This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/dqMlRayS2Zk8T9yw4HnObXcfkFs.roa File: dqMlRayS2Zk8T9yw4HnObXcfkFs.roa (raw, json) Hash identifier: ZflJfUfYgkfuQwoF8VaNgzB/zsaQQoupZA9LCKNCHvw= Subject key identifier: 76:A3:25:45:AC:92:D9:99:3C:4F:DC:B0:E0:79:CE:6D:77:1F:90:5B Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253 Certificate serial: 019B7CED608968DF12F0878F30E82BE94F9F Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/dqMlRayS2Zk8T9yw4HnObXcfkFs.roa Signing time: Fri 02 Jan 2026 04:18:09 +0000 ROA not before: Fri 02 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8821 IP address blocks: 2a03:62a0:4101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:60:89:68:df:12:f0:87:8f:30:e8:2b:e9:4f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253 Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76a32545ac92d9993c4fdcb0e079ce6d771f905b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:a9:e9:69:ad:91:2f:54:b4:8a:9f:7a:9b: cc:52:f3:d4:7c:88:62:c1:20:70:2d:db:73:c7:98: 94:51:ae:2c:af:1b:fe:c9:de:27:a5:88:33:63:45: 07:0c:49:28:ee:ed:08:14:cc:8d:2d:1c:3d:7c:76: e3:03:75:3a:e8:44:6b:c9:80:04:c6:7c:73:80:f8: 45:e9:68:2b:7f:cc:5b:96:ce:b4:b7:62:16:c1:84: 97:be:0d:0c:ea:69:81:5c:97:cf:75:a9:55:cb:e4: 66:24:8d:4c:e3:04:a6:97:1b:6e:d4:dd:58:70:cb: 6a:4a:44:7d:6b:97:73:a8:10:4c:e3:99:92:f8:73: 90:37:17:2e:c6:4f:7d:2a:b1:e5:18:fc:59:f3:9c: 16:7a:29:87:ba:11:74:cd:5c:5d:ef:79:7d:18:ce: 70:b5:b6:33:5a:51:47:cc:c2:21:b6:ae:9f:8d:2b: c3:3b:6a:00:e8:9b:18:7a:d0:72:46:9c:f7:e6:7c: 22:70:ea:f9:d8:08:a7:75:08:56:68:21:0a:ee:00: ef:75:3b:b1:bc:b5:8a:fe:f6:25:e7:02:b4:90:8c: 03:cb:07:c5:1a:34:71:85:c0:5f:a7:fe:f2:80:2f: 08:af:cf:5b:fa:45:c4:86:eb:52:b0:e5:d0:60:b3: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A3:25:45:AC:92:D9:99:3C:4F:DC:B0:E0:79:CE:6D:77:1F:90:5B X509v3 Authority Key Identifier: keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/dqMlRayS2Zk8T9yw4HnObXcfkFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:62a0:4101::/48 Signature Algorithm: sha256WithRSAEncryption 9b:00:17:5a:bf:84:49:f5:c8:33:56:dc:84:9b:aa:30:bc:1e: 01:6d:a8:bf:09:35:21:70:fd:61:84:de:83:85:ea:e6:dd:54: 6c:68:5c:cf:9b:c6:ea:11:63:ba:32:46:86:3d:06:66:07:a4: 34:03:3c:fc:50:e1:8c:24:e8:6a:47:40:88:f6:2c:49:c2:35: ab:bf:f2:43:01:09:8f:35:64:44:cf:44:3c:08:63:31:14:4c: 78:14:6b:4a:0c:8b:7f:d0:ad:81:6c:d3:9e:1a:97:e7:db:19: 91:2f:5b:8f:2a:19:8d:bb:75:e6:a4:7c:da:db:58:18:68:74: fa:b2:23:36:35:8f:45:60:64:dd:8d:74:a4:0d:d2:5c:fc:2c: 63:ad:4c:a2:88:46:b2:ac:ff:86:ae:ca:d4:c6:11:cf:b6:e6: c4:e9:98:ab:00:e8:9e:9c:9f:d6:7c:ca:2c:01:01:dc:de:d7: 69:0b:8a:2b:77:ad:93:5b:fe:d7:44:c9:09:39:41:ba:28:af: 87:ed:33:43:cf:f6:ff:40:6a:a7:7e:70:c7:24:0c:fc:ff:dc: 2c:0d:ec:78:af:1e:64:26:d6:62:c2:ae:49:42:1c:18:1e:df: 06:03:69:b5:34:1b:3e:18:04:e9:cd:56:df:32:1c:ba:13:2a: 8f:0f:0e:11 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87WCJaN8S8IePMOgr6U+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2M1ZjBhYTE0MTAxMWNlMmRiZjE4Y2NjZWFhYzhkMjNh ODAyNTMwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmEzMjU0NWFjOTJkOTk5M2M0ZmRjYjBlMDc5Y2U2ZDc3MWY5MDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAommp6WmtkS9UtIqfepvMUvPUfIhi wSBwLdtzx5iUUa4srxv+yd4npYgzY0UHDEko7u0IFMyNLRw9fHbjA3U66ERryYAE xnxzgPhF6Wgrf8xbls60t2IWwYSXvg0M6mmBXJfPdalVy+RmJI1M4wSmlxtu1N1Y cMtqSkR9a5dzqBBM45mS+HOQNxcuxk99KrHlGPxZ85wWeimHuhF0zVxd73l9GM5w tbYzWlFHzMIhtq6fjSvDO2oA6JsYetByRpz35nwicOr52AindQhWaCEK7gDvdTux vLWK/vYl5wK0kIwDywfFGjRxhcBfp/7ygC8Ir89b+kXEhutSsOXQYLOO0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHajJUWsktmZPE/csOB5zm13H5BbMB8GA1UdIwQY MBaAFE08XwqhQQEc4tvxjMzqrI0jqAJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMt MTkzOTdmYzc2ZmVjLzEvZHFNbFJheVMyWms4VDl5dzRIbk9iWGNma0ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMtMTkzOTdmYzc2ZmVj LzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNioEEB MA0GCSqGSIb3DQEBCwUAA4IBAQCbABdav4RJ9cgzVtyEm6owvB4Bbai/CTUhcP1h hN6Dherm3VRsaFzPm8bqEWO6MkaGPQZmB6Q0Azz8UOGMJOhqR0CI9ixJwjWrv/JD AQmPNWREz0Q8CGMxFEx4FGtKDIt/0K2BbNOeGpfn2xmRL1uPKhmNu3XmpHza21gY aHT6siM2NY9FYGTdjXSkDdJc/CxjrUyiiEayrP+GrsrUxhHPtubE6ZirAOienJ/W fMosAQHc3tdpC4ord62TW/7XRMkJOUG6KK+H7TNDz/b/QGqnfnDHJAz8/9wsDex4 rx5kJtZiwq5JQhwYHt8GA2m1NBs+GATpzVbfMhy6EyqPDw4R -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:19 2026 by rpki-client