This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Q6_zaBmqZBskegMQhwlY3OXuSCU.roa File: Q6_zaBmqZBskegMQhwlY3OXuSCU.roa (raw, json) Hash identifier: NVQgTYuSY5K5LPfNquH9nTGQ+GPkuGtDzXs/gNoG3pM= Subject key identifier: 43:AF:F3:68:19:AA:64:1B:24:7A:03:10:87:09:58:DC:E5:EE:48:25 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14FF007D432775D3FABC0E53768F36 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Q6_zaBmqZBskegMQhwlY3OXuSCU.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58224 IP address blocks: 81.12.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ff:00:7d:43:27:75:d3:fa:bc:0e:53:76:8f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43aff36819aa641b247a0310870958dce5ee4825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:f5:b8:e4:89:f4:b6:78:75:8b:09:ca:78: f8:e6:b4:b7:17:ca:59:90:b1:a9:96:3b:bf:74:87: 69:88:dc:2e:48:9e:fe:4e:f4:fc:2d:1e:0e:ee:f3: c3:46:ff:9f:13:aa:8b:19:31:78:00:65:0a:39:86: a0:5c:78:6e:9d:16:92:5b:91:7f:2d:13:19:12:56: b0:d6:d0:7c:c2:b6:99:1c:bc:cb:b8:2a:a6:19:0a: cc:3e:4a:66:f1:2e:e1:60:bf:11:28:fa:f6:ff:73: 80:d9:2b:d2:8f:3b:d6:6a:1e:0f:bc:a9:53:0d:4f: 55:8d:72:1c:19:8d:c9:d2:0c:c8:1d:e2:92:94:ee: 19:2e:10:e2:52:ee:01:22:10:30:dc:af:ad:28:6e: 07:4c:2b:c1:89:91:8c:6f:c5:37:11:a0:9e:92:cf: 35:ae:95:b4:07:f1:fa:be:89:93:4d:51:91:67:3b: 05:41:1a:3b:38:b7:44:d6:16:b1:ee:97:d5:1d:c3: db:05:11:c7:8f:e3:a5:31:39:7c:ba:3f:0a:20:e8: 39:63:05:7b:a9:c3:ab:b5:b2:ae:b3:80:03:32:18: b7:da:62:b9:93:e4:5f:1b:d0:b1:79:38:75:bb:4f: 70:d7:20:53:ff:37:99:98:61:fc:0e:c0:39:bf:50: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AF:F3:68:19:AA:64:1B:24:7A:03:10:87:09:58:DC:E5:EE:48:25 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Q6_zaBmqZBskegMQhwlY3OXuSCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:1d:d3:04:38:8f:99:80:9e:2f:8d:43:1b:3b:1b:7c:3b:85: df:f8:a2:b9:42:d7:8f:b3:d6:7a:4c:2f:bf:9d:39:c8:c1:63: 44:b5:9a:99:8d:fc:7a:b6:66:e2:26:71:1d:2c:ae:8e:ab:23: f9:bc:b9:63:c1:bd:fc:06:1c:19:df:1c:a5:ac:c3:a6:b0:ac: 23:28:e6:dd:31:2f:5b:d8:28:05:5e:8b:56:a2:6a:1e:ea:96: 0d:ec:d1:e4:59:53:86:bf:7b:9e:5f:34:8d:e2:12:66:59:fd: 2f:89:ba:f9:d8:96:d9:38:1b:45:59:ce:17:f7:a1:85:32:11: 05:db:40:26:37:d5:8f:81:22:e2:f7:f4:06:8c:5b:e2:a1:84: e6:81:ba:a9:56:52:da:aa:8b:56:1f:56:3f:50:23:c6:23:98: c9:b1:0b:06:a3:25:1a:8e:0b:ea:43:f4:cf:75:e4:24:02:aa: 4e:56:f9:c6:41:66:78:da:54:7a:24:4a:41:f9:c6:21:3c:74: 7f:99:af:0b:e4:26:36:48:7d:d0:71:a1:ef:60:96:5c:86:42: ce:02:73:99:5e:27:88:7a:60:08:a7:47:ef:ba:35:55:b8:6c: c8:32:5f:42:f4:45:e4:d3:49:02:10:39:29:b2:26:57:55:c0: e3:8c:eb:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FP8AfUMnddP6vA5Tdo82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2FmZjM2ODE5YWE2NDFiMjQ3YTAzMTA4NzA5NThkY2U1ZWU0ODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw471uOSJ9LZ4dYsJynj45rS3F8pZ kLGplju/dIdpiNwuSJ7+TvT8LR4O7vPDRv+fE6qLGTF4AGUKOYagXHhunRaSW5F/ LRMZElaw1tB8wraZHLzLuCqmGQrMPkpm8S7hYL8RKPr2/3OA2SvSjzvWah4PvKlT DU9VjXIcGY3J0gzIHeKSlO4ZLhDiUu4BIhAw3K+tKG4HTCvBiZGMb8U3EaCeks81 rpW0B/H6vomTTVGRZzsFQRo7OLdE1hax7pfVHcPbBRHHj+OlMTl8uj8KIOg5YwV7 qcOrtbKus4ADMhi32mK5k+RfG9CxeTh1u09w1yBT/zeZmGH8DsA5v1DHLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOv82gZqmQbJHoDEIcJWNzl7kglMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvUTZfemFCbXFaQnNrZWdNUWh3bFkzT1h1U0NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQwcMA0G CSqGSIb3DQEBCwUAA4IBAQBdHdMEOI+ZgJ4vjUMbOxt8O4Xf+KK5QtePs9Z6TC+/ nTnIwWNEtZqZjfx6tmbiJnEdLK6OqyP5vLljwb38BhwZ3xylrMOmsKwjKObdMS9b 2CgFXotWomoe6pYN7NHkWVOGv3ueXzSN4hJmWf0vibr52JbZOBtFWc4X96GFMhEF 20AmN9WPgSLi9/QGjFvioYTmgbqpVlLaqotWH1Y/UCPGI5jJsQsGoyUajgvqQ/TP deQkAqpOVvnGQWZ42lR6JEpB+cYhPHR/ma8L5CY2SH3QcaHvYJZchkLOAnOZXieI emAIp0fvujVVuGzIMl9C9EXk00kCEDkpsiZXVcDjjOsc -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:44 2026 by rpki-client