cb:30: 71:2c:ba:37:67:f1:45:7b:09:ff:a4:ae:15:07:66:a2:ef:47: 76:de:65:f9:04:b0:0f:54:54:12:c4:bd:31:40:2c:45:a6:17: 1e:79:89:40 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9WrD9i85xw1bPHgamzRvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTgwZDE4MWMyNTNkMTRkYTFlMGJhOWMxZDU2NjZmNTYy NmQ1ODEwHhcNMjYwMTAyMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzQwNDA0MmZmNThkOGEwODZjZDQxZjVkODgyMDkwOWU4YzZhM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQdimyoDBCkO/Z0tQmfuD5H0JFlQ m0DFPGOi5lFSunRDRghc+C+AXStP/sShNcFux/YhDoy98fcAn5yzqCYnKg9mNBbM hDZEPvpIpXCFg7jAy2MDIZrgcZFsibME0zLWCfEynOE16l0ncehqTAixv5lIqZJV AFqZ4deq+vXBfIEC3LE8TlttjrNkO3Y+1QS4s9N+kIotB/kcWwQxBC5aIEd77oGq AVDz4jwHxNjJC8crktnoaQxm2O1mFVjMFYxMf/B/jebjE947h0wn9e2bM4TCP01W nFFxnjf72zrd7s78dLr8ZwotNewFNtIZY2dTom8PVqN4IEQW3zvQW1pfswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFENAQEL/WNighs1B9diCCQnoxqPRMB8GA1UdIwQY MBaAFIboDRgcJT0U2h4LqcHVZm9WJtWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVnTkdCd2xQUlRhSGd1cHdkVm1iMVltMVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYTYwOWUtNjUzOC00NzIzLTgyNTkt NzNmNTQzNDg4MjNjLzEvUTBCQVF2OVkyS0NHelVIMTJJSUpDZWpHbzlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lYTYwOWUtNjUzOC00NzIzLTgyNTktNzNmNTQzNDg4MjNj LzEvaHVnTkdCd2xQUlRhSGd1cHdkVm1iMVltMVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCCY MA0GCSqGSIb3DQEBCwUAA4IBAQCEAHrwFCq7kT9wXUrOoYmlZl0ecFzFBYEtYPKQ ejaUq7DadVvlLn1JwWWNwv6rsSMj9iXDeZ6BxkurxQkKMAhgZ3HeEv06WWZJnuEB B+2teGa7nm+v/lhVlRlw48ZEW6wKw2TItIfeW421HixczuYsqMxc8jwcoLztuGr9 IsAvGeUl0I9YU11IP/9132A7WFadr2dTgg4ThriL4XVsxtTHXTMg3IVsZNrK7gcA EbJjAqJ9hPQPuGDtCKM6QG6m8ctbh35BMJpHZZ5JU3SnKHew55jugzuFyzBxLLo3 Z/FFewn/pK4VB2ai70d23mX5BLAPVFQSxL0xQCxFphceeYlA -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:18 2026 by rpki-client