This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/rb_QREAW1ePk1cTBmwYg33ZsdQg.roa File: rb_QREAW1ePk1cTBmwYg33ZsdQg.roa (raw, json) Hash identifier: wfA3Jg5A29g85cjxnzAswJZn/KMcMu1oduZjh76Z33U= Subject key identifier: AD:BF:D0:44:40:16:D5:E3:E4:D5:C4:C1:9B:06:20:DF:76:6C:75:08 Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019BF2BFBCB7623A6AB40592436DCE0FC553 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/rb_QREAW1ePk1cTBmwYg33ZsdQg.roa Signing time: Sun 25 Jan 2026 01:23:30 +0000 ROA not before: Sun 25 Jan 2026 01:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 2a01:ecc0:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:bf:bc:b7:62:3a:6a:b4:05:92:43:6d:ce:0f:c5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 25 01:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adbfd0444016d5e3e4d5c4c19b0620df766c7508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:7a:9c:62:70:17:5c:4e:21:93:d5:54:e2: f9:5f:a5:0e:d3:ea:65:63:71:5e:2e:f1:e4:7a:8c: 88:f8:29:c7:04:56:d2:b6:c9:c3:ed:c3:e6:ab:88: 5c:5c:89:b9:08:14:b5:81:f7:92:f8:da:0d:e9:fc: c4:5d:b0:7e:67:db:91:7b:5b:a5:49:c2:1a:7c:77: a5:ee:54:26:f2:7b:d4:5f:c7:45:d6:5f:f5:61:64: da:88:4a:12:7a:c9:0c:81:3b:c0:02:c9:14:94:36: c4:33:b9:c9:15:06:2e:07:9d:16:15:f3:07:d6:2d: 63:e1:ae:f7:9f:f2:95:ef:67:6c:4b:96:f4:76:df: 41:4f:40:8a:07:21:c6:09:75:eb:ba:bc:ac:b8:34: bf:23:77:1e:d9:80:c8:c0:91:e9:67:f0:e0:c3:42: 2e:e1:60:38:c9:9d:e1:ea:0a:55:a4:c9:95:e0:b6: c1:2d:46:a0:71:23:5f:ff:0f:cd:2c:29:c6:43:f4: 0f:2f:c2:86:32:02:ce:d6:a4:bf:60:1d:3e:09:da: 9e:b7:13:5c:15:10:f5:2a:a8:e1:39:6f:52:59:57: 01:cf:bb:a2:1e:85:42:e4:3b:43:d6:1f:ab:2f:5c: a9:52:3f:38:20:66:70:6d:86:3c:56:83:37:1d:43: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BF:D0:44:40:16:D5:E3:E4:D5:C4:C1:9B:06:20:DF:76:6C:75:08 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/rb_QREAW1ePk1cTBmwYg33ZsdQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:6000::/36 Signature Algorithm: sha256WithRSAEncryption 19:bd:38:0c:56:fc:c3:10:50:1d:3a:c4:40:41:79:8a:63:21: f9:ba:87:d0:ff:86:f7:d2:c7:6a:6a:67:30:3f:b4:2a:ae:b8: 0a:9f:2a:5c:18:0c:79:b3:49:62:86:2e:f8:c2:61:f2:4b:76: d1:02:40:9d:f9:4d:9a:99:d3:53:91:24:55:e9:5c:cf:f0:d2: d2:cb:f0:ff:77:25:8e:90:94:7c:39:5c:f2:68:48:3e:e9:50: 7a:79:ab:72:29:6e:3a:fb:5c:13:d2:47:c6:75:92:4d:d8:54: b1:90:42:64:34:9f:19:07:c7:97:90:87:18:5b:70:46:e6:04: ef:02:d3:83:a1:80:64:e9:26:c9:37:d7:4f:f7:f6:4f:e4:c0: 55:91:c1:ea:7d:48:4f:63:7f:07:b2:14:cc:d1:f5:f8:b7:f8: 66:71:75:71:aa:11:f2:18:aa:a2:d6:6a:7c:8e:e1:ea:c8:3b: 32:b9:28:2e:48:5c:b0:9e:64:e9:e1:c0:83:38:4a:34:b4:86: 25:e4:c6:0a:49:64:e7:74:13:47:fc:45:65:41:4f:1d:7e:ff: f8:af:60:87:3e:dd:e0:1f:59:35:af:a0:a4:c5:56:a2:19:7a: fa:7f:d2:ed:2e:64:f5:34:5e:b9:c0:8f:e6:61:53:b7:79:44: 4c:f1:9c:1c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZvyv7y3YjpqtAWSQ23OD8VTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTI1MDEyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGJmZDA0NDQwMTZkNWUzZTRkNWM0YzE5YjA2MjBkZjc2NmM3NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZ6nGJwF1xOIZPVVOL5X6UO0+pl Y3FeLvHkeoyI+CnHBFbStsnD7cPmq4hcXIm5CBS1gfeS+NoN6fzEXbB+Z9uRe1ul ScIafHel7lQm8nvUX8dF1l/1YWTaiEoSeskMgTvAAskUlDbEM7nJFQYuB50WFfMH 1i1j4a73n/KV72dsS5b0dt9BT0CKByHGCXXrurysuDS/I3ce2YDIwJHpZ/Dgw0Iu 4WA4yZ3h6gpVpMmV4LbBLUagcSNf/w/NLCnGQ/QPL8KGMgLO1qS/YB0+CdqetxNc FRD1KqjhOW9SWVcBz7uiHoVC5DtD1h+rL1ypUj84IGZwbYY8VoM3HUPTeQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFK2/0ERAFtXj5NXEwZsGIN92bHUIMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvcmJfUVJFQVcxZVBrMWNUQm13WWczM1pzZFFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgHswGAw DQYJKoZIhvcNAQELBQADggEBABm9OAxW/MMQUB06xEBBeYpjIfm6h9D/hvfSx2pq ZzA/tCquuAqfKlwYDHmzSWKGLvjCYfJLdtECQJ35TZqZ01ORJFXpXM/w0tLL8P93 JY6QlHw5XPJoSD7pUHp5q3Ipbjr7XBPSR8Z1kk3YVLGQQmQ0nxkHx5eQhxhbcEbm BO8C04OhgGTpJsk310/39k/kwFWRwep9SE9jfweyFMzR9fi3+GZxdXGqEfIYqqLW anyO4erIOzK5KC5IXLCeZOnhwIM4SjS0hiXkxgpJZOd0E0f8RWVBTx1+//ivYIc+ 3eAfWTWvoKTFVqIZevp/0u0uZPU0XrnAj+ZhU7d5REzxnBw= -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:23 2026 by rpki-client