This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/cJQS8fS-O8i7V76vhCyJB9FEPWM.roa File: cJQS8fS-O8i7V76vhCyJB9FEPWM.roa (raw, json) Hash identifier: TgEJTeq8+mkc1QDXvsict0jWR8MmE1D2+GheMUVEGNw= Subject key identifier: 70:94:12:F1:F4:BE:3B:C8:BB:57:BE:AF:84:2C:89:07:D1:44:3D:63 Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019BB88666881EC9AD9E78E02C8D95686F97 Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/cJQS8fS-O8i7V76vhCyJB9FEPWM.roa Signing time: Tue 13 Jan 2026 18:02:54 +0000 ROA not before: Tue 13 Jan 2026 18:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63293 IP address blocks: 2a03:2887:ff00::/48 maxlen: 48 2a03:2887:ff02::/48 maxlen: 48 2a03:2887:ff03::/48 maxlen: 48 2a03:2887:ff04::/48 maxlen: 48 2a03:2887:ff05::/48 maxlen: 48 2a03:2887:ff06::/48 maxlen: 48 2a03:2887:ff07::/48 maxlen: 48 2a03:2887:ff08::/48 maxlen: 48 2a03:2887:ff09::/48 maxlen: 48 2a03:2887:ff0a::/48 maxlen: 48 2a03:2887:ff18::/48 maxlen: 48 2a03:2887:ff19::/48 maxlen: 48 2a03:2887:ff1b::/48 maxlen: 48 2a03:2887:ff1c::/48 maxlen: 48 2a03:2887:ff1d::/48 maxlen: 48 2a03:2887:ff1e::/48 maxlen: 48 2a03:2887:ff1f::/48 maxlen: 48 2a03:2887:ff20::/48 maxlen: 48 2a03:2887:ff21::/48 maxlen: 48 2a03:2887:ff22::/48 maxlen: 48 2a03:2887:ff23::/48 maxlen: 48 2a03:2887:ff24::/48 maxlen: 48 2a03:2887:ff25::/48 maxlen: 48 2a03:2887:ff27::/48 maxlen: 48 2a03:2887:ff28::/48 maxlen: 48 2a03:2887:ff29::/48 maxlen: 48 2a03:2887:ff2a::/48 maxlen: 48 2a03:2887:ff2b::/48 maxlen: 48 2a03:2887:ff2e::/48 maxlen: 48 2a03:2887:ff2f::/48 maxlen: 48 2a03:2887:ff30::/48 maxlen: 48 2a03:2887:ff33::/48 maxlen: 48 2a03:2887:ff35::/48 maxlen: 48 2a03:2887:ff36::/48 maxlen: 48 2a03:2887:ff37::/48 maxlen: 48 2a03:2887:ff38::/48 maxlen: 48 2a03:2887:ff39::/48 maxlen: 48 2a03:2887:ff3a::/48 maxlen: 48 2a03:2887:ff3b::/48 maxlen: 48 2a03:2887:ff3f::/48 maxlen: 48 2a03:2887:ff40::/48 maxlen: 48 2a03:2887:ff41::/48 maxlen: 48 2a03:2887:ff42::/48 maxlen: 48 2a03:2887:ff43::/48 maxlen: 48 2a03:2887:ff44::/48 maxlen: 48 2a03:2887:ff45::/48 maxlen: 48 2a03:2887:ff48::/48 maxlen: 48 2a03:2887:ff49::/48 maxlen: 48 2a03:2887:ff4a::/48 maxlen: 48 2a03:2887:ff4b::/48 maxlen: 48 2a03:2887:ff4d::/48 maxlen: 48 2a03:2887:ff4e::/48 maxlen: 48 2a03:2887:ff4f::/48 maxlen: 48 2a03:2887:ff51::/48 maxlen: 48 2a03:2887:ff52::/48 maxlen: 48 2a03:2887:ff53::/48 maxlen: 48 2a03:2887:ff54::/48 maxlen: 48 2a03:2887:ff55::/48 maxlen: 48 2a03:2887:ff56::/48 maxlen: 48 2a03:2887:ff57::/48 maxlen: 48 2a03:2887:ff58::/48 maxlen: 48 2a03:2887:ff59::/48 maxlen: 48 2a03:2887:ff5a::/48 maxlen: 48 2a03:2887:ff5f::/48 maxlen: 48 2a03:2887:ff60::/48 maxlen: 48 2a03:2887:ff61::/48 maxlen: 48 2a03:2887:ff62::/48 maxlen: 48 2a03:2887:ff63::/48 maxlen: 48 2a03:2887:ff64::/48 maxlen: 48 2a03:2887:ff65::/48 maxlen: 48 2a03:2887:ff66::/48 maxlen: 48 2a03:2887:ff67::/48 maxlen: 48 2a03:2887:ff68::/48 maxlen: 48 2a03:2887:ff69::/48 maxlen: 48 2a03:2887:ff6a::/48 maxlen: 48 2a03:2887:ff6b::/48 maxlen: 48 2a03:2887:ff6f::/48 maxlen: 48 2a03:2887:ff70::/48 maxlen: 48 2a03:2887:ff71::/48 maxlen: 48 2a03:2887:ff72::/48 maxlen: 48 2a03:2887:ff73::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b8:86:66:88:1e:c9:ad:9e:78:e0:2c:8d:95:68:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Jan 13 18:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=709412f1f4be3bc8bb57beaf842c8907d1443d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:0a:b6:32:a3:db:25:81:c3:6f:cb:c8:64: b9:f1:ed:1e:c9:be:d7:d0:8c:07:a0:24:f5:9f:b0: cd:0f:8d:77:81:ea:af:2c:e9:e4:ef:05:e5:fc:96: 00:ba:28:80:77:71:0d:fd:c5:27:ee:53:be:3f:14: 9d:bd:fe:49:68:a9:9e:4e:79:50:30:11:04:bb:4a: f8:ab:a4:83:22:dd:40:4c:77:df:b7:ff:c9:2f:c5: 01:c0:69:77:b2:b7:bd:0b:21:c2:e4:40:aa:d3:00: 9e:16:e1:ed:5f:64:b1:a2:68:31:ff:75:d6:1e:b7: 45:8d:a7:c9:21:64:c4:73:2f:58:86:9a:c9:94:8c: 6d:64:19:de:21:a8:ad:9f:a3:06:f3:30:a8:63:87: 09:f3:88:5e:93:6f:86:80:94:e7:2a:9c:45:29:65: 8c:ff:05:ef:a5:77:2b:03:80:37:03:29:47:5e:bd: 9c:a4:0d:8a:05:43:a3:6c:e1:6f:3c:0a:80:76:0f: c2:4f:cc:0a:50:fa:42:c6:79:75:e2:ff:1d:18:3b: 61:61:66:0a:d8:9c:04:c0:0e:72:52:0b:d2:d2:e5: e8:32:2a:8e:85:22:9c:50:ce:20:68:5d:a6:b4:bb: 59:23:21:0b:5e:88:dc:7f:89:3d:73:11:38:51:c3: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:12:F1:F4:BE:3B:C8:BB:57:BE:AF:84:2C:89:07:D1:44:3D:63 X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/cJQS8fS-O8i7V76vhCyJB9FEPWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2887:ff00::/48 2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff18::/47 2a03:2887:ff1b::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff33::/48 2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff48::/46 2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff51::-2a03:2887:ff5a:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff5f::-2a03:2887:ff6b:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff6f::-2a03:2887:ff73:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 36:39:7b:fd:0b:c6:6e:9c:16:c8:84:d6:1d:d5:8c:23:07:fb: 1d:a1:c7:92:82:91:15:40:37:9d:19:89:d0:dd:d8:6e:de:8d: 96:1d:36:30:69:5c:9c:77:35:d3:26:74:bc:e6:2f:90:53:16: f0:54:7d:e0:5d:9d:8d:4c:67:c2:1e:2b:43:ce:47:51:d5:d7: 9c:1c:df:18:0f:8a:dd:40:46:67:70:50:c7:11:1f:63:fd:c0: 98:36:2c:11:47:4b:cd:11:33:01:cf:0d:fa:75:3f:a2:c4:ad: 66:bf:eb:c2:3b:ce:41:1f:10:a9:de:4e:91:1f:b0:ea:fa:eb: 78:ef:f0:78:6d:9e:91:0c:1e:44:cb:9b:aa:80:1c:87:81:a0: a8:65:17:79:a6:2d:46:1e:87:d5:7c:3a:f2:1d:55:fb:ae:e7: 2e:47:48:cf:64:ad:8d:28:27:f7:8f:8d:e8:f5:da:3b:39:7f: 8d:ca:39:dc:19:cc:be:26:57:18:65:2a:90:37:b2:70:10:0d: 5e:1f:a7:ec:9c:58:56:5f:d2:94:8a:4e:73:a3:f1:b2:b0:aa: 16:ed:3a:ce:d2:88:be:15:6c:0f:28:2c:5d:d5:89:1f:ba:67: 82:05:04:6d:86:af:a7:83:9a:af:a3:2b:11:0f:cb:e4:1f:fe: 09:85:d9:88 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAZu4hmaIHsmtnnjgLI2VaG+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjYwMTEzMTgwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk0MTJmMWY0YmUzYmM4YmI1N2JlYWY4NDJjODkwN2QxNDQzZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApycKtjKj2yWBw2/LyGS58e0eyb7X 0IwHoCT1n7DND413geqvLOnk7wXl/JYAuiiAd3EN/cUn7lO+PxSdvf5JaKmeTnlQ MBEEu0r4q6SDIt1ATHfft//JL8UBwGl3sre9CyHC5ECq0wCeFuHtX2Sxomgx/3XW HrdFjafJIWTEcy9YhprJlIxtZBneIaitn6MG8zCoY4cJ84hek2+GgJTnKpxFKWWM /wXvpXcrA4A3AylHXr2cpA2KBUOjbOFvPAqAdg/CT8wKUPpCxnl14v8dGDthYWYK 2JwEwA5yUgvS0uXoMiqOhSKcUM4gaF2mtLtZIyELXojcf4k9cxE4UcN4ywIDAQAB o4IC9TCCAvEwHQYDVR0OBBYEFHCUEvH0vjvIu1e+r4QsiQfRRD1jMB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvY0pRUzhmUy1POGk3Vjc2dmhDeUpCOUZFUFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgfMEAgACMIHsAwcA KgMoh/8AMBIDBwEqAyiH/wIDBwAqAyiH/woDBwEqAyiH/xgwEgMHACoDKIf/GwMH ASoDKIf/JDASAwcAKgMoh/8nAwcCKgMoh/8oMBIDBwEqAyiH/y4DBwAqAyiH/zAD BwAqAyiH/zMwEgMHACoDKIf/NQMHAioDKIf/ODASAwcAKgMoh/8/AwcBKgMoh/9E AwcCKgMoh/9IMBIDBwAqAyiH/00DBwQqAyiH/0AwEgMHACoDKIf/UQMHACoDKIf/ WjASAwcAKgMoh/9fAwcCKgMoh/9oMBIDBwAqAyiH/28DBwIqAyiH/3AwDQYJKoZI hvcNAQELBQADggEBADY5e/0Lxm6cFsiE1h3VjCMH+x2hx5KCkRVAN50ZidDd2G7e jZYdNjBpXJx3NdMmdLzmL5BTFvBUfeBdnY1MZ8IeK0POR1HV15wc3xgPit1ARmdw UMcRH2P9wJg2LBFHS80RMwHPDfp1P6LErWa/68I7zkEfEKneTpEfsOr663jv8Hht npEMHkTLm6qAHIeBoKhlF3mmLUYeh9V8OvIdVfuu5y5HSM9krY0oJ/ePjej12js5 f43KOdwZzL4mVxhlKpA3snAQDV4fp+ycWFZf0pSKTnOj8bKwqhbtOs7SiL4VbA8o LF3ViR+6Z4IFBG2Gr6eDmq+jKxEPy+Qf/gmF2Yg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:38 2026 by rpki-client