This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/QW4p8Do_WlAhjY2txysFyPdrUZQ.roa File: QW4p8Do_WlAhjY2txysFyPdrUZQ.roa (raw, json) Hash identifier: nzmVTodbSFyYYzKzh3sISWCNfa/t5dMgpNM+0hwiTik= Subject key identifier: 41:6E:29:F0:3A:3F:5A:50:21:8D:8D:AD:C7:2B:05:C8:F7:6B:51:94 Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Certificate serial: 019B7C8094875063F0A45CCCD37A20A9A88E Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/QW4p8Do_WlAhjY2txysFyPdrUZQ.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214078 IP address blocks: 2001:30c0:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:94:87:50:63:f0:a4:5c:cc:d3:7a:20:a9:a8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=416e29f03a3f5a50218d8dadc72b05c8f76b5194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:28:30:4c:70:8b:67:7a:42:50:5b:37:fb: f9:fb:86:89:08:17:8e:35:c3:c5:ad:dc:61:40:ff: 89:5e:02:0f:b5:30:d2:ad:4d:41:53:ee:58:e7:61: 03:49:a1:e2:cd:e0:ee:73:85:a0:e4:05:de:e3:28: 0e:4e:28:ae:1e:72:7d:48:5b:d6:1f:30:ca:1a:c1: cc:0e:7c:57:57:be:54:47:d4:27:1e:e9:85:d0:a9: 8c:f8:bc:c0:16:03:2c:16:ff:8f:ef:fb:c0:74:38: ee:e5:6e:c7:8b:9d:81:e0:dc:d2:64:e6:85:30:8f: 12:e8:ba:70:da:56:a2:d3:be:cc:6a:c2:2e:3c:03: c8:93:cb:cd:7d:18:93:7f:4e:fd:36:f7:e2:32:c0: 83:28:42:f9:de:bd:50:09:5c:4f:2f:7c:16:48:c8: 8a:52:7c:1c:b7:1b:80:f2:2f:d8:3f:03:94:d8:6d: 53:3b:10:5f:9d:a1:a2:2a:ce:33:45:f8:e0:7a:a1: b2:b4:f0:71:d0:fd:91:91:fd:1f:d1:45:d9:e1:87: e0:df:8e:90:5d:a5:e1:a0:0d:6c:09:b4:78:77:0a: da:df:8e:ee:c9:a7:ba:c2:27:75:13:50:67:e9:29: 9c:56:29:0d:85:8f:4c:39:90:13:40:60:8d:5c:02: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6E:29:F0:3A:3F:5A:50:21:8D:8D:AD:C7:2B:05:C8:F7:6B:51:94 X509v3 Authority Key Identifier: keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/QW4p8Do_WlAhjY2txysFyPdrUZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:30c0:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 8d:c5:c9:1b:89:cc:16:25:ad:24:63:c6:70:c9:f3:97:16:f6: 7e:70:6c:bb:78:d1:73:3c:dc:90:29:b5:b4:1f:a4:58:22:d8: 2c:c9:4c:d1:fa:8d:5b:f2:e4:27:2a:72:8e:b0:8f:86:12:7f: ba:70:83:74:4c:79:01:f6:6d:c8:e2:c0:ea:41:16:3d:cf:be: 06:a9:75:6a:e3:08:82:fe:2f:57:54:df:61:d4:62:b3:13:14: fe:87:89:0f:e3:17:ed:8d:f3:18:51:73:df:27:2f:b9:b3:f4: 51:1e:72:fe:13:8a:7e:ff:09:94:5d:4c:6c:5d:17:f8:eb:b0: a5:15:c5:9c:45:01:3e:63:05:a4:6b:c5:f1:4f:1e:cc:de:d7: e1:5b:73:9f:42:8d:9d:46:2f:b6:31:99:45:cb:21:38:1c:41: da:0c:bc:4f:9b:c3:f4:29:37:a3:96:ab:d3:d4:41:60:3c:a6: a8:7b:5b:7b:b5:2f:d1:fe:e7:23:c7:c4:cf:12:ca:2a:df:85: 39:2b:14:3f:6f:a2:67:db:d3:1c:30:fa:d7:61:72:dc:91:7c: 7b:0e:e6:c1:4c:b5:5f:da:23:99:34:59:31:a4:6a:24:ed:2b: 54:0d:c8:bf:c8:77:45:2d:85:11:15:16:8b:91:25:c3:0a:2a: 6c:97:aa:90 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gJSHUGPwpFzM03ogqaiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi YjllODEwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTZlMjlmMDNhM2Y1YTUwMjE4ZDhkYWRjNzJiMDVjOGY3NmI1MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RMoMExwi2d6QlBbN/v5+4aJCBeO NcPFrdxhQP+JXgIPtTDSrU1BU+5Y52EDSaHizeDuc4Wg5AXe4ygOTiiuHnJ9SFvW HzDKGsHMDnxXV75UR9QnHumF0KmM+LzAFgMsFv+P7/vAdDju5W7Hi52B4NzSZOaF MI8S6Lpw2lai077MasIuPAPIk8vNfRiTf079NvfiMsCDKEL53r1QCVxPL3wWSMiK UnwctxuA8i/YPwOU2G1TOxBfnaGiKs4zRfjgeqGytPBx0P2Rkf0f0UXZ4Yfg346Q XaXhoA1sCbR4dwra347uyae6wid1E1Bn6SmcVikNhY9MOZATQGCNXALDDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEFuKfA6P1pQIY2NrccrBcj3a1GUMB8GA1UdIwQY MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct YjM0ZDY0OWNmYjdiLzEvUVc0cDhEb19XbEFoalkydHh5c0Z5UGRyVVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEwwP/+ MA0GCSqGSIb3DQEBCwUAA4IBAQCNxckbicwWJa0kY8ZwyfOXFvZ+cGy7eNFzPNyQ KbW0H6RYItgsyUzR+o1b8uQnKnKOsI+GEn+6cIN0THkB9m3I4sDqQRY9z74GqXVq 4wiC/i9XVN9h1GKzExT+h4kP4xftjfMYUXPfJy+5s/RRHnL+E4p+/wmUXUxsXRf4 67ClFcWcRQE+YwWka8XxTx7M3tfhW3OfQo2dRi+2MZlFyyE4HEHaDLxPm8P0KTej lqvT1EFgPKaoe1t7tS/R/ucjx8TPEsoq34U5KxQ/b6Jn29McMPrXYXLckXx7DubB TLVf2iOZNFkxpGok7StUDci/yHdFLYURFRaLkSXDCipsl6qQ -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:10 2026 by rpki-client