This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/qqaQ4enj9kD29mGGzp_xaeYYmtQ.roa File: qqaQ4enj9kD29mGGzp_xaeYYmtQ.roa (raw, json) Hash identifier: /ilDb7HMvOlm/UTTWTM8BFNf5LLlJsVssBSKgu7I4Do= Subject key identifier: AA:A6:90:E1:E9:E3:F6:40:F6:F6:61:86:CE:9F:F1:69:E6:18:9A:D4 Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c Certificate serial: 019B77C6D727D3BECFDDBD4FAADC7465B931 Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/qqaQ4enj9kD29mGGzp_xaeYYmtQ.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57161 IP address blocks: 213.108.244.0/23 maxlen: 24 2a0d:16c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d7:27:d3:be:cf:dd:bd:4f:aa:dc:74:65:b9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaa690e1e9e3f640f6f66186ce9ff169e6189ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:da:e6:a2:c3:71:32:1c:46:0f:b4:cc:78: 4f:0c:c6:99:68:8b:52:80:c6:7f:73:50:ba:df:71: 3c:72:5e:bd:13:0f:d0:71:0d:b9:55:e5:1a:d5:ca: 83:91:80:84:74:13:1a:90:77:98:d4:2c:4e:07:82: 15:7d:12:df:75:41:67:8d:61:a1:b4:35:06:b0:4e: 8a:29:70:35:9b:1d:97:79:53:45:d0:23:b8:50:0f: d6:9f:f4:49:7a:02:c2:69:b3:b9:1e:4e:98:8f:79: 58:d8:7d:bf:75:f7:b1:8e:df:e3:bf:12:d9:e1:f8: e0:5a:18:1b:c6:57:43:0e:a1:24:1f:1f:44:6d:9b: 74:04:96:b1:41:a9:5e:44:b0:71:59:43:c6:dd:00: dc:f9:4f:95:30:ad:93:8b:b5:39:20:83:74:ac:fc: af:cd:c7:47:da:87:8d:59:60:21:8a:8b:4f:5a:ce: 46:92:3b:fc:70:18:c2:7e:54:66:a6:d0:1d:73:56: a1:e9:9c:6c:79:e1:a5:85:af:ad:22:76:6c:14:88: ab:67:a7:a1:1f:5e:85:83:ce:8d:d0:23:a8:87:40: 42:32:d5:40:0a:04:96:28:b6:56:0f:d2:2d:b2:3c: 3d:65:e4:6e:f9:34:ed:25:fd:06:db:24:27:f9:e1: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:90:E1:E9:E3:F6:40:F6:F6:61:86:CE:9F:F1:69:E6:18:9A:D4 X509v3 Authority Key Identifier: keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/qqaQ4enj9kD29mGGzp_xaeYYmtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.244.0/23 IPv6: 2a0d:16c0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:98:48:62:5d:d6:c3:f9:ec:e0:62:dc:44:ba:54:74:c2:9b: da:9c:ba:f1:a4:a9:da:03:03:01:d7:34:fa:2c:10:52:c2:6e: 26:7e:21:4f:93:fa:27:8a:fa:93:df:ee:b5:3b:27:f7:8d:23: 0b:8a:b3:dc:da:82:13:f7:3e:fa:88:ca:3a:03:4b:48:8a:ee: 38:4e:db:98:e3:cb:6e:46:49:d2:3a:d6:c4:3c:fb:4c:2f:7b: b8:15:4d:43:12:54:4c:ab:68:a9:28:11:c7:7b:ef:1a:6a:5b: f0:7b:65:c1:40:c7:9a:35:14:1c:69:d1:6c:ac:19:3e:f7:99: 58:a4:f9:b1:2e:ac:d1:c7:8a:c3:e8:16:0e:8c:22:e9:8c:c6: 39:e1:4c:33:8b:dc:4e:32:bc:e6:85:95:4f:b0:40:17:8b:20: ba:41:a3:51:a6:c3:8e:e1:2a:d7:d9:5c:ed:93:90:3d:03:3a: 5b:e5:45:e9:9c:e2:fd:dd:29:8a:12:d2:b5:b1:e6:7b:cb:3f: d6:c8:a8:72:76:9f:ff:d1:de:10:12:20:ca:ec:99:cd:69:cf: 0a:31:da:27:20:44:4e:40:9a:8d:fb:f5:51:45:f0:49:1d:50: a9:5b:79:8f:a5:d5:43:c2:05:de:21:b3:a2:79:98:e8:45:f0: 08:4f:42:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xtcn077P3b1Pqtx0ZbkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzNjMWZmNTU0MDNkNDc5MjM0NjQ5M2Y3NjlmOGQwMzNi ZWYwMmMwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWE2OTBlMWU5ZTNmNjQwZjZmNjYxODZjZTlmZjE2OWU2MTg5YWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzza5qLDcTIcRg+0zHhPDMaZaItS gMZ/c1C633E8cl69Ew/QcQ25VeUa1cqDkYCEdBMakHeY1CxOB4IVfRLfdUFnjWGh tDUGsE6KKXA1mx2XeVNF0CO4UA/Wn/RJegLCabO5Hk6Yj3lY2H2/dfexjt/jvxLZ 4fjgWhgbxldDDqEkHx9EbZt0BJaxQaleRLBxWUPG3QDc+U+VMK2Ti7U5IIN0rPyv zcdH2oeNWWAhiotPWs5Gkjv8cBjCflRmptAdc1ah6ZxseeGlha+tInZsFIirZ6eh H16Fg86N0COoh0BCMtVACgSWKLZWD9Itsjw9ZeRu+TTtJf0G2yQn+eHZvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKqmkOHp4/ZA9vZhhs6f8WnmGJrUMB8GA1UdIwQY MBaAFHNzwf9VQD1HkjRkk/dp+NAzvvAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMt YmM5YTVmNjYwNWZjLzEvcXFhUTRlbmo5a0QyOW1HR3pwX3hhZVlZbXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMtYmM5YTVmNjYwNWZj LzEvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQB1Wz0MA0E AgACMAcDBQAqDRbAMA0GCSqGSIb3DQEBCwUAA4IBAQAPmEhiXdbD+ezgYtxEulR0 wpvanLrxpKnaAwMB1zT6LBBSwm4mfiFPk/onivqT3+61Oyf3jSMLirPc2oIT9z76 iMo6A0tIiu44TtuY48tuRknSOtbEPPtML3u4FU1DElRMq2ipKBHHe+8aalvwe2XB QMeaNRQcadFsrBk+95lYpPmxLqzRx4rD6BYOjCLpjMY54Uwzi9xOMrzmhZVPsEAX iyC6QaNRpsOO4SrX2Vztk5A9Azpb5UXpnOL93SmKEtK1seZ7yz/WyKhydp//0d4Q EiDK7JnNac8KMdonIEROQJqN+/VRRfBJHVCpW3mPpdVDwgXeIbOieZjoRfAIT0JE -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:16 2026 by rpki-client