This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa File: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (raw, json) Hash identifier: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8= Subject key identifier: 43:91:DF:5D:D2:10:9E:EB:27:0B:02:89:78:DB:5C:6D:AC:58:29:1C Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F9ED2EA12700B3AE30C165742F8F Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201566 IP address blocks: 2a0e:a6c7:1000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f9:ed:2e:a1:27:00:b3:ae:30:c1:65:74:2f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4391df5dd2109eeb270b028978db5c6dac58291c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:8f:b2:4d:f4:08:31:d5:0d:3d:87:4d:89: 11:39:d7:6d:cd:23:50:78:73:11:4c:57:4d:d8:d4: 02:3c:d5:d8:10:5d:9b:fa:2e:cb:95:1e:c2:83:58: b5:5e:20:a1:d5:9c:ee:57:57:fb:98:6c:13:45:35: 56:5d:dc:8d:90:7d:78:d3:37:17:1a:98:94:7c:33: 62:71:5c:a4:f4:43:2b:f2:85:86:88:1d:78:b5:3d: 77:c2:c7:fc:4f:dc:26:d1:0f:46:10:d8:d4:c7:04: 47:7b:59:56:ae:48:16:24:32:07:e0:ea:e5:b5:59: 82:8f:3b:e7:e2:b6:f6:69:0c:75:4f:fb:8f:6f:ac: 47:ef:48:86:b9:6f:ff:d8:68:b3:6f:e6:29:52:73: 2a:70:ca:df:19:c0:e6:92:29:49:a7:a3:8e:ac:10: 20:05:c5:01:c8:75:61:1a:d7:9b:15:8e:c1:8c:4c: d0:56:84:21:c1:f6:52:5d:84:ef:75:37:d3:09:74: f9:46:a5:b1:be:ae:68:95:a1:5f:33:da:7f:51:a2: 35:3c:50:af:86:0c:49:d7:5f:a3:d3:ae:24:22:4c: 2f:78:01:41:d0:44:20:f6:f5:3b:2d:91:f5:ed:a0: ea:23:7d:af:24:e5:de:dc:e0:7f:8f:78:ab:96:8c: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:DF:5D:D2:10:9E:EB:27:0B:02:89:78:DB:5C:6D:AC:58:29:1C X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:a6c7:1000::/38 Signature Algorithm: sha256WithRSAEncryption 15:fd:e7:25:34:ad:bd:a5:d3:06:cf:5f:55:59:ce:04:60:c8: d5:a9:d9:fc:18:9d:07:22:02:31:ed:b2:51:c2:af:d7:7c:ff: 05:8d:2a:51:0f:06:b4:d4:38:54:dd:7d:f4:6a:24:0c:9e:f0: 7e:47:58:c9:cf:e5:19:c4:a0:8e:69:79:2e:22:e1:1a:89:59: 9a:cd:b3:24:00:16:f2:bd:96:5a:6a:fa:21:e5:7f:92:30:32: 90:18:25:e8:85:f0:4b:a7:e1:dc:79:7e:20:52:19:2b:b6:e2: 64:4b:cb:dc:6a:e1:a7:b1:a6:03:26:47:6d:98:14:52:e3:62: 09:c6:8c:af:ae:95:33:14:f5:11:fd:ae:a6:49:60:bc:f3:27: be:19:df:35:46:8c:fb:51:d0:cf:88:da:59:b1:e4:ab:d7:5e: 4b:5b:77:b6:be:34:13:a5:51:b7:bd:b4:15:00:3f:08:41:99: 01:4e:90:7b:1c:bf:46:fc:c7:de:a5:ff:76:e8:30:26:e1:1a: 0d:cd:fb:d0:c8:52:d3:3e:82:bb:11:57:c4:76:df:0b:91:8e: 01:d2:c2:41:39:f2:c6:9b:d2:4f:4c:2a:05:83:7d:fc:cc:a9: c0:92:b2:f8:ce:f4:4d:37:94:01:2a:c3:b1:81:81:95:a4:cc: 52:ee:0a:b3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NPntLqEnALOuMMFldC+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzkxZGY1ZGQyMTA5ZWViMjcwYjAyODk3OGRiNWM2ZGFjNTgyOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgraPsk30CDHVDT2HTYkROddtzSNQ eHMRTFdN2NQCPNXYEF2b+i7LlR7Cg1i1XiCh1ZzuV1f7mGwTRTVWXdyNkH140zcX GpiUfDNicVyk9EMr8oWGiB14tT13wsf8T9wm0Q9GENjUxwRHe1lWrkgWJDIH4Orl tVmCjzvn4rb2aQx1T/uPb6xH70iGuW//2Gizb+YpUnMqcMrfGcDmkilJp6OOrBAg BcUByHVhGtebFY7BjEzQVoQhwfZSXYTvdTfTCXT5RqWxvq5olaFfM9p/UaI1PFCv hgxJ11+j064kIkwveAFB0EQg9vU7LZH17aDqI32vJOXe3OB/j3irloyXmQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEOR313SEJ7rJwsCiXjbXG2sWCkcMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvUTVIZlhkSVFudXNuQ3dLSmVOdGNiYXhZS1J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKg6mxxAw DQYJKoZIhvcNAQELBQADggEBABX95yU0rb2l0wbPX1VZzgRgyNWp2fwYnQciAjHt slHCr9d8/wWNKlEPBrTUOFTdffRqJAye8H5HWMnP5RnEoI5peS4i4RqJWZrNsyQA FvK9llpq+iHlf5IwMpAYJeiF8Eun4dx5fiBSGSu24mRLy9xq4aexpgMmR22YFFLj YgnGjK+ulTMU9RH9rqZJYLzzJ74Z3zVGjPtR0M+I2lmx5KvXXktbd7a+NBOlUbe9 tBUAPwhBmQFOkHscv0b8x96l/3boMCbhGg3N+9DIUtM+grsRV8R23wuRjgHSwkE5 8sab0k9MKgWDffzMqcCSsvjO9E03lAEqw7GBgZWkzFLuCrM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:57 2026 by rpki-client