This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/QTLtDqEEsM_tlA6w6CJrYZAb75c.roa File: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (raw, json) Hash identifier: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM= Subject key identifier: 41:32:ED:0E:A1:04:B0:CF:ED:94:0E:B0:E8:22:6B:61:90:1B:EF:97 Certificate issuer: /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c Certificate serial: 019B8023A41BCC573AFEE8B4EBF6B0FB0AAE Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/QTLtDqEEsM_tlA6w6CJrYZAb75c.roa Signing time: Fri 02 Jan 2026 19:16:17 +0000 ROA not before: Fri 02 Jan 2026 19:16:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210440 IP address blocks: 2001:678:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:23:a4:1b:cc:57:3a:fe:e8:b4:eb:f6:b0:fb:0a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c Validity Not Before: Jan 2 19:16:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4132ed0ea104b0cfed940eb0e8226b61901bef97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:dc:c9:78:62:9b:ea:e8:b5:59:15:c5:37: cb:60:e7:90:bd:69:fe:fd:a6:27:68:7e:e9:2f:18: 74:88:5c:94:e9:ef:14:d8:fe:f7:57:28:9e:3b:e2: 0a:14:74:a0:a8:93:2a:e2:4b:30:e7:72:12:a5:a2: ad:f5:5e:08:85:39:73:1c:93:c0:b6:6d:37:f7:08: fa:8f:b5:4e:f3:e8:86:e9:cf:7d:a1:af:83:8b:7f: 32:11:09:bf:8a:a4:f0:fe:fe:68:98:e4:d4:2b:af: 81:ee:01:0a:1e:d5:71:d2:da:ac:12:1d:1b:a5:b6: 26:c1:fc:76:b2:d6:8b:8b:a1:0b:ee:92:28:ae:70: c9:cb:17:64:07:83:5c:ad:52:f8:c3:96:dd:a3:7f: 91:12:1a:c6:00:84:b9:a7:b8:ae:57:4f:de:3e:72: 8e:48:95:19:30:5a:14:c3:bf:35:e8:32:b0:f8:82: f2:b9:25:c2:0f:16:64:3f:b1:33:46:5a:d5:34:85: e9:c4:ec:93:c9:96:82:29:39:78:56:da:4a:69:fb: 2e:f6:bb:bf:23:0b:c5:49:f1:5f:b1:de:2d:f0:f7: b4:e1:29:b8:db:0d:d9:37:f0:77:8b:8f:62:0e:de: f4:45:7b:84:7a:2d:cf:82:6b:b1:32:1f:84:34:f4: 91:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:ED:0E:A1:04:B0:CF:ED:94:0E:B0:E8:22:6B:61:90:1B:EF:97 X509v3 Authority Key Identifier: keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/QTLtDqEEsM_tlA6w6CJrYZAb75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:120::/48 Signature Algorithm: sha256WithRSAEncryption 99:02:22:9c:f7:ec:24:f9:c4:7a:13:94:08:d0:15:89:c2:66: e3:aa:95:04:27:0c:9f:ae:f9:0f:26:d8:53:21:9d:99:82:d5: b9:67:8c:12:9b:5e:02:8e:32:78:1f:79:58:54:07:58:51:d7: 57:cc:47:61:c5:1a:6f:e3:a4:cd:19:ad:21:59:4a:ab:e8:91: ed:03:a4:a2:cf:80:4e:76:9e:be:b4:95:16:09:14:74:fc:2e: ed:55:28:ad:9c:77:f9:f0:05:70:c5:31:93:0e:f1:a7:9c:18: cc:da:05:a5:df:b5:69:7f:1a:e5:85:91:58:c8:b3:85:c8:18: b7:a5:42:8c:28:d1:ff:9e:2a:80:45:36:d1:65:66:57:98:71: 39:b2:12:2b:7d:a6:8d:04:04:7c:b6:b3:50:c5:ab:e4:f4:2b: 95:bc:44:ff:d2:a7:05:66:12:47:69:29:78:a0:10:06:9f:cd: fa:16:64:f4:81:07:d4:a0:34:54:2c:18:fe:99:40:89:7c:e1: 17:f1:2b:41:83:ef:b1:e8:ec:87:0c:31:f6:18:bc:f3:a7:3a: fc:b3:10:88:f0:79:8f:e3:f1:b7:72:52:02:f2:61:bb:fb:2a: ae:2d:87:4c:74:4c:79:61:c2:cc:77:18:98:79:8d:6c:ef:24: 55:81:69:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuAI6QbzFc6/ui06/aw+wquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWVmZTU0NGI2MzU3YzdmYmMyODFiMmU0MWIxY2IyZTc0 M2U4OWMwHhcNMjYwMTAyMTkxNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTMyZWQwZWExMDRiMGNmZWQ5NDBlYjBlODIyNmI2MTkwMWJlZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGPcyXhim+rotVkVxTfLYOeQvWn+ /aYnaH7pLxh0iFyU6e8U2P73VyieO+IKFHSgqJMq4ksw53ISpaKt9V4IhTlzHJPA tm039wj6j7VO8+iG6c99oa+Di38yEQm/iqTw/v5omOTUK6+B7gEKHtVx0tqsEh0b pbYmwfx2staLi6EL7pIornDJyxdkB4NcrVL4w5bdo3+REhrGAIS5p7iuV0/ePnKO SJUZMFoUw7816DKw+ILyuSXCDxZkP7EzRlrVNIXpxOyTyZaCKTl4VtpKafsu9ru/ IwvFSfFfsd4t8Pe04Sm42w3ZN/B3i49iDt70RXuEei3PgmuxMh+ENPSRhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEEy7Q6hBLDP7ZQOsOgia2GQG++XMB8GA1UdIwQY MBaAFNJe/lRLY1fH+8KBsuQbHLLnQ+icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYt YTgyY2JiYzczNjc1LzEvUVRMdERxRUVzTV90bEE2dzZDSnJZWkFiNzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYtYTgyY2JiYzczNjc1 LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAEg MA0GCSqGSIb3DQEBCwUAA4IBAQCZAiKc9+wk+cR6E5QI0BWJwmbjqpUEJwyfrvkP JthTIZ2ZgtW5Z4wSm14CjjJ4H3lYVAdYUddXzEdhxRpv46TNGa0hWUqr6JHtA6Si z4BOdp6+tJUWCRR0/C7tVSitnHf58AVwxTGTDvGnnBjM2gWl37VpfxrlhZFYyLOF yBi3pUKMKNH/niqARTbRZWZXmHE5shIrfaaNBAR8trNQxavk9CuVvET/0qcFZhJH aSl4oBAGn836FmT0gQfUoDRULBj+mUCJfOEX8StBg++x6OyHDDH2GLzzpzr8sxCI 8HmP4/G3clIC8mG7+yquLYdMdEx5YcLMdxiYeY1s7yRVgWlG -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:03 2026 by rpki-client