This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/rq7JejW5a3_irbw_aBIqgmSBTqc.roa File: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (raw, json) Hash identifier: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY= Subject key identifier: AE:AE:C9:7A:35:B9:6B:7F:E2:AD:BC:3F:68:12:2A:82:64:81:4E:A7 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA368E62E508ED1EE55769704AF11E0 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/rq7JejW5a3_irbw_aBIqgmSBTqc.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206445 IP address blocks: 2a01:e901:164::/48 maxlen: 48 2a01:e901:174::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:68:e6:2e:50:8e:d1:ee:55:76:97:04:af:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeaec97a35b96b7fe2adbc3f68122a8264814ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:46:ec:9c:07:97:c1:c6:05:f7:15:d4:3e: 8a:fd:b9:8b:32:79:d3:84:6c:41:f3:e8:cd:49:cc: b7:d8:94:3d:0a:82:b7:0c:04:5d:7d:a2:fb:5e:1f: a1:3b:bb:0a:ed:8a:76:08:3f:5e:c6:b2:5e:fe:f7: 42:1c:96:72:00:ca:b2:f2:af:e2:e4:d8:17:90:64: 60:b9:5c:a2:d6:96:30:7c:5b:e6:68:bb:b1:9f:61: 25:3a:81:3e:c0:d6:ea:3b:29:6d:ca:32:76:a8:f5: d2:1a:3d:f1:58:0d:af:6c:5a:cd:a8:b4:42:0e:da: 08:2d:2c:41:dc:7a:94:f0:5b:e8:36:0c:31:79:7d: 2a:17:70:30:c4:07:85:27:90:d6:cb:59:48:f4:2e: 6e:2b:07:22:28:b4:32:c3:c6:0d:a9:9a:97:f2:e5: 37:93:39:98:81:5e:6e:c8:a7:46:05:a6:82:58:0a: 1d:44:5f:e8:7d:2c:53:7e:ef:51:b3:87:96:86:24: 61:de:53:c5:81:be:fb:58:a2:ef:22:04:8d:9b:37: 64:8c:ad:c9:63:4d:79:e6:eb:7b:30:5e:a9:c2:71: a9:28:b0:56:7a:23:58:a6:cb:18:e0:55:a6:fb:b4: 4a:ed:78:48:bd:48:30:64:64:ab:f6:e9:fb:8a:9f: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AE:C9:7A:35:B9:6B:7F:E2:AD:BC:3F:68:12:2A:82:64:81:4E:A7 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/rq7JejW5a3_irbw_aBIqgmSBTqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:164::/48 2a01:e901:174::/48 Signature Algorithm: sha256WithRSAEncryption 30:03:60:44:8f:b9:23:d1:08:39:60:5a:3b:80:34:4a:c1:c4: 19:f3:82:6d:46:a1:b0:5b:c6:c4:80:b9:8e:94:ac:72:0e:69: 60:3f:4e:66:b1:17:f0:6b:79:e2:84:e7:68:a1:bc:a7:29:67: 21:c6:ec:37:d6:07:aa:1c:d2:a8:90:31:70:a0:6e:5d:b5:df: 82:11:69:43:2f:f8:c0:13:3a:16:39:81:57:73:c0:30:51:a8: de:76:01:2a:fc:bf:f7:14:db:c9:fd:aa:14:08:90:56:04:c8: 5f:a2:32:88:76:5c:74:70:11:7c:91:dd:08:71:41:fb:cc:b7: 87:80:e9:3c:63:d5:11:46:62:9e:ae:f3:34:eb:0e:d7:8c:4e: a6:d4:45:4b:b9:b0:80:1b:dd:17:e8:fb:de:9f:fc:30:70:8b: 22:5e:fa:4a:c2:e8:46:f1:9c:63:3e:fb:d8:31:97:28:9a:05: 96:ca:e9:f6:6f:53:ac:24:d7:b4:33:dd:15:f2:dc:6e:47:66: b4:42:16:b8:4c:dc:9e:93:fe:0e:be:0f:80:e1:fc:48:31:36: 74:e9:dc:1a:d4:f1:44:4d:d5:62:bc:b3:0e:ae:cf:24:1e:81: c4:a6:14:1d:79:c4:d1:4a:71:08:a2:54:60:c5:2c:19:db:8c: aa:ce:ec:bf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o2jmLlCO0e5VdpcErxHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWFlYzk3YTM1Yjk2YjdmZTJhZGJjM2Y2ODEyMmE4MjY0ODE0ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG5G7JwHl8HGBfcV1D6K/bmLMnnT hGxB8+jNScy32JQ9CoK3DARdfaL7Xh+hO7sK7Yp2CD9exrJe/vdCHJZyAMqy8q/i 5NgXkGRguVyi1pYwfFvmaLuxn2ElOoE+wNbqOyltyjJ2qPXSGj3xWA2vbFrNqLRC DtoILSxB3HqU8FvoNgwxeX0qF3AwxAeFJ5DWy1lI9C5uKwciKLQyw8YNqZqX8uU3 kzmYgV5uyKdGBaaCWAodRF/ofSxTfu9Rs4eWhiRh3lPFgb77WKLvIgSNmzdkjK3J Y0155ut7MF6pwnGpKLBWeiNYpssY4FWm+7RK7XhIvUgwZGSr9un7ip9OwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK6uyXo1uWt/4q28P2gSKoJkgU6nMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvcnE3SmVqVzVhM19pcmJ3X2FCSXFnbVNCVHFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgHpAQFk AwcAKgHpAQF0MA0GCSqGSIb3DQEBCwUAA4IBAQAwA2BEj7kj0Qg5YFo7gDRKwcQZ 84JtRqGwW8bEgLmOlKxyDmlgP05msRfwa3nihOdoobynKWchxuw31geqHNKokDFw oG5dtd+CEWlDL/jAEzoWOYFXc8AwUajedgEq/L/3FNvJ/aoUCJBWBMhfojKIdlx0 cBF8kd0IcUH7zLeHgOk8Y9URRmKervM06w7XjE6m1EVLubCAG90X6Pven/wwcIsi XvpKwuhG8ZxjPvvYMZcomgWWyun2b1OsJNe0M90V8txuR2a0Qha4TNyek/4Ovg+A 4fxIMTZ06dwa1PFETdVivLMOrs8kHoHEphQdecTRSnEIolRgxSwZ24yqzuy/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:17 2026 by rpki-client