This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/qIswqouMvF4QvtgJt7puZ1DpXGM.roa File: qIswqouMvF4QvtgJt7puZ1DpXGM.roa (raw, json) Hash identifier: yf1LTtYPfTtITafQ3QHjAd2ny6/lzW+4z8DKP7fNkrw= Subject key identifier: A8:8B:30:AA:8B:8C:BC:5E:10:BE:D8:09:B7:BA:6E:67:50:E9:5C:63 Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Certificate serial: 019B7EA4401E91FA4C98E7AA855A3D2570BB Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/qIswqouMvF4QvtgJt7puZ1DpXGM.roa Signing time: Fri 02 Jan 2026 12:17:32 +0000 ROA not before: Fri 02 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209432 IP address blocks: 2a0e:cc0::/29 maxlen: 29 2a0e:cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:40:1e:91:fa:4c:98:e7:aa:85:5a:3d:25:70:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Validity Not Before: Jan 2 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a88b30aa8b8cbc5e10bed809b7ba6e6750e95c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:9d:4c:38:00:4b:47:69:15:da:d0:7d:90: eb:2c:88:0d:ca:96:74:b4:12:c1:d7:73:8a:2f:b3: c5:8d:bd:7f:88:a3:3b:63:bc:b8:ad:25:5e:55:c1: e9:54:80:2d:9e:6a:87:fd:7b:6e:72:03:cb:ca:d1: 7e:62:30:d2:88:77:e7:6c:85:86:3f:1f:23:aa:7b: 95:14:1c:7a:0a:dc:f9:09:30:15:87:6c:74:f1:ba: ce:1f:bd:0b:72:6a:c8:96:88:2a:ee:88:64:02:4b: 59:fe:5b:6d:e3:6e:56:c5:d8:62:39:c9:e1:48:85: ee:3f:53:36:03:e2:e5:27:e9:90:51:4a:4b:9e:8c: 27:ce:9f:14:c3:93:55:a9:35:a2:34:ce:a5:84:6c: af:4b:ca:f4:a8:d7:9e:6a:76:68:5f:53:f7:c7:1d: b9:14:e6:c7:03:4a:d7:59:36:94:3d:bd:86:07:31: 23:53:72:73:53:e4:1a:11:09:b9:19:27:f5:6d:f3: 35:e9:c4:81:b2:9f:1d:76:d3:1c:af:b0:60:c8:3d: 48:0f:32:14:7c:6a:11:84:e4:f2:df:4c:85:0c:26: 93:5b:37:24:ef:3e:24:b7:16:bc:12:80:98:d2:d4: 67:d1:10:43:1c:59:1e:74:24:09:9e:02:99:9d:89: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8B:30:AA:8B:8C:BC:5E:10:BE:D8:09:B7:BA:6E:67:50:E9:5C:63 X509v3 Authority Key Identifier: keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/qIswqouMvF4QvtgJt7puZ1DpXGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:cc0::/29 Signature Algorithm: sha256WithRSAEncryption 8f:12:28:a6:ab:29:95:c0:15:90:06:4e:be:53:29:a8:49:09: 33:d9:56:0e:ae:48:77:cc:eb:93:31:3f:da:d1:7a:cc:82:8e: 54:dd:fd:f8:9a:0f:03:59:4a:2c:97:92:53:9f:0f:62:7b:0f: 72:e2:47:91:60:74:c1:1c:79:99:b3:33:f0:87:f2:5f:fb:3b: 24:b3:3b:59:67:90:d9:46:06:e8:2c:fd:d1:c6:96:44:c2:49: 93:35:44:27:e0:61:47:85:0d:3d:42:ac:76:43:67:2a:5d:93: 49:15:42:8e:a9:3d:f3:76:00:f1:0e:37:26:a3:b2:2f:18:0b: 39:e2:f4:49:9c:ee:77:b6:41:55:a1:aa:45:8e:b1:8a:2c:50: c8:c0:50:3f:97:09:9f:9a:30:70:a4:e6:35:cb:90:d7:d6:5c: 99:cc:af:45:0f:79:9d:d3:b6:ce:f8:e2:ed:e0:9a:69:3a:0d: b9:de:60:d6:20:03:4a:47:fb:29:9b:a0:48:6d:e8:1d:5a:4c: b8:0f:05:eb:92:fa:33:ca:38:a5:ac:34:b7:d5:7e:fb:60:38: d6:cb:4d:62:49:6e:53:53:07:4d:33:5f:86:1d:91:76:ff:cf: c2:5e:43:30:37:5b:2a:0a:64:a5:fb:de:43:36:4a:ac:99:02: 8a:59:c8:53 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pEAekfpMmOeqhVo9JXC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWM1NGJlMWRhN2U3MzhlM2M5NmZmYjQxZjFlYTM5MDBh NjdiZTgwHhcNMjYwMTAyMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODhiMzBhYThiOGNiYzVlMTBiZWQ4MDliN2JhNmU2NzUwZTk1YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZSdTDgAS0dpFdrQfZDrLIgNypZ0 tBLB13OKL7PFjb1/iKM7Y7y4rSVeVcHpVIAtnmqH/XtucgPLytF+YjDSiHfnbIWG Px8jqnuVFBx6Ctz5CTAVh2x08brOH70LcmrIlogq7ohkAktZ/ltt425WxdhiOcnh SIXuP1M2A+LlJ+mQUUpLnownzp8Uw5NVqTWiNM6lhGyvS8r0qNeeanZoX1P3xx25 FObHA0rXWTaUPb2GBzEjU3JzU+QaEQm5GSf1bfM16cSBsp8ddtMcr7BgyD1IDzIU fGoRhOTy30yFDCaTWzck7z4ktxa8EoCY0tRn0RBDHFkedCQJngKZnYmOCQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKiLMKqLjLxeEL7YCbe6bmdQ6VxjMB8GA1UdIwQY MBaAFEKcVL4dp+c448lv+0Hx6jkApnvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEt M2Q4NTg0Y2Y1M2ZlLzEvcUlzd3FvdU12RjRRdnRnSnQ3cHVaMURwWEdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEtM2Q4NTg0Y2Y1M2Zl LzEvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg4MwDAN BgkqhkiG9w0BAQsFAAOCAQEAjxIopqsplcAVkAZOvlMpqEkJM9lWDq5Id8zrkzE/ 2tF6zIKOVN39+JoPA1lKLJeSU58PYnsPcuJHkWB0wRx5mbMz8IfyX/s7JLM7WWeQ 2UYG6Cz90caWRMJJkzVEJ+BhR4UNPUKsdkNnKl2TSRVCjqk983YA8Q43JqOyLxgL OeL0SZzud7ZBVaGqRY6xiixQyMBQP5cJn5owcKTmNcuQ19ZcmcyvRQ95ndO2zvji 7eCaaToNud5g1iADSkf7KZugSG3oHVpMuA8F65L6M8o4paw0t9V++2A41stNYklu U1MHTTNfhh2Rdv/Pwl5DMDdbKgpkpfveQzZKrJkCilnIUw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:54 2026 by rpki-client