This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Cqx4m029JaVGdBM3t0xvlCEAgzo.roa File: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (raw, json) Hash identifier: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4= Subject key identifier: 0A:AC:78:9B:4D:BD:25:A5:46:74:13:37:B7:4C:6F:94:21:00:83:3A Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d Certificate serial: 019B7D5AFBDE57C8E1BAC16818A9CC79FE72 Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Cqx4m029JaVGdBM3t0xvlCEAgzo.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212270 IP address blocks: 2a0f:9240:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fb:de:57:c8:e1:ba:c1:68:18:a9:cc:79:fe:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aac789b4dbd25a546741337b74c6f942100833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:5f:f8:38:de:4f:5b:8b:88:b6:24:5a:47: 5e:ee:f3:d0:3c:a5:e2:3e:37:ea:c4:a2:86:a0:39: 1c:f7:b2:f2:f0:d2:2b:92:31:7e:da:06:5e:8a:92: 2e:58:be:d9:bd:4a:94:d8:c0:94:a9:56:f4:87:26: e9:f8:06:6c:7d:c9:76:85:03:5e:02:c3:c4:d9:f2: ce:03:d0:e5:61:2b:9a:41:29:3b:93:46:3a:e1:2b: f7:af:d8:07:ec:90:b0:a3:21:0e:66:be:23:18:6a: 54:a5:4c:41:d5:58:6e:ef:e4:df:ff:af:73:aa:01: 3e:6e:fc:94:5c:d2:84:1e:a8:04:d0:e7:c4:6e:ee: 72:34:a7:fc:a3:3e:e4:65:b6:9d:e3:c1:87:f2:d7: 04:f5:5b:b1:13:4e:a4:13:8d:d7:3f:21:f1:e7:39: 1b:83:d8:c8:a9:4a:2a:1c:ae:99:9e:2b:80:15:03: bc:b5:5a:97:9b:33:99:e1:ed:12:95:c3:61:4f:71: 05:98:f6:d4:96:b6:e7:ce:a9:35:09:91:73:a4:d6: 1f:4a:1b:dd:22:a1:52:02:6f:9a:a5:f4:2c:b9:b2: 86:be:e7:cc:b9:57:2b:e7:fe:4b:18:0d:25:d1:47: 0d:64:50:2e:64:36:cd:ff:14:0f:a1:dd:16:29:46: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AC:78:9B:4D:BD:25:A5:46:74:13:37:B7:4C:6F:94:21:00:83:3A X509v3 Authority Key Identifier: keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Cqx4m029JaVGdBM3t0xvlCEAgzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9240:2000::/48 Signature Algorithm: sha256WithRSAEncryption 29:64:08:a1:3b:ca:27:d2:43:0b:07:6e:f5:30:bd:03:2d:85: cf:56:6a:99:e4:51:fb:dc:6f:00:dc:4b:e3:94:ae:03:80:09: 31:08:11:a3:43:0f:91:a2:c2:14:37:8d:fe:b7:57:42:99:4c: 04:55:f6:38:34:18:e9:ab:06:21:2e:59:96:33:41:be:40:39: 53:e5:49:56:ea:30:c5:f4:cb:88:a9:0c:dd:a6:e3:a0:4b:c5: dd:0b:de:aa:5e:9b:1a:16:a6:13:de:00:23:a8:2d:76:a6:79: 0c:56:a5:7d:67:7c:8d:88:8d:2a:13:71:ae:4c:37:a8:f3:ce: fa:bb:e5:2b:29:4e:45:0e:1c:48:cc:3f:c0:5a:a8:f0:d9:c6: 0c:79:65:30:ce:30:0e:d0:2b:b2:21:07:4c:0d:d8:dd:ef:de: e4:67:74:ac:fd:39:53:14:41:87:fc:93:b2:80:b3:5b:0c:ae: 52:50:b0:78:f5:91:8f:75:9c:60:7e:c8:e3:5b:43:2a:a4:2f: d5:a0:bd:f0:78:52:69:87:ff:46:1c:25:8b:77:b1:69:03:77: 8a:58:0d:16:95:39:f9:8d:15:d1:44:85:4b:9b:47:94:74:9f: 82:61:2e:70:c6:56:29:53:91:3c:0d:4e:5c:99:7d:d7:a9:e3: b5:41:0b:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9WvveV8jhusFoGKnMef5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjNjYjI2M2RmNTBkMmQ0ZDA3M2MwZjdkYjZjZDI3NzYz MDJjOWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWFjNzg5YjRkYmQyNWE1NDY3NDEzMzdiNzRjNmY5NDIxMDA4MzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uFf+DjeT1uLiLYkWkde7vPQPKXi PjfqxKKGoDkc97Ly8NIrkjF+2gZeipIuWL7ZvUqU2MCUqVb0hybp+AZsfcl2hQNe AsPE2fLOA9DlYSuaQSk7k0Y64Sv3r9gH7JCwoyEOZr4jGGpUpUxB1Vhu7+Tf/69z qgE+bvyUXNKEHqgE0OfEbu5yNKf8oz7kZbad48GH8tcE9VuxE06kE43XPyHx5zkb g9jIqUoqHK6ZniuAFQO8tVqXmzOZ4e0SlcNhT3EFmPbUlrbnzqk1CZFzpNYfShvd IqFSAm+apfQsubKGvufMuVcr5/5LGA0l0UcNZFAuZDbN/xQPod0WKUYVqQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAqseJtNvSWlRnQTN7dMb5QhAIM6MB8GA1UdIwQY MBaAFAVjyyY99Q0tTQc8D322zSd2MCydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQt MTUwMzU0YjAwZTU1LzEvQ3F4NG0wMjlKYVZHZEJNM3QweHZsQ0VBZ3pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQtMTUwMzU0YjAwZTU1 LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+SQCAA MA0GCSqGSIb3DQEBCwUAA4IBAQApZAihO8on0kMLB271ML0DLYXPVmqZ5FH73G8A 3EvjlK4DgAkxCBGjQw+RosIUN43+t1dCmUwEVfY4NBjpqwYhLlmWM0G+QDlT5UlW 6jDF9MuIqQzdpuOgS8XdC96qXpsaFqYT3gAjqC12pnkMVqV9Z3yNiI0qE3GuTDeo 8876u+UrKU5FDhxIzD/AWqjw2cYMeWUwzjAO0CuyIQdMDdjd797kZ3Ss/TlTFEGH /JOygLNbDK5SULB49ZGPdZxgfsjjW0MqpC/VoL3weFJph/9GHCWLd7FpA3eKWA0W lTn5jRXRRIVLm0eUdJ+CYS5wxlYpU5E8DU5cmX3XqeO1QQvp -----END CERTIFICATE-----Generated at Sun Jan 25 11:44:21 2026 by rpki-client