This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa File: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (raw, json) Hash identifier: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU= Subject key identifier: A9:9E:A6:34:09:C7:D5:7D:16:12:F5:AF:09:6E:3C:C4:51:C8:03:33 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019B77C6BB6D97110501C36C69CC705A47CB Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214515 IP address blocks: 2a14:9e00:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bb:6d:97:11:05:01:c3:6c:69:cc:70:5a:47:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a99ea63409c7d57d1612f5af096e3cc451c80333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:3d:39:c3:59:b7:a8:4d:8b:48:c2:b2:0e: 2b:68:12:6d:26:f8:2a:92:c1:5d:cc:18:85:13:ec: b8:df:a2:c9:ae:06:11:10:d1:2e:bd:aa:ac:47:33: ac:ac:62:03:69:9c:1b:31:d3:4c:fe:8e:c2:93:a5: 60:ef:eb:24:9b:dc:bb:54:36:88:b0:98:1d:0a:6a: cf:95:01:6e:79:7c:b8:c4:7f:e4:06:7b:15:4d:dc: 15:b8:53:f8:c8:20:26:cd:89:34:f6:f7:f4:2d:18: 29:46:0a:87:3c:09:3c:15:7d:b4:2f:57:2c:36:2c: db:0e:a6:2a:a9:c2:2d:87:eb:12:e9:3a:09:4c:3c: bd:0f:08:a9:60:98:8f:9a:8c:8a:ac:a7:20:fb:5d: e3:a7:92:87:fe:5c:fd:31:50:ae:82:c8:76:d0:e8: 59:f0:77:9c:fa:49:17:37:b1:72:70:c5:0a:94:23: 6b:ca:54:c6:a8:94:5e:de:e6:04:c6:82:e5:b2:18: 5d:ce:e6:65:5a:ce:b6:fb:33:2a:d0:b3:52:ce:48: b2:d7:7b:76:af:05:b7:bb:5c:60:0b:d9:1c:90:8f: 1a:a1:11:08:81:65:9e:04:c2:e7:03:eb:df:a2:db: 5c:98:9d:11:0e:24:a1:1b:55:18:54:1d:73:d3:c8: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:A6:34:09:C7:D5:7D:16:12:F5:AF:09:6E:3C:C4:51:C8:03:33 X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9e00:200::/40 Signature Algorithm: sha256WithRSAEncryption 48:47:6a:bc:5a:b1:23:04:b8:f0:c8:a7:73:14:8d:50:65:17: 4b:f5:7a:21:24:a1:05:31:7c:55:d2:7a:3d:0b:e6:42:24:47: cb:ed:76:49:1f:9e:1a:bf:96:61:26:11:3e:9a:f1:8d:ab:1a: 1e:b2:8b:e3:d7:c7:d7:40:65:04:67:c5:80:40:06:8c:45:d6: 5d:0b:69:c3:37:c7:5e:a3:cc:c7:7e:ab:75:06:41:9c:77:42: 7b:2e:0f:42:7d:64:5c:0d:14:27:7c:ea:8a:69:cd:a8:e9:62: c3:31:4b:17:7d:d8:01:ef:83:00:94:9f:6e:05:98:64:9e:82: ed:e4:7f:dd:f1:3a:2a:35:34:4b:ec:44:b3:74:00:83:53:12: 40:a3:86:29:a6:f2:a0:4a:dd:d1:9a:7c:fa:f7:17:71:46:41: 58:9f:97:23:9c:9d:6f:4b:7a:07:44:82:aa:f4:16:ff:8f:76: 01:b4:f3:ee:4e:d4:49:76:15:bc:77:92:8d:20:22:88:36:c3: 8a:19:67:90:d6:4c:4c:bb:47:d7:5f:e1:65:35:f3:25:e3:17: b1:a4:7f:be:d8:5c:cc:34:57:30:ae:7a:50:71:a0:45:c7:ec: 95:a8:14:b3:f4:e6:ac:a5:77:e5:46:0e:85:e1:0e:f3:1e:95: 5f:67:79:d0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xrttlxEFAcNsacxwWkfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTllYTYzNDA5YzdkNTdkMTYxMmY1YWYwOTZlM2NjNDUxYzgwMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEc9OcNZt6hNi0jCsg4raBJtJvgq ksFdzBiFE+y436LJrgYRENEuvaqsRzOsrGIDaZwbMdNM/o7Ck6Vg7+skm9y7VDaI sJgdCmrPlQFueXy4xH/kBnsVTdwVuFP4yCAmzYk09vf0LRgpRgqHPAk8FX20L1cs NizbDqYqqcIth+sS6ToJTDy9DwipYJiPmoyKrKcg+13jp5KH/lz9MVCugsh20OhZ 8Hec+kkXN7FycMUKlCNrylTGqJRe3uYExoLlshhdzuZlWs62+zMq0LNSzkiy13t2 rwW3u1xgC9kckI8aoREIgWWeBMLnA+vfottcmJ0RDiShG1UYVB1z08hOkwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKmepjQJx9V9FhL1rwluPMRRyAMzMB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvcVo2bU5BbkgxWDBXRXZXdkNXNDh4RkhJQXpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhSeAAIw DQYJKoZIhvcNAQELBQADggEBAEhHarxasSMEuPDIp3MUjVBlF0v1eiEkoQUxfFXS ej0L5kIkR8vtdkkfnhq/lmEmET6a8Y2rGh6yi+PXx9dAZQRnxYBABoxF1l0LacM3 x16jzMd+q3UGQZx3QnsuD0J9ZFwNFCd86oppzajpYsMxSxd92AHvgwCUn24FmGSe gu3kf93xOio1NEvsRLN0AINTEkCjhimm8qBK3dGafPr3F3FGQViflyOcnW9LegdE gqr0Fv+PdgG08+5O1El2Fbx3ko0gIog2w4oZZ5DWTEy7R9df4WU18yXjF7Gkf77Y XMw0VzCuelBxoEXH7JWoFLP05qyld+VGDoXhDvMelV9nedA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:58 2026 by rpki-client