This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa File: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (raw, json) Hash identifier: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg= Subject key identifier: 42:88:E5:AD:0F:5A:F1:27:FE:DC:EB:1C:08:54:85:F6:52:99:78:BD Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F7F279E2430B4A29AB5874A052C4 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214326 IP address blocks: 2a12:5844:1190::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:f2:79:e2:43:0b:4a:29:ab:58:74:a0:52:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4288e5ad0f5af127fedceb1c085485f6529978bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:e3:31:8b:2e:c6:16:e8:f6:1e:d3:26:e3: 44:c8:85:43:71:c3:13:95:83:40:c5:4e:1c:20:29: 08:15:31:53:01:78:db:95:9b:93:a4:29:55:d3:e0: 15:f4:f3:6d:15:ce:47:7a:18:f7:77:d4:25:11:e0: d6:28:5b:18:c3:b2:db:c6:2d:1e:e5:77:9d:1b:3e: fd:09:d5:0b:3e:4e:36:61:ed:bd:3f:b2:4e:3c:c7: 4d:a4:44:19:3f:e4:f1:fc:8b:90:ae:54:57:3c:ac: 80:fc:be:94:a2:b4:4b:0d:a2:41:0c:32:de:33:c7: c4:cf:ee:ca:62:00:cd:aa:e6:e1:a9:9c:1e:fd:93: 4e:ab:d5:82:3b:02:cc:b3:3b:3a:0e:25:99:2a:91: 04:28:af:3f:8b:8b:6d:0d:0f:81:e0:07:27:b0:e4: 7f:74:bb:83:e2:df:ed:f1:0d:0c:e0:85:fc:00:0a: 49:d9:c2:b5:60:67:78:02:92:48:1f:f2:05:d8:fd: e7:ec:2c:72:dd:62:bb:d8:af:6f:75:3f:c0:0f:27: 69:13:db:50:5d:a6:79:e7:b7:ce:d0:dd:c2:fe:d3: a9:11:f3:65:3e:64:ee:05:73:27:59:90:66:c8:09: 5b:97:06:03:a0:fa:74:b2:7c:8d:f3:b4:50:03:37: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:88:E5:AD:0F:5A:F1:27:FE:DC:EB:1C:08:54:85:F6:52:99:78:BD X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5844:1190::/44 Signature Algorithm: sha256WithRSAEncryption 17:2d:83:c1:f9:5b:0c:fd:67:41:ab:92:29:a2:b0:61:cc:e9: f5:20:10:1a:b9:52:07:2f:81:9a:98:2a:5e:1d:e6:61:91:12: 1e:7d:f2:37:a3:c9:0d:59:67:70:bf:c3:c0:ae:43:38:36:a7: 7c:4f:71:d3:23:11:c0:ff:c8:e8:64:3b:ae:c2:ce:5c:f9:c4: 25:d5:2a:dc:87:e8:51:fc:ac:48:33:ab:dc:b3:26:51:f7:b3: 30:37:9f:71:4a:9e:a8:68:6f:84:38:80:e3:0a:39:b5:fb:86: 6b:9d:79:78:3d:02:ea:7e:16:2f:1c:6d:3c:f5:9e:fe:b7:da: 42:17:5d:b9:10:dd:49:e6:ef:5e:7a:47:b3:39:da:27:86:93: 84:aa:fa:75:50:79:6e:74:ef:92:89:75:29:b8:c6:3b:26:f1: 6b:88:ba:bf:13:95:c0:e4:fb:c6:e5:e2:0a:75:11:f4:30:b5: ae:bd:fc:56:52:65:8b:66:4d:d4:25:f7:2e:47:16:cb:c0:0a: 2a:3a:81:1b:12:ba:b9:4a:d6:a1:5f:56:e2:f7:e6:ce:a2:78: e8:16:6e:66:a5:de:49:79:8e:6d:c7:89:af:3e:79:02:95:63: 07:07:cd:92:a0:6f:ac:56:91:e1:cb:26:09:da:0d:57:42:c2: a7:37:08:3d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OPfyeeJDC0opq1h0oFLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mjg4ZTVhZDBmNWFmMTI3ZmVkY2ViMWMwODU0ODVmNjUyOTk3OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaDjMYsuxhbo9h7TJuNEyIVDccMT lYNAxU4cICkIFTFTAXjblZuTpClV0+AV9PNtFc5Hehj3d9QlEeDWKFsYw7Lbxi0e 5XedGz79CdULPk42Ye29P7JOPMdNpEQZP+Tx/IuQrlRXPKyA/L6UorRLDaJBDDLe M8fEz+7KYgDNqubhqZwe/ZNOq9WCOwLMszs6DiWZKpEEKK8/i4ttDQ+B4AcnsOR/ dLuD4t/t8Q0M4IX8AApJ2cK1YGd4ApJIH/IF2P3n7Cxy3WK72K9vdT/ADydpE9tQ XaZ557fO0N3C/tOpEfNlPmTuBXMnWZBmyAlblwYDoPp0snyN87RQAzdAAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEKI5a0PWvEn/tzrHAhUhfZSmXi9MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvUW9qbHJROWE4U2YtM09zY0NGU0Y5bEtaZUwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJYRBGQ MA0GCSqGSIb3DQEBCwUAA4IBAQAXLYPB+VsM/WdBq5IporBhzOn1IBAauVIHL4Ga mCpeHeZhkRIeffI3o8kNWWdwv8PArkM4Nqd8T3HTIxHA/8joZDuuws5c+cQl1Src h+hR/KxIM6vcsyZR97MwN59xSp6oaG+EOIDjCjm1+4ZrnXl4PQLqfhYvHG089Z7+ t9pCF125EN1J5u9eekezOdonhpOEqvp1UHludO+SiXUpuMY7JvFriLq/E5XA5PvG 5eIKdRH0MLWuvfxWUmWLZk3UJfcuRxbLwAoqOoEbErq5StahX1bi9+bOonjoFm5m pd5JeY5tx4mvPnkClWMHB82SoG+sVpHhyyYJ2g1XQsKnNwg9 -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:29 2026 by rpki-client