This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qTSub_8w8DkrTYax648T1V4YnPo.roa File: qTSub_8w8DkrTYax648T1V4YnPo.roa (raw, json) Hash identifier: Mi5Xo78byx7+ynrKslDINyvmBugw1zjiwy61YHishJU= Subject key identifier: A9:34:AE:6F:FF:30:F0:39:2B:4D:86:B1:EB:8F:13:D5:5E:18:9C:FA Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B357A8E4DC00F6A6E3C4D9060C41780 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qTSub_8w8DkrTYax648T1V4YnPo.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38047 IP address blocks: 2a14:67c1:d200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7a:8e:4d:c0:0f:6a:6e:3c:4d:90:60:c4:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a934ae6fff30f0392b4d86b1eb8f13d55e189cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:1d:a8:b7:b1:03:d8:8e:af:10:ad:e0:3d: d7:e7:67:3d:fa:fd:67:f4:93:71:e6:4d:bb:14:ce: 4a:4b:02:54:b0:16:6e:79:43:a6:c0:35:87:26:fe: f8:c4:c5:b5:65:d0:6c:a1:ca:f1:75:39:be:ae:2d: d0:36:3f:40:ea:e9:c0:84:67:9d:3b:16:81:ac:12: 61:7a:05:a2:a4:f0:9d:21:07:18:e4:36:ba:3a:df: 44:5b:1b:c5:b5:f7:ad:05:9d:c8:1d:ea:c7:79:9b: 91:a3:17:d9:7a:47:52:66:47:d9:fb:51:59:40:4d: c5:d8:f6:01:f5:56:f4:fc:2a:31:82:df:84:59:f6: b0:c0:e1:ea:7e:fb:2b:d3:84:96:c9:99:6f:37:1d: 12:aa:b1:fc:f2:54:2a:78:a4:bb:0e:f3:aa:c3:ad: c3:e7:e1:42:1c:69:be:3b:4e:5d:28:4e:e2:db:95: e1:74:ca:52:f8:00:47:c7:f1:f0:3f:75:5a:9a:a2: e1:d8:0c:15:2b:3a:f9:8a:98:37:6a:0d:b2:49:ed: 1d:34:0c:85:42:b4:86:25:a3:53:36:70:30:bc:d7: 54:bc:77:1c:9d:a4:a1:2c:6e:5d:65:5b:88:36:5d: 77:dc:69:96:10:5a:23:58:62:12:c5:34:a7:f3:42: d2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:34:AE:6F:FF:30:F0:39:2B:4D:86:B1:EB:8F:13:D5:5E:18:9C:FA X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qTSub_8w8DkrTYax648T1V4YnPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:d200::/40 Signature Algorithm: sha256WithRSAEncryption a0:f4:15:2e:47:15:04:0c:75:5f:e4:4d:79:de:48:0e:95:f4: 2f:53:4d:93:0b:fd:8f:ed:70:46:8c:dc:ac:40:8e:b5:5b:1d: a5:ba:9b:f0:39:4f:e1:a2:1e:be:a6:bd:4c:21:d4:48:51:ce: 7c:b4:ed:a8:f3:3d:98:ec:b5:66:11:26:7c:16:0f:86:2e:a1: 71:f2:24:67:1a:90:e6:51:9e:0d:e1:a4:d3:00:52:b8:5f:e3: 04:c8:89:b3:53:41:d1:4e:59:36:00:be:75:59:f0:8e:df:7f: 80:51:3d:46:f5:96:dd:bd:10:b2:50:67:6a:a2:a6:17:6c:18: 91:d7:79:89:86:4f:56:28:e6:05:09:c6:3b:d9:2f:73:4c:f0: a2:70:a3:73:8b:ee:98:a0:86:8a:5e:3f:e0:6e:61:50:8c:47: b5:ba:e5:9a:c4:5c:db:ff:a5:34:5b:ad:20:19:0a:2e:d4:0e: 28:1a:d7:60:cd:75:f1:59:2b:0e:9f:cd:85:2f:99:1d:f0:21: e1:75:ee:9e:f1:61:ee:b5:c1:1d:a6:2f:72:89:72:8d:f5:d3: fe:cd:94:c5:47:f1:84:23:75:5d:00:76:a2:f2:55:91:7a:e3: 1d:3d:02:fe:40:2b:2d:dc:0c:ae:b1:14:78:15:aa:b0:af:9d: ca:11:7e:3b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NXqOTcAPam48TZBgxBeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTM0YWU2ZmZmMzBmMDM5MmI0ZDg2YjFlYjhmMTNkNTVlMTg5Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnUdqLexA9iOrxCt4D3X52c9+v1n 9JNx5k27FM5KSwJUsBZueUOmwDWHJv74xMW1ZdBsocrxdTm+ri3QNj9A6unAhGed OxaBrBJhegWipPCdIQcY5Da6Ot9EWxvFtfetBZ3IHerHeZuRoxfZekdSZkfZ+1FZ QE3F2PYB9Vb0/Coxgt+EWfawwOHqfvsr04SWyZlvNx0SqrH88lQqeKS7DvOqw63D 5+FCHGm+O05dKE7i25XhdMpS+ABHx/HwP3VamqLh2AwVKzr5ipg3ag2ySe0dNAyF QrSGJaNTNnAwvNdUvHccnaShLG5dZVuINl133GmWEFojWGISxTSn80LSQQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKk0rm//MPA5K02GseuPE9VeGJz6MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvcVRTdWJfOHc4RGtyVFlheDY0OFQxVjRZblBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwdIw DQYJKoZIhvcNAQELBQADggEBAKD0FS5HFQQMdV/kTXneSA6V9C9TTZML/Y/tcEaM 3KxAjrVbHaW6m/A5T+GiHr6mvUwh1EhRzny07ajzPZjstWYRJnwWD4YuoXHyJGca kOZRng3hpNMAUrhf4wTIibNTQdFOWTYAvnVZ8I7ff4BRPUb1lt29ELJQZ2qiphds GJHXeYmGT1Yo5gUJxjvZL3NM8KJwo3OL7pighopeP+BuYVCMR7W65ZrEXNv/pTRb rSAZCi7UDiga12DNdfFZKw6fzYUvmR3wIeF17p7xYe61wR2mL3KJco310/7NlMVH 8YQjdV0AdqLyVZF64x09Av5AKy3cDK6xFHgVqrCvncoRfjs= -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:57 2026 by rpki-client