This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qdAA7q69Q1-iHrB71QL2uIwgL4w.roa File: qdAA7q69Q1-iHrB71QL2uIwgL4w.roa (raw, json) Hash identifier: iSApU3MrBQxUv9YTKIjLYJmrBm6GZCpJuQa46wrbtrQ= Subject key identifier: A9:D0:00:EE:AE:BD:43:5F:A2:1E:B0:7B:D5:02:F6:B8:8C:20:2F:8C Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019A93CD50CFB153CB72018CD0521D032AC6 Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qdAA7q69Q1-iHrB71QL2uIwgL4w.roa Signing time: Mon 17 Nov 2025 21:51:37 +0000 ROA not before: Mon 17 Nov 2025 21:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215486 IP address blocks: 2a0c:e304:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:cd:50:cf:b1:53:cb:72:01:8c:d0:52:1d:03:2a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Nov 17 21:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9d000eeaebd435fa21eb07bd502f6b88c202f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:17:03:4d:3c:6e:ee:53:27:8a:cd:12:fc: 1b:59:20:f5:21:1b:9a:d3:a5:17:f4:dc:78:37:9c: 8d:c8:6d:07:25:90:ba:8c:88:69:26:68:86:be:13: 5e:5e:9e:bd:e9:61:1e:d7:25:5f:5e:fb:f1:7a:af: de:7a:01:60:a7:01:cb:c2:67:29:fd:73:e3:72:89: 65:e3:c9:2a:de:cb:4e:c7:f8:af:31:33:37:91:05: 5c:9f:5d:b7:0b:01:75:2d:1f:5f:8a:f9:7a:93:4e: ed:ac:f8:95:df:48:c7:58:c9:c9:64:12:80:f7:40: 2d:e8:b1:03:ee:ae:f0:d8:12:1d:65:98:1d:01:1c: 46:cf:1d:ea:17:76:39:f5:d9:fa:9b:7d:99:83:e5: 3a:7c:16:af:ed:d9:58:f2:42:ab:55:1b:8c:3e:96: 6b:33:de:da:bb:c3:de:09:19:20:12:bf:a7:06:38: ac:91:75:4a:43:4c:12:a5:c8:5a:7c:d9:2c:a5:e0: 36:b0:ea:de:f8:81:81:02:46:8b:c7:88:13:ba:42: 1b:ba:e5:64:11:95:07:48:19:1c:50:29:98:d8:3b: 63:1b:4d:59:3d:e3:46:db:e4:77:b2:29:f6:c2:a8: d4:5c:4f:5b:d8:26:b0:95:8d:5d:7f:88:f3:cf:ef: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D0:00:EE:AE:BD:43:5F:A2:1E:B0:7B:D5:02:F6:B8:8C:20:2F:8C X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qdAA7q69Q1-iHrB71QL2uIwgL4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:e304:3::/48 Signature Algorithm: sha256WithRSAEncryption 7f:2b:63:a6:8a:49:91:90:83:4c:cd:fb:d3:e2:13:a5:61:5f: 8a:82:80:ef:7b:f1:7d:5a:4a:6c:a3:6e:1b:67:b1:db:3d:5a: 00:7d:f2:91:3f:8d:e1:f7:e5:c6:2e:eb:d3:d4:40:e3:74:6d: 0c:f0:67:dd:60:75:d5:a9:5a:e8:67:99:75:e8:af:bd:f3:eb: a1:73:ce:a0:2f:74:e0:d9:94:ad:3a:a6:77:b0:0f:22:97:1f: 1b:c6:d9:8f:1b:e4:41:a0:ee:0c:97:34:93:dc:17:cf:9a:73: 11:97:5c:b9:a8:a8:19:b9:bd:21:35:dd:52:cd:f3:48:57:54: dd:51:d0:e1:f6:e2:50:69:24:e1:9f:20:1f:78:50:57:75:00: c5:07:7f:fb:76:14:21:64:cc:fb:1c:4a:e6:d7:c2:15:8a:53: 06:18:40:5e:fb:60:fc:d9:51:2e:f0:dd:32:12:63:6c:1b:bd: cb:92:60:ee:24:80:14:5e:39:a2:24:73:0d:3a:02:43:4b:6a: 00:24:e3:b2:3b:1c:3b:9e:ba:3e:89:e2:72:73:68:0a:7d:12: b6:41:f8:b8:f1:5d:6d:a1:31:41:58:8b:db:be:34:06:21:ee: 99:f1:2f:82:35:12:f6:5b:14:83:52:29:95:e6:d5:8c:a7:c0: 42:18:a9:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqTzVDPsVPLcgGM0FIdAyrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjUxMTE3MjE1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWQwMDBlZWFlYmQ0MzVmYTIxZWIwN2JkNTAyZjZiODhjMjAyZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD0XA008bu5TJ4rNEvwbWSD1IRua 06UX9Nx4N5yNyG0HJZC6jIhpJmiGvhNeXp696WEe1yVfXvvxeq/eegFgpwHLwmcp /XPjcoll48kq3stOx/ivMTM3kQVcn123CwF1LR9fivl6k07trPiV30jHWMnJZBKA 90At6LED7q7w2BIdZZgdARxGzx3qF3Y59dn6m32Zg+U6fBav7dlY8kKrVRuMPpZr M97au8PeCRkgEr+nBjiskXVKQ0wSpchafNkspeA2sOre+IGBAkaLx4gTukIbuuVk EZUHSBkcUCmY2DtjG01ZPeNG2+R3sin2wqjUXE9b2CawlY1df4jzz++jywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKnQAO6uvUNfoh6we9UC9riMIC+MMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvcWRBQTdxNjlRMS1pSHJCNzFRTDJ1SXdnTDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgzjBAAD MA0GCSqGSIb3DQEBCwUAA4IBAQB/K2OmikmRkINMzfvT4hOlYV+KgoDve/F9Wkps o24bZ7HbPVoAffKRP43h9+XGLuvT1EDjdG0M8GfdYHXVqVroZ5l16K+98+uhc86g L3Tg2ZStOqZ3sA8ilx8bxtmPG+RBoO4MlzST3BfPmnMRl1y5qKgZub0hNd1SzfNI V1TdUdDh9uJQaSThnyAfeFBXdQDFB3/7dhQhZMz7HErm18IVilMGGEBe+2D82VEu 8N0yEmNsG73LkmDuJIAUXjmiJHMNOgJDS2oAJOOyOxw7nro+ieJyc2gKfRK2Qfi4 8V1toTFBWIvbvjQGIe6Z8S+CNRL2WxSDUimV5tWMp8BCGKmF -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:29 2025 by rpki-client