This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/qlaxC5IjGWh-sjlOO0aWlfo9EJo.roa File: qlaxC5IjGWh-sjlOO0aWlfo9EJo.roa (raw, json) Hash identifier: tswrwQr+o6+vubHC/2IG1+zCegkDLGFgHNmgJCcToQI= Subject key identifier: AA:56:B1:0B:92:23:19:68:7E:B2:39:4E:3B:46:96:95:FA:3D:10:9A Certificate issuer: /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590 Certificate serial: 019AB2D6D603098B2C1DCB4DBD2528F997D8 Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/qlaxC5IjGWh-sjlOO0aWlfo9EJo.roa Signing time: Sun 23 Nov 2025 22:30:15 +0000 ROA not before: Sun 23 Nov 2025 22:30:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215844 IP address blocks: 2001:678:9d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b2:d6:d6:03:09:8b:2c:1d:cb:4d:bd:25:28:f9:97:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590 Validity Not Before: Nov 23 22:30:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa56b10b922319687eb2394e3b469695fa3d109a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:92:45:98:37:a3:d9:25:38:f6:9e:8a:9c: 95:86:50:19:b9:6a:20:64:dd:27:7c:9c:f3:22:f0: a5:0d:69:c8:62:2a:be:52:e6:7f:9c:eb:20:6b:e1: 72:91:8f:3a:1f:6c:1b:57:5c:8e:25:cf:a6:0e:fd: 22:42:8b:8b:45:42:18:51:8a:39:74:47:94:b8:a8: ab:af:2f:3b:bc:fc:2e:da:f8:1e:e2:9d:90:49:5b: a8:b7:7d:22:47:a0:67:3c:bb:43:ef:0c:ee:c0:ba: 21:c5:86:96:70:1c:5a:9e:1a:b6:59:10:5a:0a:6e: b8:e5:4f:7d:70:28:61:c7:af:20:3c:1e:aa:35:75: 82:d3:ff:41:31:91:07:80:80:b3:b7:6c:c6:a3:d4: 6d:cf:01:9c:fa:78:1a:3d:a5:5a:77:aa:3d:fa:89: 00:46:b2:22:c8:99:8f:47:72:d9:01:e7:dc:11:f1: 8d:ea:99:0d:26:4c:2c:7f:83:bd:53:13:74:5d:cd: 6b:7c:04:4a:87:d9:ab:63:f1:3d:07:d5:a7:40:67: b3:ab:ca:65:6b:c6:2c:7a:7b:ad:a2:d2:ed:8a:12: d0:d9:3d:e5:dc:ae:f3:bc:bc:93:57:61:6d:06:54: 28:a4:3c:43:ca:35:f2:f5:0e:a0:af:9c:75:95:fb: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:56:B1:0B:92:23:19:68:7E:B2:39:4E:3B:46:96:95:FA:3D:10:9A X509v3 Authority Key Identifier: keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/qlaxC5IjGWh-sjlOO0aWlfo9EJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:9d8::/48 Signature Algorithm: sha256WithRSAEncryption 62:52:11:a4:d5:ed:87:06:97:27:fb:ee:c0:cc:e9:f9:3a:20: 88:a7:ac:19:27:5e:0d:9e:be:13:7f:0f:dd:66:df:29:c1:4d: e5:8c:49:10:40:34:28:f6:b1:7e:c2:70:43:d5:7e:10:36:79: 9d:5d:90:47:1d:0b:bb:6e:7a:e6:f3:99:c6:21:33:6e:ff:ee: 5a:1b:a6:c5:15:41:41:d7:da:99:ae:7b:ce:f6:9c:69:a9:b3: 25:c5:91:f0:e2:b6:c1:4d:b4:79:9a:c7:4d:a6:5b:06:1f:ed: 04:a1:51:1f:59:bd:27:a1:2c:af:27:46:b2:a7:90:d5:37:0f: 1f:d8:8a:ca:f3:30:74:42:b6:38:86:14:23:ce:e5:9d:d6:0e: 4f:a8:41:ee:cd:ce:78:f6:ac:08:f7:a3:d2:59:d1:37:84:b9: 8b:4c:d3:89:f6:76:13:bd:50:79:4f:1f:01:26:15:83:0f:19: 88:3c:16:e4:6d:ec:4e:7b:8e:e8:69:ce:bb:d3:cc:20:00:34: e2:a4:3c:56:d6:18:de:a3:65:3f:87:1b:a9:fb:a5:0c:e5:63: ef:48:8c:35:7d:aa:54:be:4b:9e:4e:94:a5:d3:a6:9f:2f:e1: 69:07:2a:c5:4e:6a:8b:3a:b8:69:cf:cb:10:b0:c0:99:a3:7f: bd:31:e6:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqy1tYDCYssHctNvSUo+ZfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNGJmZTkyZGUxMGU2NjBkZGY0NWNjMmQxZjVmZmI2MzZl ZjM1OTAwHhcNMjUxMTIzMjIzMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTU2YjEwYjkyMjMxOTY4N2ViMjM5NGUzYjQ2OTY5NWZhM2QxMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF2SRZg3o9klOPaeipyVhlAZuWog ZN0nfJzzIvClDWnIYiq+UuZ/nOsga+FykY86H2wbV1yOJc+mDv0iQouLRUIYUYo5 dEeUuKirry87vPwu2vge4p2QSVuot30iR6BnPLtD7wzuwLohxYaWcBxanhq2WRBa Cm645U99cChhx68gPB6qNXWC0/9BMZEHgICzt2zGo9RtzwGc+ngaPaVad6o9+okA RrIiyJmPR3LZAefcEfGN6pkNJkwsf4O9UxN0Xc1rfARKh9mrY/E9B9WnQGezq8pl a8YsenutotLtihLQ2T3l3K7zvLyTV2FtBlQopDxDyjXy9Q6gr5x1lfvNSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKpWsQuSIxlofrI5TjtGlpX6PRCaMB8GA1UdIwQY MBaAFD9L/pLeEOZg3fRcwtH1/7Y27zWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2Yt Y2U2NDgyZDBmMWI2LzEvcWxheEM1SWpHV2gtc2psT08wYVdsZm85RUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2YtY2U2NDgyZDBmMWI2 LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAnY MA0GCSqGSIb3DQEBCwUAA4IBAQBiUhGk1e2HBpcn++7AzOn5OiCIp6wZJ14Nnr4T fw/dZt8pwU3ljEkQQDQo9rF+wnBD1X4QNnmdXZBHHQu7bnrm85nGITNu/+5aG6bF FUFB19qZrnvO9pxpqbMlxZHw4rbBTbR5msdNplsGH+0EoVEfWb0noSyvJ0ayp5DV Nw8f2IrK8zB0QrY4hhQjzuWd1g5PqEHuzc549qwI96PSWdE3hLmLTNOJ9nYTvVB5 Tx8BJhWDDxmIPBbkbexOe47oac6708wgADTipDxW1hjeo2U/hxup+6UM5WPvSIw1 fapUvkueTpSl06afL+FpByrFTmqLOrhpz8sQsMCZo3+9Meam -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:21 2025 by rpki-client