This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/q0WTkteUjice7A7HxM9H09oezsI.roa File: q0WTkteUjice7A7HxM9H09oezsI.roa (raw, json) Hash identifier: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA= Subject key identifier: AB:45:93:92:D7:94:8E:27:1E:EC:0E:C7:C4:CF:47:D3:DA:1E:CE:C2 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019B7E391A0886EADA9B143D52DE9A4BCB22 Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/q0WTkteUjice7A7HxM9H09oezsI.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212786 IP address blocks: 2a12:f9c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1a:08:86:ea:da:9b:14:3d:52:de:9a:4b:cb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab459392d7948e271eec0ec7c4cf47d3da1ecec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:a5:5b:c4:a1:58:5a:29:d1:e8:af:06:77: a9:8c:04:3a:59:84:f8:5b:8d:73:9d:f4:8e:fb:0c: 50:54:7d:2a:5a:d8:28:63:62:ea:79:8b:ca:2c:a2: 9b:02:1d:f0:e6:cd:3e:67:f7:cf:0d:e7:f9:6e:29: dd:9b:09:25:ad:3c:65:b4:cf:e6:5a:50:44:80:ea: 23:0e:32:b3:9b:b9:4a:b5:d9:62:29:6c:b9:69:c3: a9:fd:59:0a:ad:3c:5d:bb:96:5e:89:6a:d0:17:2b: 20:fa:9e:c2:0d:4a:a1:c4:61:c8:d3:47:c5:5e:91: 22:79:e7:7c:91:6b:3b:2a:a7:b6:d8:d5:8c:52:9c: 5d:8a:35:b1:0a:7b:7b:0b:76:c1:fe:0d:fd:6c:f2: 9c:24:43:d2:15:01:03:4e:51:20:cb:97:b7:82:07: 2b:22:76:3c:9a:2a:42:ce:de:b6:f0:26:23:ab:5c: ce:b2:d3:40:da:35:da:c2:9f:9a:5c:63:1a:80:ab: 4c:67:a1:1a:24:05:05:bb:7a:5b:ce:f0:aa:6e:52: 59:c7:f4:e9:be:60:51:f8:ab:e1:a4:a8:ac:5c:d6: e4:8a:20:e1:21:04:1f:b8:8e:d6:b7:a6:c8:5c:2c: f6:c9:ee:df:cb:b1:94:0d:ae:be:f1:3c:ab:6a:35: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:93:92:D7:94:8E:27:1E:EC:0E:C7:C4:CF:47:D3:DA:1E:CE:C2 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/q0WTkteUjice7A7HxM9H09oezsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f9c0::/29 Signature Algorithm: sha256WithRSAEncryption 3d:96:11:5b:40:f7:af:f1:5b:eb:1a:65:bd:ca:e8:81:d0:bf: bf:2e:bc:f3:74:71:b8:22:6a:6f:7c:3b:c6:5b:df:cf:76:b4: 0d:92:19:a5:a5:34:44:ed:a4:e1:3c:95:7c:9b:e3:9d:24:ba: db:b3:c5:fe:2d:40:69:ca:12:f9:e6:89:d8:8f:e8:80:c9:a4: 41:dd:cc:3b:46:f9:19:f1:2e:85:3d:83:5a:71:aa:b7:8b:b2: d8:17:e5:b7:dd:3c:7a:c7:24:b6:1a:c9:0a:11:f1:47:ef:c4: 04:3d:b6:86:30:64:55:26:8a:9f:d8:f4:3e:a5:de:69:50:ae: 4c:e1:f3:3d:6e:ad:3e:0c:e9:dd:b7:53:53:10:cc:e9:ba:ff: 2d:2e:3c:bc:e7:e1:65:13:d7:59:03:50:04:a2:20:3d:fd:af: e0:5a:f0:b3:af:3a:23:53:8a:56:fc:f8:68:17:cb:47:c4:3c: 8f:56:65:47:b9:74:35:2e:b1:ad:d1:8c:1c:fe:25:5a:d3:36: ba:67:d4:ea:75:19:b1:5f:42:ff:00:e6:07:b4:0c:a2:bf:45: 32:bd:2b:98:28:49:99:e9:30:74:c0:6b:bc:ac:6c:32:9b:eb: 36:f5:c7:5a:d6:38:8e:2b:c4:28:4e:c3:65:00:59:a8:62:c2: be:dc:2b:15 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+ORoIhuramxQ9Ut6aS8siMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQ1OTM5MmQ3OTQ4ZTI3MWVlYzBlYzdjNGNmNDdkM2RhMWVjZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJylW8ShWFop0eivBnepjAQ6WYT4 W41znfSO+wxQVH0qWtgoY2LqeYvKLKKbAh3w5s0+Z/fPDef5bindmwklrTxltM/m WlBEgOojDjKzm7lKtdliKWy5acOp/VkKrTxdu5ZeiWrQFysg+p7CDUqhxGHI00fF XpEieed8kWs7Kqe22NWMUpxdijWxCnt7C3bB/g39bPKcJEPSFQEDTlEgy5e3ggcr InY8mipCzt628CYjq1zOstNA2jXawp+aXGMagKtMZ6EaJAUFu3pbzvCqblJZx/Tp vmBR+KvhpKisXNbkiiDhIQQfuI7Wt6bIXCz2ye7fy7GUDa6+8TyrajXthwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKtFk5LXlI4nHuwOx8TPR9PaHs7CMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvcTBXVGt0ZVVqaWNlN0E3SHhNOUgwOW9lenNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhL5wDAN BgkqhkiG9w0BAQsFAAOCAQEAPZYRW0D3r/Fb6xplvcrogdC/vy6883RxuCJqb3w7 xlvfz3a0DZIZpaU0RO2k4TyVfJvjnSS627PF/i1AacoS+eaJ2I/ogMmkQd3MO0b5 GfEuhT2DWnGqt4uy2Bflt908esckthrJChHxR+/EBD22hjBkVSaKn9j0PqXeaVCu TOHzPW6tPgzp3bdTUxDM6br/LS48vOfhZRPXWQNQBKIgPf2v4Frws686I1OKVvz4 aBfLR8Q8j1ZlR7l0NS6xrdGMHP4lWtM2umfU6nUZsV9C/wDmB7QMor9FMr0rmChJ mekwdMBrvKxsMpvrNvXHWtY4jivEKE7DZQBZqGLCvtwrFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:46 2026 by rpki-client