This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/qn15DF9dZdW2bdgJiT7rD5khHDM.roa File: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (raw, json) Hash identifier: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs= Subject key identifier: AA:7D:79:0C:5F:5D:65:D5:B6:6D:D8:09:89:3E:EB:0F:99:21:1C:33 Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d Certificate serial: 019B79EC1B8469CBE81A0E53BEB16E8554D2 Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/qn15DF9dZdW2bdgJiT7rD5khHDM.roa Signing time: Thu 01 Jan 2026 14:17:55 +0000 ROA not before: Thu 01 Jan 2026 14:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211922 IP address blocks: 2a10:5fc7::/48 maxlen: 48 2a10:5fc7:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1b:84:69:cb:e8:1a:0e:53:be:b1:6e:85:54:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa7d790c5f5d65d5b66dd809893eeb0f99211c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:75:85:82:a8:aa:b5:49:62:18:7e:84:fe:c1: c7:20:2c:42:ca:e4:90:dc:a9:55:b8:9c:d3:5d:a0: 1c:79:10:e0:38:38:b9:fc:eb:45:4e:29:f1:4f:61: 62:f4:22:7e:3c:55:23:fa:a1:26:f5:30:df:cc:f0: 82:83:15:68:2f:8c:8e:9f:a7:d8:70:15:b0:1e:5f: bc:87:13:58:d3:3e:f9:3e:a5:bf:49:4c:82:d9:07: 72:01:71:f9:b7:ce:06:71:e4:60:1e:5b:96:0f:52: 1c:44:c4:73:c7:94:b0:9b:b1:2d:b8:05:72:40:36: be:2b:04:48:9b:23:56:2a:23:4d:f4:59:7d:ff:6a: 75:ae:65:cd:49:5a:b7:a8:b0:9a:34:80:86:f6:89: 6c:d3:21:00:9f:01:8d:77:3b:06:70:a1:ef:2e:50: 5e:b7:c3:4e:bd:f6:dd:18:9e:6d:88:91:f3:46:17: d2:50:37:6f:20:89:cc:64:67:c4:e5:0f:1e:14:95: 92:52:38:85:ba:cc:ac:9a:0f:ee:86:11:e7:ca:c7: bc:2b:92:be:c2:b3:b3:84:ef:3f:09:a4:53:48:fa: 9c:95:f4:87:34:5e:d0:1c:34:d8:c1:33:85:30:c1: 79:80:38:14:e5:15:8a:50:d6:a9:9a:d2:f7:37:f5: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:79:0C:5F:5D:65:D5:B6:6D:D8:09:89:3E:EB:0F:99:21:1C:33 X509v3 Authority Key Identifier: keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/qn15DF9dZdW2bdgJiT7rD5khHDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:5fc7::/47 Signature Algorithm: sha256WithRSAEncryption b7:a1:7c:f8:6a:a8:da:d4:a5:98:8c:5a:d8:ac:6a:4f:fd:2f: e4:22:4a:14:fb:0f:08:41:5f:db:02:2e:97:88:10:7e:00:74: 5f:4d:fe:bb:d2:b8:0d:d8:b2:b5:75:b6:51:63:fe:16:6b:1a: 7d:73:c9:3a:0e:84:4b:b8:e3:3f:13:73:ac:11:31:6b:84:98: 64:94:61:f8:79:c1:ec:df:66:71:aa:89:c5:48:67:21:d1:23: 97:e4:7a:20:77:8c:87:5f:cd:61:d0:67:c1:ea:2d:ef:1e:f0: ee:4b:c0:c9:39:ca:bd:a9:59:f1:9f:98:0f:80:6c:a8:5e:3a: e5:ca:03:55:24:a8:1d:b5:50:53:0e:99:6c:a9:09:e6:8d:75: cd:26:d3:d6:35:df:d3:95:b5:69:64:aa:7b:a9:1b:b9:1c:9b: e0:77:51:c4:4c:6f:17:33:1a:88:ea:8b:49:4a:c9:0a:fb:3b: c6:09:92:92:97:73:34:7f:a1:86:9f:80:28:16:69:81:be:8d: b2:a3:5c:c3:cf:86:d6:6c:ef:53:47:f6:0d:71:86:ca:1c:10: 32:06:bd:c2:db:0f:8c:64:27:c2:af:c3:f3:94:7a:6c:00:20: 01:82:04:f1:43:c5:57:5d:4c:19:61:cd:a4:79:93:f5:13:e6: 5e:fe:3c:97 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57BuEacvoGg5TvrFuhVTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MTM5M2JkZmY2MDE0NjJhNTU1OTFkMjZhY2IzZDhjOTIz ZmYyNmQwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTdkNzkwYzVmNWQ2NWQ1YjY2ZGQ4MDk4OTNlZWIwZjk5MjExYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HWFgqiqtUliGH6E/sHHICxCyuSQ 3KlVuJzTXaAceRDgODi5/OtFTinxT2Fi9CJ+PFUj+qEm9TDfzPCCgxVoL4yOn6fY cBWwHl+8hxNY0z75PqW/SUyC2QdyAXH5t84GceRgHluWD1IcRMRzx5Swm7EtuAVy QDa+KwRImyNWKiNN9Fl9/2p1rmXNSVq3qLCaNICG9ols0yEAnwGNdzsGcKHvLlBe t8NOvfbdGJ5tiJHzRhfSUDdvIInMZGfE5Q8eFJWSUjiFusysmg/uhhHnyse8K5K+ wrOzhO8/CaRTSPqclfSHNF7QHDTYwTOFMMF5gDgU5RWKUNapmtL3N/WDswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKp9eQxfXWXVtm3YCYk+6w+ZIRwzMB8GA1UdIwQY MBaAFOgTk73/YBRipVWR0mrLPYySP/JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZDAzODQtODA1ZC00OGExLWJmMDkt M2MxNDYyMWVjZmM1LzEvcW4xNURGOWRaZFcyYmRnSmlUN3JENWtoSERNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iZDAzODQtODA1ZC00OGExLWJmMDktM2MxNDYyMWVjZmM1 LzEvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhBfxwAA MA0GCSqGSIb3DQEBCwUAA4IBAQC3oXz4aqja1KWYjFrYrGpP/S/kIkoU+w8IQV/b Ai6XiBB+AHRfTf670rgN2LK1dbZRY/4Waxp9c8k6DoRLuOM/E3OsETFrhJhklGH4 ecHs32ZxqonFSGch0SOX5Hogd4yHX81h0GfB6i3vHvDuS8DJOcq9qVnxn5gPgGyo XjrlygNVJKgdtVBTDplsqQnmjXXNJtPWNd/TlbVpZKp7qRu5HJvgd1HETG8XMxqI 6otJSskK+zvGCZKSl3M0f6GGn4AoFmmBvo2yo1zDz4bWbO9TR/YNcYbKHBAyBr3C 2w+MZCfCr8PzlHpsACABggTxQ8VXXUwZYc2keZP1E+Ze/jyX -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:43 2026 by rpki-client