This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/qkkBRbbgk03fhxQbqtIxu6rxUSs.roa File: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (raw, json) Hash identifier: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos= Subject key identifier: AA:49:01:45:B6:E0:93:4D:DF:87:14:1B:AA:D2:31:BB:AA:F1:51:2B Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Certificate serial: 019B7FF2BC39004F65A23F93386D8004A4B2 Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/qkkBRbbgk03fhxQbqtIxu6rxUSs.roa Signing time: Fri 02 Jan 2026 18:22:52 +0000 ROA not before: Fri 02 Jan 2026 18:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29691 IP address blocks: 203.56.112.0/23 maxlen: 23 2a14:3e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:bc:39:00:4f:65:a2:3f:93:38:6d:80:04:a4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Validity Not Before: Jan 2 18:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa490145b6e0934ddf87141baad231bbaaf1512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:0c:18:f4:63:bf:2a:84:aa:82:a9:1d:09: 9b:f4:bd:96:45:5a:b7:14:f0:b3:64:ad:9b:3e:d7: 31:87:09:24:1a:06:ce:67:20:6c:73:ed:50:5e:fa: 38:aa:29:25:49:e5:aa:d7:2c:55:2b:24:02:1b:0c: e8:0f:5c:0a:59:83:77:28:50:9e:6d:99:be:f6:81: 37:d4:ec:bb:e9:38:6d:29:c9:d9:d5:cb:70:38:8f: b3:79:45:57:63:96:bf:4c:97:71:da:b4:9c:77:1e: 22:1d:b1:c6:8f:a3:4e:0d:ca:30:79:bd:3d:b4:5d: 2e:3f:84:7d:0f:68:e1:20:33:b0:ee:4e:59:a1:d5: 35:3c:9f:3e:82:0c:f1:96:53:82:9d:84:81:f1:89: c1:1a:19:dc:3d:ef:70:69:7d:38:47:0f:74:51:63: 08:60:03:d7:d6:a6:6e:13:77:e1:0d:ef:66:af:bd: 46:23:b6:12:d3:7e:62:8d:a0:c8:21:aa:65:a4:d2: e7:fe:12:b4:b4:a5:53:76:25:ab:8e:08:bc:16:05: 65:ba:3b:ff:44:ab:75:b7:3d:58:c9:cd:56:24:27: 43:27:67:61:23:d0:c4:05:99:74:59:88:e4:cd:03: 6d:5b:ed:f9:e0:89:57:b9:45:65:f5:97:f2:39:86: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:49:01:45:B6:E0:93:4D:DF:87:14:1B:AA:D2:31:BB:AA:F1:51:2B X509v3 Authority Key Identifier: keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/qkkBRbbgk03fhxQbqtIxu6rxUSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.56.112.0/23 IPv6: 2a14:3e40::/32 Signature Algorithm: sha256WithRSAEncryption 61:59:e6:1d:77:fa:7d:94:85:16:96:44:65:9d:96:cf:10:19: 9a:79:f2:36:eb:4b:08:2b:8d:dd:34:20:69:01:fa:17:4f:cd: 9d:98:1b:16:44:db:6e:5f:94:b1:5a:60:c0:ff:79:42:ba:8b: 4d:99:90:ea:be:96:e0:55:34:a8:dc:f0:6f:a3:27:90:e8:da: ab:62:50:d9:b9:de:cb:de:11:3a:9d:3a:0a:35:07:1b:e1:a9: 19:d4:6d:b9:8b:6a:a0:fd:9e:5d:ab:3f:b8:e5:39:45:a6:65: f0:5c:63:e0:a5:6b:6e:0f:96:0d:f0:c0:8e:17:41:8b:cd:9f: 6b:3a:0d:1d:ff:05:d9:df:62:68:de:96:2b:a6:70:7e:24:28: ea:3d:e8:20:47:7f:a2:64:6b:d7:00:ca:6b:57:4b:82:3a:9b: ee:c9:31:ed:10:4f:bd:a8:2b:dd:36:3b:53:c6:86:cb:ac:35: 7b:11:4c:3d:7f:b9:12:e8:32:8a:60:8a:66:e9:f9:3d:15:df: 73:15:4e:98:85:86:da:d3:3f:fb:2d:36:75:b6:60:6f:12:a9: 2a:04:00:36:16:52:f5:89:fc:f4:10:3c:87:54:5f:cc:0f:14: be:51:8a:7c:31:d0:b2:99:21:92:51:1b:7b:46:17:50:cb:7e: 56:ac:7f:7d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8rw5AE9loj+TOG2ABKSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3 ZjFhYTcwHhcNMjYwMTAyMTgyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTQ5MDE0NWI2ZTA5MzRkZGY4NzE0MWJhYWQyMzFiYmFhZjE1MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvcMGPRjvyqEqoKpHQmb9L2WRVq3 FPCzZK2bPtcxhwkkGgbOZyBsc+1QXvo4qiklSeWq1yxVKyQCGwzoD1wKWYN3KFCe bZm+9oE31Oy76ThtKcnZ1ctwOI+zeUVXY5a/TJdx2rScdx4iHbHGj6NODcoweb09 tF0uP4R9D2jhIDOw7k5ZodU1PJ8+ggzxllOCnYSB8YnBGhncPe9waX04Rw90UWMI YAPX1qZuE3fhDe9mr71GI7YS035ijaDIIaplpNLn/hK0tKVTdiWrjgi8FgVlujv/ RKt1tz1Yyc1WJCdDJ2dhI9DEBZl0WYjkzQNtW+354IlXuUVl9ZfyOYY5gQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKpJAUW24JNN34cUG6rSMbuq8VErMB8GA1UdIwQY MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct NWZhMzgwNzQ5NDk3LzEvcWtrQlJiYmdrMDNmaHhRYnF0SXh1NnJ4VVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3 LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQByzhwMA0E AgACMAcDBQAqFD5AMA0GCSqGSIb3DQEBCwUAA4IBAQBhWeYdd/p9lIUWlkRlnZbP EBmaefI260sIK43dNCBpAfoXT82dmBsWRNtuX5SxWmDA/3lCuotNmZDqvpbgVTSo 3PBvoyeQ6NqrYlDZud7L3hE6nToKNQcb4akZ1G25i2qg/Z5dqz+45TlFpmXwXGPg pWtuD5YN8MCOF0GLzZ9rOg0d/wXZ32Jo3pYrpnB+JCjqPeggR3+iZGvXAMprV0uC OpvuyTHtEE+9qCvdNjtTxobLrDV7EUw9f7kS6DKKYIpm6fk9Fd9zFU6YhYba0z/7 LTZ1tmBvEqkqBAA2FlL1ifz0EDyHVF/MDxS+UYp8MdCymSGSURt7RhdQy35WrH99 -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:08 2026 by rpki-client