This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/QYAIVSd2tgwed65DPiU0ds85aB0.roa File: QYAIVSd2tgwed65DPiU0ds85aB0.roa (raw, json) Hash identifier: g9cZELqfkNNkZkS/ZARd962rG7NHC+bpHrVh18iN6TI= Subject key identifier: 41:80:08:55:27:76:B6:0C:1E:77:AE:43:3E:25:34:76:CF:39:68:1D Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Certificate serial: 019B797F49047821AD814B3087A26636032E Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/QYAIVSd2tgwed65DPiU0ds85aB0.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397568 IP address blocks: 2a06:6540:2003::/48 maxlen: 48 2a06:6541:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:49:04:78:21:ad:81:4b:30:87:a2:66:36:03:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=418008552776b60c1e77ae433e253476cf39681d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:5c:24:2f:ac:87:a6:02:51:c1:8b:d6:8b: 13:40:f2:3d:17:64:b5:e4:74:23:eb:3b:c2:3f:7d: a8:06:12:70:9f:47:71:0b:87:f4:3c:cb:0d:84:82: 83:a3:a5:05:70:96:92:1b:e2:22:84:ad:93:78:85: ee:61:cc:c4:be:45:8e:64:84:12:2e:7f:54:60:0d: 28:37:c5:b0:a1:69:5f:e7:55:ec:64:6d:67:64:37: 97:68:a1:bf:84:33:7d:87:81:2a:a9:68:07:2a:7d: df:b8:4c:9c:52:c6:e4:5f:e9:fd:0e:83:ed:2e:4c: 5f:28:8d:98:99:80:16:ef:c0:ec:a6:0a:75:e8:1d: e9:22:2f:23:ca:78:4b:35:ed:f4:07:1f:a8:19:d6: 99:3e:77:47:4d:c3:fa:e7:27:b0:bf:d0:42:33:6e: 1b:62:fb:a7:6f:d2:ea:06:bc:0a:d9:9b:d0:ec:6c: 92:a8:26:a2:ec:94:85:2f:da:66:5e:20:ac:13:40: 27:54:d7:31:8f:d9:42:89:07:69:8e:0f:1f:c6:84: 88:69:0d:e5:2a:25:65:d7:8f:41:64:ae:b6:a0:91: de:39:1b:9e:de:ef:9d:2f:02:d9:ee:bc:d6:40:30: af:be:8f:c8:7a:07:53:d2:db:66:9c:4c:c0:c7:32: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:80:08:55:27:76:B6:0C:1E:77:AE:43:3E:25:34:76:CF:39:68:1D X509v3 Authority Key Identifier: keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/QYAIVSd2tgwed65DPiU0ds85aB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:6540:2003::/48 2a06:6541:2003::/48 Signature Algorithm: sha256WithRSAEncryption ac:2f:f7:ea:96:94:58:f0:40:2a:eb:56:92:d4:61:60:e0:f3: 7f:73:7e:38:73:6a:75:fb:d4:44:0f:48:38:14:b9:fe:61:ef: 08:ea:c2:0a:73:3e:4d:7a:a0:8a:e1:60:32:1d:5f:90:44:a3: 9d:6e:53:97:a7:72:33:9c:54:71:4f:9f:4e:ba:eb:6d:bb:ec: 5e:07:15:c0:2a:33:78:73:05:d8:eb:c2:bb:a6:c8:72:53:ff: 09:a1:31:dc:9a:c1:fc:1d:40:dd:b9:1b:db:ff:fe:5b:73:cd: 96:36:84:e7:5d:a0:e0:61:c2:58:49:9a:36:5f:0f:68:34:d2: 13:f7:cc:0e:b8:6c:b0:d0:6f:fb:2d:ea:87:6d:7e:56:a7:54: 21:dd:00:b5:d4:b8:4d:22:00:54:77:27:a5:3d:6a:f6:fc:ea: 30:fc:33:41:a8:ff:c9:4c:ab:38:4c:1c:08:d4:8e:58:8e:f3: 91:a6:ce:13:24:56:95:02:05:4f:42:fa:86:dc:2e:c9:61:fb: 20:11:30:e8:1a:7d:71:07:a7:97:fd:68:b5:41:03:c5:66:3e: e1:05:96:7e:5a:1b:93:f9:87:17:bb:d8:a0:e3:8e:94:5b:db: 12:ab:f4:e6:5d:17:ae:99:52:a0:73:74:5d:76:02:cb:32:b2: 7a:47:61:8b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5f0kEeCGtgUswh6JmNgMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi MjI1NDcwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTgwMDg1NTI3NzZiNjBjMWU3N2FlNDMzZTI1MzQ3NmNmMzk2ODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRxcJC+sh6YCUcGL1osTQPI9F2S1 5HQj6zvCP32oBhJwn0dxC4f0PMsNhIKDo6UFcJaSG+IihK2TeIXuYczEvkWOZIQS Ln9UYA0oN8WwoWlf51XsZG1nZDeXaKG/hDN9h4EqqWgHKn3fuEycUsbkX+n9DoPt LkxfKI2YmYAW78Dspgp16B3pIi8jynhLNe30Bx+oGdaZPndHTcP65yewv9BCM24b Yvunb9LqBrwK2ZvQ7GySqCai7JSFL9pmXiCsE0AnVNcxj9lCiQdpjg8fxoSIaQ3l KiVl149BZK62oJHeORue3u+dLwLZ7rzWQDCvvo/IegdT0ttmnEzAxzICxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEGACFUndrYMHneuQz4lNHbPOWgdMB8GA1UdIwQY MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt OWFiZDFhYTY0YmUxLzEvUVlBSVZTZDJ0Z3dlZDY1RFBpVTBkczg1YUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgZlQCAD AwcAKgZlQSADMA0GCSqGSIb3DQEBCwUAA4IBAQCsL/fqlpRY8EAq61aS1GFg4PN/ c344c2p1+9RED0g4FLn+Ye8I6sIKcz5NeqCK4WAyHV+QRKOdblOXp3IznFRxT59O uuttu+xeBxXAKjN4cwXY68K7pshyU/8JoTHcmsH8HUDduRvb//5bc82WNoTnXaDg YcJYSZo2Xw9oNNIT98wOuGyw0G/7LeqHbX5Wp1Qh3QC11LhNIgBUdyelPWr2/Oow /DNBqP/JTKs4TBwI1I5YjvORps4TJFaVAgVPQvqG3C7JYfsgETDoGn1xB6eX/Wi1 QQPFZj7hBZZ+WhuT+YcXu9ig446UW9sSq/TmXReumVKgc3RddgLLMrJ6R2GL -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:58 2026 by rpki-client