This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qeIYeI4kLeYu7uLRbJocCx_1loA.roa File: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (raw, json) Hash identifier: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE= Subject key identifier: A9:E2:18:78:8E:24:2D:E6:2E:EE:E2:D1:6C:9A:1C:0B:1F:F5:96:80 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCA1D4DDFFF503040668999ED1C59 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qeIYeI4kLeYu7uLRbJocCx_1loA.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45027 IP address blocks: 2a12:5a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ca:1d:4d:df:ff:50:30:40:66:89:99:ed:1c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9e218788e242de62eeee2d16c9a1c0b1ff59680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:e4:97:2f:6d:68:eb:b8:1a:ed:29:c1:0b: 00:f9:88:6b:0e:eb:57:56:56:28:c6:c6:f7:89:0c: 1b:aa:5f:b9:b8:df:48:f3:1b:f7:6f:1b:1b:dd:e9: 1a:0f:6c:c6:1f:3d:27:e7:5b:73:4a:e8:b3:75:44: cd:e1:bc:39:95:80:bf:58:e5:a2:67:31:97:38:00: e8:6f:4a:8d:31:09:f3:24:65:f9:fb:a7:22:5b:82: 8b:12:34:d6:c2:88:f3:28:77:14:c7:de:93:e2:18: 20:e3:89:d3:8a:3b:30:2b:c0:0a:36:95:8f:66:d6: e2:db:99:f4:96:bf:16:1e:89:29:0b:d8:72:f1:01: 02:4a:b2:28:47:4f:01:55:ad:43:69:3c:51:50:2b: 62:f9:bc:38:32:b8:56:5b:0f:f2:8f:c5:26:52:7b: 82:4c:1f:73:bb:41:db:1a:09:f8:c6:2a:4a:31:d1: f0:46:07:7a:fe:b1:3f:06:f5:2f:3a:02:9b:72:02: d2:eb:5e:ce:17:5d:1d:a2:4f:17:22:6a:fe:66:88: 8d:6e:54:f9:3d:cb:ea:dc:5b:ae:8c:2a:a4:57:12: 1f:b2:4a:00:7f:05:ab:6e:48:f4:b9:91:9f:52:db: 67:4a:75:67:a8:dc:da:0b:ea:08:29:6f:87:f0:6d: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:18:78:8E:24:2D:E6:2E:EE:E2:D1:6C:9A:1C:0B:1F:F5:96:80 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qeIYeI4kLeYu7uLRbJocCx_1loA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5a00::/29 Signature Algorithm: sha256WithRSAEncryption 14:5d:d8:8d:ba:ce:85:07:b3:16:18:82:6e:5d:ba:e7:17:25: 31:c8:11:24:7a:eb:e1:bd:4a:05:81:78:1d:70:b3:4c:b9:9c: 64:ea:31:7e:24:d8:93:8d:6c:97:b3:1a:49:1e:67:0b:f7:3c: e0:b5:5a:5d:1c:7b:0a:d9:0c:0c:88:82:68:19:77:4b:3c:5c: 1b:2c:de:cb:81:31:36:91:89:85:7b:0c:27:42:db:e9:60:ce: 47:44:ba:28:8b:84:cb:b6:57:51:a7:2a:18:e2:06:70:8f:3f: 9e:7f:63:6c:8e:ef:bc:82:c9:19:5a:eb:fb:f7:ab:00:39:25: 69:94:57:19:87:9d:43:15:87:aa:a0:fb:c6:57:f5:6e:e6:db: c7:d5:10:bc:7e:c8:a8:08:20:cc:e5:1a:9d:d4:dc:bb:e4:eb: be:bb:2e:ea:23:c6:38:0b:1e:a0:9f:84:8a:56:76:42:0f:e9: 8d:88:81:80:92:4a:72:c4:2c:88:6b:d5:28:a8:30:0b:a0:7d: e8:81:fc:98:23:1e:4b:77:19:f8:03:b1:60:3a:dc:1f:cd:c6: 20:f1:9d:a1:d0:07:86:4e:a8:ca:b4:60:ad:92:b0:73:84:f9: 87:a1:98:25:90:07:71:fa:0d:c4:67:57:4b:86:14:6a:06:5b: 1a:cd:3a:ee -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XModTd//UDBAZomZ7RxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWUyMTg3ODhlMjQyZGU2MmVlZWUyZDE2YzlhMWMwYjFmZjU5NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Xkly9taOu4Gu0pwQsA+YhrDutX VlYoxsb3iQwbql+5uN9I8xv3bxsb3ekaD2zGHz0n51tzSuizdUTN4bw5lYC/WOWi ZzGXOADob0qNMQnzJGX5+6ciW4KLEjTWwojzKHcUx96T4hgg44nTijswK8AKNpWP Ztbi25n0lr8WHokpC9hy8QECSrIoR08BVa1DaTxRUCti+bw4MrhWWw/yj8UmUnuC TB9zu0HbGgn4xipKMdHwRgd6/rE/BvUvOgKbcgLS617OF10dok8XImr+ZoiNblT5 Pcvq3FuujCqkVxIfskoAfwWrbkj0uZGfUttnSnVnqNzaC+oIKW+H8G0tWQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKniGHiOJC3mLu7i0WyaHAsf9ZaAMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvcWVJWWVJNGtMZVl1N3VMUmJKb2NDeF8xbG9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJaADAN BgkqhkiG9w0BAQsFAAOCAQEAFF3YjbrOhQezFhiCbl265xclMcgRJHrr4b1KBYF4 HXCzTLmcZOoxfiTYk41sl7MaSR5nC/c84LVaXRx7CtkMDIiCaBl3SzxcGyzey4Ex NpGJhXsMJ0Lb6WDOR0S6KIuEy7ZXUacqGOIGcI8/nn9jbI7vvILJGVrr+/erADkl aZRXGYedQxWHqqD7xlf1bubbx9UQvH7IqAggzOUandTcu+Trvrsu6iPGOAseoJ+E ilZ2Qg/pjYiBgJJKcsQsiGvVKKgwC6B96IH8mCMeS3cZ+AOxYDrcH83GIPGdodAH hk6oyrRgrZKwc4T5h6GYJZAHcfoNxGdXS4YUagZbGs067g== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:20 2026 by rpki-client