This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa File: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (raw, json) Hash identifier: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8= Subject key identifier: 43:CF:5C:0B:91:1D:11:85:6C:4C:04:7B:C0:43:11:E6:B9:8C:F8:50 Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019B7BA4665A90E8B7B7941C530C66AA1327 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa Signing time: Thu 01 Jan 2026 22:18:50 +0000 ROA not before: Thu 01 Jan 2026 22:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211759 IP address blocks: 2a12:3fc2:ab41::/48 maxlen: 48 2a12:3fc2:ab42::/48 maxlen: 48 2a12:3fc2:ab43::/48 maxlen: 48 2a12:3fc2:ab44::/48 maxlen: 48 2a12:3fc2:ab45::/48 maxlen: 48 2a12:3fc2:ab46::/48 maxlen: 48 2a12:3fc2:ab47::/48 maxlen: 48 2a12:3fc2:ab49::/48 maxlen: 48 2a12:3fc2:ab4a::/48 maxlen: 48 2a12:3fc2:ab4b::/48 maxlen: 48 2a12:3fc2:ab4c::/48 maxlen: 48 2a12:3fc2:ab4d::/48 maxlen: 48 2a12:3fc2:ab4e::/48 maxlen: 48 2a12:3fc2:ab4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:66:5a:90:e8:b7:b7:94:1c:53:0c:66:aa:13:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Jan 1 22:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43cf5c0b911d11856c4c047bc04311e6b98cf850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:3b:9b:b8:b0:f5:12:ae:8d:64:45:07:05: 10:64:66:eb:02:a7:3d:24:e1:d7:18:52:5f:2a:d5: 63:5b:6e:82:7c:64:4c:de:d0:87:3a:04:7d:98:2d: 80:e6:e6:de:b1:61:85:6b:2a:93:e9:4c:90:6e:cb: f6:3f:63:2f:1d:14:86:97:66:bb:2e:78:93:56:11: 39:62:45:64:5c:07:37:e0:36:25:bd:34:f5:8e:66: 5f:f2:52:0a:74:98:f7:81:c1:0f:70:ce:84:ac:dd: f5:25:32:cf:55:8e:63:49:af:9d:3a:62:3d:54:54: 18:7e:a1:a9:73:a8:e3:64:8d:32:6c:c2:1e:6c:2d: 0b:04:d9:f2:b6:ca:8c:01:96:ba:c4:64:53:92:bf: e8:c4:fb:ce:1b:6c:9e:e5:0b:8c:ef:4b:98:59:c7: 2e:c2:74:77:d2:30:dd:e5:73:d5:47:30:92:a9:2d: 6f:5e:c5:f6:6f:70:5d:64:50:71:79:ad:19:68:e7: 0f:a4:a9:c8:0a:9d:2f:ce:e6:de:df:df:64:30:2f: 06:d3:0b:6f:58:68:a3:64:23:8b:d5:0d:33:36:b0: 82:9f:49:f5:f3:f2:a5:11:c1:c1:90:fe:77:64:bf: a8:90:18:f7:a5:21:ee:c5:48:6f:23:54:3d:a5:21: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CF:5C:0B:91:1D:11:85:6C:4C:04:7B:C0:43:11:E6:B9:8C:F8:50 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3fc2:ab41::-2a12:3fc2:ab47:ffff:ffff:ffff:ffff:ffff 2a12:3fc2:ab49::-2a12:3fc2:ab4f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 53:8b:29:ee:0f:f1:ba:b1:82:e6:a6:e0:92:c7:27:8d:19:6f: 4f:f5:4a:99:2e:e4:ff:d9:99:f9:23:f7:58:f4:d3:2e:ee:41: 28:24:03:2b:d7:30:c8:9c:c4:8c:2b:90:01:de:fc:0c:0f:6a: 42:9d:aa:10:f8:bc:09:c1:75:d9:0d:0f:73:93:71:eb:cb:e2: 61:37:74:09:cf:55:1f:e4:75:68:87:48:c4:36:a8:22:af:f8: 52:43:7a:00:eb:2a:61:18:2e:e5:80:95:71:ba:ee:77:c7:55: 50:a9:b7:26:10:80:b1:6c:f3:29:fe:bc:32:24:43:0e:60:a9: 56:bb:2e:b3:8f:13:04:f6:6b:0d:8a:f2:30:86:18:40:cf:0a: b3:7e:9e:78:da:54:5d:27:7a:5a:b5:81:d8:73:c9:84:78:d8: 83:ae:a8:1c:59:ea:d3:e2:b3:ea:ac:d3:88:9f:1a:58:1d:f4: 55:89:b3:88:b0:52:ca:19:98:94:ad:49:ce:03:ca:c3:21:3b: 41:59:cc:89:42:ea:98:13:89:30:5e:af:e5:56:23:54:8d:b5: 3b:ea:a0:3c:a9:4d:2e:02:2a:b3:f2:12:9b:79:4c:0c:5c:1d: fd:ec:e7:1b:1d:f2:7d:34:16:d7:62:38:ca:50:a8:a9:71:c6: 06:3a:f5:7a -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7pGZakOi3t5QcUwxmqhMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwMTAxMjIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2NmNWMwYjkxMWQxMTg1NmM0YzA0N2JjMDQzMTFlNmI5OGNmODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsw7m7iw9RKujWRFBwUQZGbrAqc9 JOHXGFJfKtVjW26CfGRM3tCHOgR9mC2A5ubesWGFayqT6UyQbsv2P2MvHRSGl2a7 LniTVhE5YkVkXAc34DYlvTT1jmZf8lIKdJj3gcEPcM6ErN31JTLPVY5jSa+dOmI9 VFQYfqGpc6jjZI0ybMIebC0LBNnytsqMAZa6xGRTkr/oxPvOG2ye5QuM70uYWccu wnR30jDd5XPVRzCSqS1vXsX2b3BdZFBxea0ZaOcPpKnICp0vzube399kMC8G0wtv WGijZCOL1Q0zNrCCn0n18/KlEcHBkP53ZL+okBj3pSHuxUhvI1Q9pSH1owIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFEPPXAuRHRGFbEwEe8BDEea5jPhQMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvUTg5Y0M1RWRFWVZzVEFSN3dFTVI1cm1NLUZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoMBIDBwAqEj/C q0EDBwMqEj/Cq0AwEgMHACoSP8KrSQMHBCoSP8KrQDANBgkqhkiG9w0BAQsFAAOC AQEAU4sp7g/xurGC5qbgkscnjRlvT/VKmS7k/9mZ+SP3WPTTLu5BKCQDK9cwyJzE jCuQAd78DA9qQp2qEPi8CcF12Q0Pc5Nx68viYTd0Cc9VH+R1aIdIxDaoIq/4UkN6 AOsqYRgu5YCVcbrud8dVUKm3JhCAsWzzKf68MiRDDmCpVrsus48TBPZrDYryMIYY QM8Ks36eeNpUXSd6WrWB2HPJhHjYg66oHFnq0+Kz6qzTiJ8aWB30VYmziLBSyhmY lK1JzgPKwyE7QVnMiULqmBOJMF6v5VYjVI21O+qgPKlNLgIqs/ISm3lMDFwd/ezn Gx3yfTQW12I4ylCoqXHGBjr1eg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:44 2026 by rpki-client