This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/q-r2zDjO2sGmoc9QswQFQyhASW8.roa File: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (raw, json) Hash identifier: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw= Subject key identifier: AB:EA:F6:CC:38:CE:DA:C1:A6:A1:CF:50:B3:04:05:43:28:40:49:6F Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Certificate serial: 019B78A287D328DD71C03AC5CE2C4983B0D7 Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/q-r2zDjO2sGmoc9QswQFQyhASW8.roa Signing time: Thu 01 Jan 2026 08:17:56 +0000 ROA not before: Thu 01 Jan 2026 08:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214784 IP address blocks: 2001:67c:2fa4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:87:d3:28:dd:71:c0:3a:c5:ce:2c:49:83:b0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abeaf6cc38cedac1a6a1cf50b30405432840496f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:2d:04:68:c2:eb:a3:92:04:de:fe:7a:ee: a6:8c:8d:61:39:b3:c3:92:0e:ba:26:6e:01:c8:59: 88:ca:88:b7:0d:fe:9a:47:c5:2c:71:00:b6:3c:3e: 9a:85:01:f2:96:7f:0d:c8:1e:27:52:1a:bd:70:7b: ce:98:7a:64:6a:a2:16:20:de:9d:12:4e:c6:85:7b: b5:13:6e:4a:9f:df:59:2c:79:a8:5c:44:04:6c:c6: 8d:4c:1e:02:07:01:19:dd:bd:f1:ba:7b:81:79:71: fc:d3:ab:8e:9a:e3:25:12:bf:eb:4f:7e:2b:bf:51: cb:84:d7:b9:55:5b:9a:b6:f1:84:86:70:27:41:f2: 00:37:4f:bb:a1:cb:90:be:6e:0f:46:cc:62:ff:97: 32:38:6e:78:94:bc:3c:ed:41:9f:92:e8:b4:e1:97: 89:ae:6c:72:57:15:6a:48:5c:4b:09:56:76:00:a7: 95:55:74:c1:9b:55:9f:c6:0e:9d:62:4b:20:65:04: 04:0e:61:83:c4:52:65:59:24:ba:23:8c:fe:87:c2: 61:7a:a2:35:7e:ef:ab:31:28:bc:6a:cd:5b:73:98: 5a:64:71:81:1e:92:4a:62:15:32:c3:69:82:f7:c7: e7:3c:14:24:8b:83:5f:d5:e1:34:0f:00:43:45:f4: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EA:F6:CC:38:CE:DA:C1:A6:A1:CF:50:B3:04:05:43:28:40:49:6F X509v3 Authority Key Identifier: keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/q-r2zDjO2sGmoc9QswQFQyhASW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2fa4::/48 Signature Algorithm: sha256WithRSAEncryption 93:20:24:ac:37:13:8d:98:c1:54:3d:2e:cf:d8:e4:1b:a2:69: b1:dd:98:86:9a:69:d9:a0:58:b2:a1:a5:64:ba:71:5c:32:ba: 3c:42:f5:74:8d:62:a8:4b:db:b3:4d:fe:e1:1a:f1:9c:71:f3: 40:5a:d9:ad:de:9d:53:de:0d:ca:e5:b4:84:9b:0c:d4:6c:4b: d7:05:eb:10:7f:44:18:ee:58:00:8c:0a:6b:5f:2d:0f:1f:7a: 43:bf:af:d3:17:6d:d8:b0:91:47:4d:50:4a:6d:5c:81:15:6f: a8:c7:69:2f:de:fb:ee:83:0c:31:17:2f:d9:3f:43:fa:dc:6b: 02:20:f5:18:c3:9b:a0:2d:a0:35:20:c5:3a:ff:29:55:30:7b: 55:17:1b:dc:8f:85:91:76:dc:93:06:61:ba:97:78:f4:f7:d9: 0e:9e:7d:40:00:60:b5:64:3b:45:0e:11:09:b7:17:ca:f6:ed: 00:47:3a:31:ef:7d:21:f7:60:83:b9:02:7e:5a:6d:ce:f9:cb: f1:54:56:37:46:e4:88:3b:1c:b6:6b:3b:bc:9d:35:e1:25:ba: 24:8b:0d:ec:8e:22:58:bb:7f:6e:e9:53:4f:d1:ce:b1:bd:d1: 91:ff:78:68:fd:f0:02:b1:96:78:24:e6:3f:ef:b8:0d:9a:2d: 34:88:f1:3e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oofTKN1xwDrFzixJg7DXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw Y2RmNmEwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmVhZjZjYzM4Y2VkYWMxYTZhMWNmNTBiMzA0MDU0MzI4NDA0OTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0UtBGjC66OSBN7+eu6mjI1hObPD kg66Jm4ByFmIyoi3Df6aR8UscQC2PD6ahQHyln8NyB4nUhq9cHvOmHpkaqIWIN6d Ek7GhXu1E25Kn99ZLHmoXEQEbMaNTB4CBwEZ3b3xunuBeXH806uOmuMlEr/rT34r v1HLhNe5VVuatvGEhnAnQfIAN0+7ocuQvm4PRsxi/5cyOG54lLw87UGfkui04ZeJ rmxyVxVqSFxLCVZ2AKeVVXTBm1Wfxg6dYksgZQQEDmGDxFJlWSS6I4z+h8JheqI1 fu+rMSi8as1bc5haZHGBHpJKYhUyw2mC98fnPBQki4Nf1eE0DwBDRfSI7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKvq9sw4ztrBpqHPULMEBUMoQElvMB8GA1UdIwQY MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt ZmY2YTljZGU2MzM1LzEvcS1yMnpEak8yc0dtb2M5UXN3UUZReWhBU1c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1 LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC+k MA0GCSqGSIb3DQEBCwUAA4IBAQCTICSsNxONmMFUPS7P2OQbommx3ZiGmmnZoFiy oaVkunFcMro8QvV0jWKoS9uzTf7hGvGccfNAWtmt3p1T3g3K5bSEmwzUbEvXBesQ f0QY7lgAjAprXy0PH3pDv6/TF23YsJFHTVBKbVyBFW+ox2kv3vvugwwxFy/ZP0P6 3GsCIPUYw5ugLaA1IMU6/ylVMHtVFxvcj4WRdtyTBmG6l3j099kOnn1AAGC1ZDtF DhEJtxfK9u0ARzox730h92CDuQJ+Wm3O+cvxVFY3RuSIOxy2azu8nTXhJbokiw3s jiJYu39u6VNP0c6xvdGR/3ho/fACsZZ4JOY/77gNmi00iPE+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:56 2026 by rpki-client