This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa File: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (raw, json) Hash identifier: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k= Subject key identifier: 7D:7E:50:A1:88:42:EE:85:90:57:0D:EF:0D:26:E3:AF:71:A5:38:CB Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0 Certificate serial: 019B77C670EF73943A498F5C419C651ECE88 Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35277 IP address blocks: 2a10:c940::/32 maxlen: 32 2a10:c940:100::/48 maxlen: 48 2a10:c940:200::/48 maxlen: 48 2a10:c941::/32 maxlen: 32 2a10:c941:100::/48 maxlen: 48 2a10:c941:200::/48 maxlen: 48 2a10:c942::/32 maxlen: 32 2a10:c942:100::/48 maxlen: 48 2a10:c942:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:70:ef:73:94:3a:49:8f:5c:41:9c:65:1e:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d7e50a18842ee8590570def0d26e3af71a538cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:7c:c5:ec:3a:55:1d:f4:10:fe:45:d9:54: c4:1f:3c:d7:85:9e:0e:07:c8:e6:eb:f5:75:73:fd: d3:7b:41:d5:21:5f:26:ec:eb:87:25:e2:82:5b:b0: 49:60:96:f2:46:24:57:8e:58:7f:4b:6b:84:e0:53: 7a:10:cb:1b:09:74:9a:29:18:5f:e9:71:7c:3a:73: 86:5d:d6:a9:54:da:04:d2:d5:0c:88:fc:48:f2:73: 08:4f:1c:9e:45:63:4f:1a:0f:09:24:81:28:de:cb: 73:8a:c8:4c:c2:6f:2a:d8:0e:17:5d:46:63:73:04: 7c:4b:b5:9a:07:94:95:c4:a6:0d:0b:0a:60:fe:c4: b8:f2:1c:fb:c4:e2:12:ae:5a:2e:8c:0b:a0:35:df: 70:5d:e6:3e:ec:d8:d4:f9:76:10:5d:10:c6:72:ff: d3:91:4e:6c:e0:8d:7e:ff:2b:e2:5a:2a:18:6e:4a: 7b:1c:9a:ca:24:3f:d3:28:90:49:8e:c4:13:28:5a: 8b:c2:43:af:e7:49:d8:8e:a6:1a:a5:67:cd:fa:46: 13:76:2d:c6:ac:4c:69:b2:62:79:fd:a1:7e:c1:3a: 5b:fa:0d:2a:19:fa:96:68:5d:63:a5:4d:55:36:8b: 65:42:a3:30:bb:26:c0:18:0a:99:3c:ca:78:ac:3f: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7E:50:A1:88:42:EE:85:90:57:0D:EF:0D:26:E3:AF:71:A5:38:CB X509v3 Authority Key Identifier: keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:c940::-2a10:c942:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 65:5d:08:73:37:ee:24:7d:ad:70:0b:99:6d:aa:61:db:2f:cb: b3:67:44:fb:51:77:4a:d5:20:8b:75:79:19:27:84:04:06:f2: 64:e4:2c:82:6b:6b:83:70:a2:27:87:ef:da:94:23:3a:61:dd: d5:15:d5:ab:a3:68:af:e4:ed:af:b4:cd:58:68:33:2d:0b:9a: 69:20:da:1a:d0:a6:a9:ce:eb:14:71:8b:8e:60:f4:19:4a:de: 2c:16:28:50:f0:2c:82:6c:2e:e2:6b:a8:85:12:f1:37:cf:7d: ca:08:48:c6:50:fe:d9:27:e1:48:79:15:56:ae:3f:bd:29:bc: f7:fc:bf:fd:6a:33:c7:70:03:d3:0e:b6:98:fb:b6:d1:34:5a: 10:aa:41:01:f0:e8:dc:6f:ce:6f:70:ea:0a:45:17:7b:43:74: 6b:eb:b9:91:8e:0e:6c:a4:ed:fa:0f:d9:f1:e7:e9:6d:0b:5c: b1:2b:c1:1c:8c:00:de:38:0c:53:03:d8:e4:30:2e:0d:f7:ac: af:9d:6b:99:99:44:1b:ee:35:f6:35:d9:50:2c:a4:0e:27:c9: 5b:0c:ba:80:9e:35:80:98:28:8d:1a:ed:48:8a:07:80:f7:dc: 15:21:01:04:40:bc:c3:d7:4c:bb:7a:cd:02:a4:3d:64:f5:9c: b6:e2:eb:36 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt3xnDvc5Q6SY9cQZxlHs6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWNiYTU4OTkyMGJlZWJiMTliYzU3MmFlNmQ1MDFiOGNm NmJiZjAwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDdlNTBhMTg4NDJlZTg1OTA1NzBkZWYwZDI2ZTNhZjcxYTUzOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYt8xew6VR30EP5F2VTEHzzXhZ4O B8jm6/V1c/3Te0HVIV8m7OuHJeKCW7BJYJbyRiRXjlh/S2uE4FN6EMsbCXSaKRhf 6XF8OnOGXdapVNoE0tUMiPxI8nMITxyeRWNPGg8JJIEo3stzishMwm8q2A4XXUZj cwR8S7WaB5SVxKYNCwpg/sS48hz7xOISrloujAugNd9wXeY+7NjU+XYQXRDGcv/T kU5s4I1+/yviWioYbkp7HJrKJD/TKJBJjsQTKFqLwkOv50nYjqYapWfN+kYTdi3G rExpsmJ5/aF+wTpb+g0qGfqWaF1jpU1VNotlQqMwuybAGAqZPMp4rD/e4wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFH1+UKGIQu6FkFcN7w0m469xpTjLMB8GA1UdIwQY MBaAFEIculiZIL7rsZvFcq5tUBuM9rvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQt ZWMwMGUxYTI3Y2M4LzEvZlg1UW9ZaEM3b1dRVnczdkRTYmpyM0dsT01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQtZWMwMGUxYTI3Y2M4 LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQYqEMlA AwUAKhDJQjANBgkqhkiG9w0BAQsFAAOCAQEAZV0IczfuJH2tcAuZbaph2y/Ls2dE +1F3StUgi3V5GSeEBAbyZOQsgmtrg3CiJ4fv2pQjOmHd1RXVq6Nor+Ttr7TNWGgz LQuaaSDaGtCmqc7rFHGLjmD0GUreLBYoUPAsgmwu4muohRLxN899yghIxlD+2Sfh SHkVVq4/vSm89/y//Wozx3AD0w62mPu20TRaEKpBAfDo3G/Ob3DqCkUXe0N0a+u5 kY4ObKTt+g/Z8efpbQtcsSvBHIwA3jgMUwPY5DAuDfesr51rmZlEG+419jXZUCyk DifJWwy6gJ41gJgojRrtSIoHgPfcFSEBBEC8w9dMu3rNAqQ9ZPWctuLrNg== -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:29 2026 by rpki-client