This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nqkOw9MfSFbS5h01JDWjbJTN71o.roa File: nqkOw9MfSFbS5h01JDWjbJTN71o.roa (raw, json) Hash identifier: L4JuWDjncdXlMYRsELgLvQ3W7mn/IeGKHCKzsJvMjYk= Subject key identifier: 9E:A9:0E:C3:D3:1F:48:56:D2:E6:1D:35:24:35:A3:6C:94:CD:EF:5A Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD93301AB389782909732C8460ED6 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nqkOw9MfSFbS5h01JDWjbJTN71o.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214940 IP address blocks: 2a11:f082::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d9:33:01:ab:38:97:82:90:97:32:c8:46:0e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea90ec3d31f4856d2e61d352435a36c94cdef5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:9d:7d:f9:18:d3:9e:76:dd:dd:58:2d:a2: f8:2a:3b:02:ef:7b:64:e2:52:44:31:09:86:bb:26: 85:43:bc:75:cd:0f:54:b1:e1:29:b5:a1:08:c8:bb: 26:1f:eb:90:7e:dc:bf:27:56:c8:4e:7a:ea:ed:0f: 52:28:7c:82:7f:32:9e:de:c6:c9:34:d4:1c:46:fd: 04:58:70:56:dd:71:7f:4f:5d:a1:2f:41:b1:5a:16: e6:37:8f:89:b8:b0:aa:12:b4:73:dc:4a:07:af:3e: 3d:98:ac:1a:b5:e2:00:23:c0:2f:dd:3c:7b:d1:e5: 5a:af:98:d1:1b:78:77:c6:a8:bc:dd:45:d9:44:7f: 63:96:fc:01:3c:00:dc:e6:e9:f1:c8:5e:57:6c:15: b5:84:a3:4a:cf:a2:55:87:9e:b9:b3:cd:fd:1e:0c: af:b2:b4:08:ec:44:83:4f:7d:86:e0:83:a7:43:65: 70:51:e1:db:88:a1:6d:40:dd:d6:5f:65:43:36:2c: 49:4e:4d:df:ab:f9:e8:ca:bc:24:37:27:12:92:89: 2c:6c:e4:ca:76:0c:22:9f:61:56:a3:db:7a:8f:63: 81:8c:dd:0e:81:34:d6:f6:35:cf:b3:0f:62:3d:2d: 17:c4:29:2d:d5:1e:dd:ea:3f:70:f3:d1:eb:c4:61: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A9:0E:C3:D3:1F:48:56:D2:E6:1D:35:24:35:A3:6C:94:CD:EF:5A X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nqkOw9MfSFbS5h01JDWjbJTN71o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f082::/32 Signature Algorithm: sha256WithRSAEncryption c0:66:de:cd:a8:26:fe:e5:c6:34:28:3e:1f:54:e3:43:87:0d: c2:08:49:52:a7:5e:22:5f:70:21:3d:cc:df:6c:3a:d2:00:54: ea:5a:61:57:df:b0:41:d7:3b:9e:bb:a1:48:1a:b3:ea:35:f9: c5:96:76:98:3b:79:48:e2:0c:e7:80:69:19:37:c6:7b:7b:6d: 5d:4c:b3:e2:2d:ef:ec:c2:d3:65:e4:d2:c5:bc:ad:f3:5e:5a: 74:b2:b5:8b:e3:fd:d5:8f:d0:d5:8f:7a:2a:74:9e:2e:10:67: cd:8d:34:e1:9a:a3:64:23:6d:35:70:10:ea:1b:3b:ed:d7:af: 9a:6f:06:af:58:41:9f:9e:1c:b0:1b:1b:0d:cc:41:cb:44:d1: 6e:5b:0a:e6:b5:27:8f:8d:dc:d5:2e:25:5d:19:55:99:7b:3d: 7c:9c:3b:e7:97:1a:db:83:04:40:ee:6d:bd:4f:5d:0d:63:31: 97:cd:53:3c:4f:80:1e:c9:d8:d1:e0:db:a1:12:92:40:64:e4: 27:f9:c4:49:8b:d1:5e:ef:6b:51:94:15:0b:a6:52:ff:29:6a: a1:1a:7c:cb:24:1a:7b:7f:62:e0:ae:0b:42:09:77:2e:4a:f8: 03:e9:a5:2d:b8:d4:5a:cd:01:a4:ac:f8:cf:9f:be:2f:0b:43: a0:ec:5e:01 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26tkzAas4l4KQlzLIRg7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWE5MGVjM2QzMWY0ODU2ZDJlNjFkMzUyNDM1YTM2Yzk0Y2RlZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFidffkY05523d1YLaL4KjsC73tk 4lJEMQmGuyaFQ7x1zQ9UseEptaEIyLsmH+uQfty/J1bITnrq7Q9SKHyCfzKe3sbJ NNQcRv0EWHBW3XF/T12hL0GxWhbmN4+JuLCqErRz3EoHrz49mKwateIAI8Av3Tx7 0eVar5jRG3h3xqi83UXZRH9jlvwBPADc5unxyF5XbBW1hKNKz6JVh565s839Hgyv srQI7ESDT32G4IOnQ2VwUeHbiKFtQN3WX2VDNixJTk3fq/noyrwkNycSkoksbOTK dgwin2FWo9t6j2OBjN0OgTTW9jXPsw9iPS0XxCkt1R7d6j9w89HrxGGSCQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJ6pDsPTH0hW0uYdNSQ1o2yUze9aMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvbnFrT3c5TWZTRmJTNWgwMUpEV2piSlRONzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhHwgjAN BgkqhkiG9w0BAQsFAAOCAQEAwGbezagm/uXGNCg+H1TjQ4cNwghJUqdeIl9wIT3M 32w60gBU6lphV9+wQdc7nruhSBqz6jX5xZZ2mDt5SOIM54BpGTfGe3ttXUyz4i3v 7MLTZeTSxbyt815adLK1i+P91Y/Q1Y96KnSeLhBnzY004ZqjZCNtNXAQ6hs77dev mm8Gr1hBn54csBsbDcxBy0TRblsK5rUnj43c1S4lXRlVmXs9fJw755ca24MEQO5t vU9dDWMxl81TPE+AHsnY0eDboRKSQGTkJ/nESYvRXu9rUZQVC6ZS/ylqoRp8yyQa e39i4K4LQgl3Lkr4A+mlLbjUWs0BpKz4z5++LwtDoOxeAQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:20 2026 by rpki-client