This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/qi0gnQ2A8mtm5nYWriDtU7TmQuc.roa File: qi0gnQ2A8mtm5nYWriDtU7TmQuc.roa (raw, json) Hash identifier: uJnkHGGJ2XDTIlw0+Vcce7p4k0hUULEaSnw534z2SoM= Subject key identifier: AA:2D:20:9D:0D:80:F2:6B:66:E6:76:16:AE:20:ED:53:B4:E6:42:E7 Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Certificate serial: 019A813EA49699BB31FFFAE0F7FB71FD39BA Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/qi0gnQ2A8mtm5nYWriDtU7TmQuc.roa Signing time: Fri 14 Nov 2025 07:22:37 +0000 ROA not before: Fri 14 Nov 2025 07:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39686 IP address blocks: 2a10:dac0:101::/48 maxlen: 48 2a10:dac0:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:3e:a4:96:99:bb:31:ff:fa:e0:f7:fb:71:fd:39:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Validity Not Before: Nov 14 07:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa2d209d0d80f26b66e67616ae20ed53b4e642e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:29:f0:ef:a8:d0:a4:9b:50:f3:6a:cc:e6: 46:c5:ac:92:0a:a9:11:e9:b7:3c:f0:97:6c:b0:c9: 1b:a6:bd:44:67:77:1b:97:6e:a5:a8:9d:d1:4e:ad: 0b:03:e7:3c:ef:2a:8f:ef:84:74:b1:53:81:45:f7: 07:6f:4c:c6:02:37:15:33:65:e0:e6:ff:bd:5c:be: 03:51:ad:65:9d:b1:e7:d7:30:78:f5:2a:b9:d1:9c: e8:f0:f6:9d:16:76:db:0e:2d:a7:ed:b0:15:48:ff: ef:79:6c:dd:e7:04:22:1e:39:8c:b1:4d:ea:61:5e: f0:e7:bd:98:5f:67:d2:de:c0:0a:25:50:5c:70:17: b4:4b:29:48:c2:0e:9e:ce:08:7e:e3:d4:da:24:15: 62:b1:ab:00:ab:9e:51:2b:76:ea:cf:e2:96:f4:f4: 0d:c8:48:00:0e:3a:be:ab:06:c8:31:fa:84:c8:0b: 34:10:01:32:a4:dc:e0:04:e0:24:86:83:4f:5e:3a: 5d:d6:c3:6e:d4:e3:8f:68:74:4a:90:19:e9:12:e6: e1:7f:06:68:75:01:9f:fb:53:20:9e:2b:b7:a0:47: 79:84:f9:3c:7a:a7:4e:35:0a:7a:cc:81:35:3a:76: f0:87:1e:91:b3:e2:f2:26:00:c3:8f:e2:9e:e7:f2: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:20:9D:0D:80:F2:6B:66:E6:76:16:AE:20:ED:53:B4:E6:42:E7 X509v3 Authority Key Identifier: keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/qi0gnQ2A8mtm5nYWriDtU7TmQuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:dac0:101::-2a10:dac0:102:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 52:06:7c:74:7b:42:32:38:2d:c5:d8:de:2b:9b:97:49:89:15: 5e:5e:07:5f:61:99:bc:71:45:2a:ad:1a:50:3d:64:f5:62:f7: 7d:01:d1:8b:d3:bb:d8:32:7a:b0:ba:18:d9:9f:c4:a5:bd:29: 04:4e:e5:18:2e:d0:60:cd:9a:e3:96:04:3c:8c:b5:05:92:77: 36:9a:29:c5:80:79:43:9f:22:b6:fc:66:4f:f8:06:ea:ea:85: 25:14:05:60:57:f7:a5:1c:f8:c4:1d:20:a2:d7:e6:13:6b:54: 68:d5:a8:d7:30:df:c5:9e:3a:9a:7c:85:12:49:0a:8b:53:d9: e9:79:5e:b2:0e:82:a4:2b:6e:6d:38:a2:1f:63:a0:bc:9b:4d: 5f:40:14:e2:12:f2:a1:6e:b7:86:3e:59:42:5f:a2:f0:35:69: b1:04:f9:c9:51:b4:12:24:14:47:49:98:a7:ea:7f:55:ec:27: b7:a4:51:2f:19:41:86:ff:df:68:b3:5d:7c:d1:6f:d4:5f:89: e3:a0:d5:13:be:78:51:ef:06:c9:9f:24:ed:ac:68:34:cf:54: 77:d7:3d:83:ec:c8:b2:42:83:ef:cb:17:99:aa:cb:c1:65:8c: 30:ee:47:ed:3c:61:e5:42:9e:87:da:81:37:1d:04:89:b5:f2: f3:fe:d1:db -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZqBPqSWmbsx//rg9/tx/Tm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl ZTYxYWEwHhcNMjUxMTE0MDcyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTJkMjA5ZDBkODBmMjZiNjZlNjc2MTZhZTIwZWQ1M2I0ZTY0MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIEp8O+o0KSbUPNqzOZGxaySCqkR 6bc88JdssMkbpr1EZ3cbl26lqJ3RTq0LA+c87yqP74R0sVOBRfcHb0zGAjcVM2Xg 5v+9XL4DUa1lnbHn1zB49Sq50Zzo8PadFnbbDi2n7bAVSP/veWzd5wQiHjmMsU3q YV7w572YX2fS3sAKJVBccBe0SylIwg6ezgh+49TaJBVisasAq55RK3bqz+KW9PQN yEgADjq+qwbIMfqEyAs0EAEypNzgBOAkhoNPXjpd1sNu1OOPaHRKkBnpEubhfwZo dQGf+1Mgniu3oEd5hPk8eqdONQp6zIE1Onbwhx6Rs+LyJgDDj+Ke5/LPeQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKotIJ0NgPJrZuZ2Fq4g7VO05kLnMB8GA1UdIwQY MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt MTdhMWRjZGNjNmUwLzEvcWkwZ25RMkE4bXRtNW5ZV3JpRHRVN1RtUXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqENrA AQEDBwAqENrAAQIwDQYJKoZIhvcNAQELBQADggEBAFIGfHR7QjI4LcXY3iubl0mJ FV5eB19hmbxxRSqtGlA9ZPVi930B0YvTu9gyerC6GNmfxKW9KQRO5Rgu0GDNmuOW BDyMtQWSdzaaKcWAeUOfIrb8Zk/4BurqhSUUBWBX96Uc+MQdIKLX5hNrVGjVqNcw 38WeOpp8hRJJCotT2el5XrIOgqQrbm04oh9joLybTV9AFOIS8qFut4Y+WUJfovA1 abEE+clRtBIkFEdJmKfqf1XsJ7ekUS8ZQYb/32izXXzRb9RfieOg1RO+eFHvBsmf JO2saDTPVHfXPYPsyLJCg+/LF5mqy8FljDDuR+08YeVCnofagTcdBIm18vP+0ds= -----END CERTIFICATE-----Generated at Sat Dec 6 20:31:08 2025 by rpki-client