This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa File: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (raw, json) Hash identifier: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo= Subject key identifier: A9:B9:2C:14:41:30:49:36:F6:6C:13:A7:BF:23:1A:68:98:51:ED:2B Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019B7B36C73E8EC2472C55BB049B359DCD50 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36832 IP address blocks: 2a01:ffc7:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c7:3e:8e:c2:47:2c:55:bb:04:9b:35:9d:cd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9b92c1441304936f66c13a7bf231a689851ed2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:07:bb:fb:a1:2e:3f:38:e7:fd:a1:bc:a2: 1c:6f:b8:9d:be:91:03:85:68:9d:5a:d8:f2:99:c3: 7c:9e:a6:9c:9e:88:81:df:33:2d:8e:e8:30:db:90: d4:d5:55:b1:ef:01:a9:13:ad:9f:55:81:40:8c:68: 5c:e1:47:9a:c6:03:27:7b:9c:d4:81:c9:20:ad:fc: 0c:61:f8:77:c0:ee:e5:b3:2c:d3:a5:05:f2:83:be: 25:e2:1c:22:3c:49:20:f7:09:90:5b:de:ad:65:ec: 49:9a:57:9f:e0:57:e7:68:6f:a9:40:3f:48:6d:20: 0b:13:14:dd:0a:28:60:03:76:f2:e5:59:34:02:0f: 97:a8:b2:99:18:9d:fd:c9:f2:91:5b:00:9a:46:3f: db:55:44:36:54:76:16:0d:9f:de:ec:d1:18:55:0a: cc:e8:6c:e4:84:cd:f9:14:94:64:f0:ff:d9:4b:a3: a7:8e:d4:9a:57:64:63:23:e2:cf:c8:16:c3:e0:7d: 79:c7:09:27:26:f7:6b:91:8b:92:0a:08:bb:fa:33: d3:4c:e0:5e:80:3a:22:30:ed:d2:86:2a:27:69:f8: 46:6c:8c:7b:65:ce:d5:63:26:23:be:51:a0:26:42: 6c:c5:69:b9:fc:82:43:c1:f2:8e:ef:f8:70:14:67: 3b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B9:2C:14:41:30:49:36:F6:6C:13:A7:BF:23:1A:68:98:51:ED:2B X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ffc7:200::/40 Signature Algorithm: sha256WithRSAEncryption 30:f9:8b:fe:c1:31:34:22:6f:65:9e:a7:eb:1f:41:71:0c:98: eb:66:0b:3c:3e:39:41:70:b5:99:17:69:ae:fa:d7:fe:0a:3c: 2a:ed:cb:36:52:ae:28:a2:9b:da:c6:11:ae:a6:55:19:91:20: c0:bd:69:df:fd:13:48:81:38:de:5d:1a:c0:5e:68:48:5e:6e: c0:67:80:a1:b2:fe:8e:b2:8c:f1:5d:87:f1:28:d5:6a:2e:c6: e4:a7:59:1f:67:87:e8:d9:47:96:1c:64:45:6f:5f:e0:6d:7c: 01:74:f3:2d:1c:c4:10:57:74:70:dc:9c:8a:7a:69:e6:06:63: d6:83:7e:bc:83:6d:c4:fa:69:6a:14:09:3b:8a:1d:2d:80:74: 37:a7:ea:33:53:b6:4c:30:1f:58:2d:b9:87:30:91:3b:57:f4: ac:aa:11:93:c4:73:a0:77:4f:a2:0b:6f:a6:ef:8e:48:96:d3: ec:ae:a9:2d:13:04:bc:b8:41:ff:df:da:0a:f5:6e:64:0e:5d: 03:fb:f4:59:a5:6a:88:e0:12:19:8c:a8:f3:58:1b:f7:53:1b: 32:63:36:6f:3b:45:b2:1b:96:bd:0b:a4:58:0b:87:fd:ea:b5: 0f:63:c8:7e:e1:e1:4a:47:d8:ef:81:e4:0d:26:91:2b:0a:54: 9d:1d:3f:78 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7Nsc+jsJHLFW7BJs1nc1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWI5MmMxNDQxMzA0OTM2ZjY2YzEzYTdiZjIzMWE2ODk4NTFlZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMwHu/uhLj845/2hvKIcb7idvpED hWidWtjymcN8nqacnoiB3zMtjugw25DU1VWx7wGpE62fVYFAjGhc4UeaxgMne5zU gckgrfwMYfh3wO7lsyzTpQXyg74l4hwiPEkg9wmQW96tZexJmlef4FfnaG+pQD9I bSALExTdCihgA3by5Vk0Ag+XqLKZGJ39yfKRWwCaRj/bVUQ2VHYWDZ/e7NEYVQrM 6GzkhM35FJRk8P/ZS6OnjtSaV2RjI+LPyBbD4H15xwknJvdrkYuSCgi7+jPTTOBe gDoiMO3ShionafhGbIx7Zc7VYyYjvlGgJkJsxWm5/IJDwfKO7/hwFGc7IQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKm5LBRBMEk29mwTp78jGmiYUe0rMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvcWJrc0ZFRXdTVGIyYkJPbnZ5TWFhSmhSN1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgH/xwIw DQYJKoZIhvcNAQELBQADggEBADD5i/7BMTQib2Wep+sfQXEMmOtmCzw+OUFwtZkX aa761/4KPCrtyzZSriiim9rGEa6mVRmRIMC9ad/9E0iBON5dGsBeaEhebsBngKGy /o6yjPFdh/Eo1WouxuSnWR9nh+jZR5YcZEVvX+BtfAF08y0cxBBXdHDcnIp6aeYG Y9aDfryDbcT6aWoUCTuKHS2AdDen6jNTtkwwH1gtuYcwkTtX9KyqEZPEc6B3T6IL b6bvjkiW0+yuqS0TBLy4Qf/f2gr1bmQOXQP79FmlaojgEhmMqPNYG/dTGzJjNm87 RbIblr0LpFgLh/3qtQ9jyH7h4UpH2O+B5A0mkSsKVJ0dP3g= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:43 2026 by rpki-client