This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/QtLpBA7up6Tv9_I21sDAde754gI.roa File: QtLpBA7up6Tv9_I21sDAde754gI.roa (raw, json) Hash identifier: t/ghCJZNi0bitU5ymorA/SjBNvMEAy+ASq85mxfJPfM= Subject key identifier: 42:D2:E9:04:0E:EE:A7:A4:EF:F7:F2:36:D6:C0:C0:75:EE:F9:E2:02 Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864 Certificate serial: 019B7F15AD744C0390ED1D564BB72C6C4D2B Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/QtLpBA7up6Tv9_I21sDAde754gI.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21371 IP address blocks: 2a03:6980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ad:74:4c:03:90:ed:1d:56:4b:b7:2c:6c:4d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42d2e9040eeea7a4eff7f236d6c0c075eef9e202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:ce:3e:e3:ba:dc:48:39:62:a6:55:55:f3: 60:0d:a8:ee:e6:97:fc:c4:56:c9:d1:87:22:f9:b6: ab:0b:3e:6e:c2:6e:99:44:60:f9:b6:c6:4f:19:ac: 72:17:db:be:16:e3:71:9b:ff:54:94:4f:55:00:ce: cf:dd:ab:ed:8d:20:00:ef:35:b9:da:40:9f:5d:77: 09:99:12:b0:aa:04:a7:4c:96:aa:a9:f9:8a:93:9f: db:d7:20:d0:9b:c5:2f:92:c9:f7:2b:f0:8a:99:d8: 8d:5f:72:d9:0c:a1:c5:45:80:f8:a9:41:d6:63:86: 1c:47:7d:62:c2:fd:90:60:63:23:37:a9:bc:8f:12: 62:25:dc:7d:cc:15:e1:d3:46:0b:00:24:c6:48:a6: c1:f7:2c:2c:ed:e8:81:f8:53:f0:e6:08:41:d0:57: 69:77:5a:07:92:bd:0e:99:68:73:89:67:c1:f8:14: 5a:35:38:80:97:48:a8:ed:dc:87:d8:6d:72:94:8f: 7c:3b:f0:95:a2:4c:59:92:cf:12:4f:f7:44:0d:54: 63:38:94:68:e3:65:c4:b2:33:97:e9:7b:5b:89:97: 2d:29:33:fd:8b:f1:b0:fc:16:1b:40:69:8c:26:1e: 09:e6:31:f0:db:e2:e2:c5:f6:ea:36:a5:30:d0:22: ec:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D2:E9:04:0E:EE:A7:A4:EF:F7:F2:36:D6:C0:C0:75:EE:F9:E2:02 X509v3 Authority Key Identifier: keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/QtLpBA7up6Tv9_I21sDAde754gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:6980::/32 Signature Algorithm: sha256WithRSAEncryption a4:cf:d7:9f:01:c2:e4:24:b0:45:6b:77:fb:ca:89:9e:dd:ca: da:4f:b6:b8:87:65:e5:c4:fb:0a:34:c4:68:0b:55:4f:fa:71: d9:b8:7a:a1:51:99:02:89:39:26:7d:22:ba:eb:00:aa:9c:16: 51:0a:d9:e2:a6:09:b5:6b:38:06:dc:92:8c:8c:8f:dc:ec:89: 27:78:0e:c1:37:cf:a8:40:88:d5:8e:fc:3d:f9:fc:38:b4:f6: 86:a4:b6:d2:06:9b:c0:e0:84:57:86:f5:14:cd:3d:ab:f8:25: 78:ff:52:a4:f3:87:cf:d6:8d:7d:7a:de:5d:68:b4:ba:58:d5: 65:d2:eb:49:15:b9:5d:05:d2:ac:ba:b8:d0:ad:3b:6c:51:ac: b9:31:c6:94:65:31:37:1f:57:96:8a:2b:8d:71:37:b5:06:aa: 15:e8:78:4e:7b:43:21:7e:b5:a4:c8:b4:45:14:26:ea:e1:13: 80:96:39:cf:21:95:db:a2:65:5c:74:0f:38:73:0c:33:b8:71: ff:25:05:76:03:a7:fd:94:46:5c:9d:2e:27:8c:eb:ac:25:af: 78:81:74:94:4a:ad:a0:72:60:73:73:5e:37:f0:d2:91:c1:a5: 66:b6:ff:46:75:e1:dc:5e:db:b4:4a:0a:25:a7:c1:4d:86:0c: ec:ea:60:6f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/Fa10TAOQ7R1WS7csbE0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGZlOTcxYjNlMzZiMTZhOTJiZTg1ZjU5OTg1YmU0NTk2 OGI4NjQwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmQyZTkwNDBlZWVhN2E0ZWZmN2YyMzZkNmMwYzA3NWVlZjllMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJrOPuO63Eg5YqZVVfNgDaju5pf8 xFbJ0Yci+barCz5uwm6ZRGD5tsZPGaxyF9u+FuNxm/9UlE9VAM7P3avtjSAA7zW5 2kCfXXcJmRKwqgSnTJaqqfmKk5/b1yDQm8Uvksn3K/CKmdiNX3LZDKHFRYD4qUHW Y4YcR31iwv2QYGMjN6m8jxJiJdx9zBXh00YLACTGSKbB9yws7eiB+FPw5ghB0Fdp d1oHkr0OmWhziWfB+BRaNTiAl0io7dyH2G1ylI98O/CVokxZks8ST/dEDVRjOJRo 42XEsjOX6XtbiZctKTP9i/Gw/BYbQGmMJh4J5jHw2+LixfbqNqUw0CLs6wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFELS6QQO7qek7/fyNtbAwHXu+eICMB8GA1UdIwQY MBaAFDMP6XGz42sWqSvoX1mYW+RZaLhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWIt MTFlOWU5ZjAxMzQzLzEvUXRMcEJBN3VwNlR2OV9JMjFzREFkZTc1NGdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWItMTFlOWU5ZjAxMzQz LzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgNpgDAN BgkqhkiG9w0BAQsFAAOCAQEApM/XnwHC5CSwRWt3+8qJnt3K2k+2uIdl5cT7CjTE aAtVT/px2bh6oVGZAok5Jn0iuusAqpwWUQrZ4qYJtWs4BtySjIyP3OyJJ3gOwTfP qECI1Y78Pfn8OLT2hqS20gabwOCEV4b1FM09q/gleP9SpPOHz9aNfXreXWi0uljV ZdLrSRW5XQXSrLq40K07bFGsuTHGlGUxNx9XloorjXE3tQaqFeh4TntDIX61pMi0 RRQm6uETgJY5zyGV26JlXHQPOHMMM7hx/yUFdgOn/ZRGXJ0uJ4zrrCWveIF0lEqt oHJgc3NeN/DSkcGlZrb/RnXh3F7btEoKJafBTYYM7Opgbw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:06 2026 by rpki-client