This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/Qk5MpNdRL52qvitv9k0XvdvcapI.roa File: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (raw, json) Hash identifier: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E= Subject key identifier: 42:4E:4C:A4:D7:51:2F:9D:AA:BE:2B:6F:F6:4D:17:BD:DB:DC:6A:92 Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Certificate serial: 019B797E5C530BA13C840FF5E19D4716E969 Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/Qk5MpNdRL52qvitv9k0XvdvcapI.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60391 IP address blocks: 2001:67c:12ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5c:53:0b:a1:3c:84:0f:f5:e1:9d:47:16:e9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=424e4ca4d7512f9daabe2b6ff64d17bddbdc6a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:03:45:3d:a3:f1:04:7e:7f:46:df:75:6b: 58:75:b0:ad:5e:e8:14:cf:e3:a7:cb:49:78:0e:48: d1:9b:3d:53:9b:ad:58:82:af:7c:ea:1b:14:81:5d: 2e:9f:ed:a3:00:79:ce:07:31:98:7f:ca:d6:0b:fb: 5f:19:38:c4:97:5e:46:5d:bc:4e:0c:cf:e3:b3:c4: 76:fa:ee:1b:c4:fa:24:8f:77:2d:4f:ed:43:0b:c0: d4:8a:42:c3:6a:1d:de:ba:7c:07:aa:35:d7:e0:5f: c3:b0:fe:7a:e7:97:6d:f8:ad:32:8b:6d:ad:f5:81: 3f:86:98:be:dc:59:6c:ba:e6:ba:4e:a2:25:be:01: 03:48:32:00:dd:32:ce:d3:52:0b:81:b4:bf:61:c8: 64:6b:ea:2d:fc:18:7f:f1:24:48:8b:e5:88:4b:39: f9:80:4c:2e:c6:52:ac:75:e2:fb:4e:8d:cb:12:ae: 98:8b:a6:19:70:a4:40:57:bf:a4:ef:37:0f:a2:e3: c1:ce:3e:30:fe:10:f0:de:e1:fd:6a:d3:09:50:4c: 9c:a3:b4:38:ce:f6:c2:d8:17:b3:5c:7f:a3:cc:56: f9:ca:75:ac:35:06:45:39:8c:e6:4a:85:3a:2a:f4: 34:a7:62:64:9e:74:0f:01:d3:f4:0c:c7:c4:7a:d0: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:4C:A4:D7:51:2F:9D:AA:BE:2B:6F:F6:4D:17:BD:DB:DC:6A:92 X509v3 Authority Key Identifier: keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/Qk5MpNdRL52qvitv9k0XvdvcapI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:12ac::/48 Signature Algorithm: sha256WithRSAEncryption 49:77:6d:66:03:1a:e9:52:fc:54:b9:01:ac:a3:6b:78:e6:b6: ac:f9:b4:a4:87:50:20:21:2c:48:ce:0b:b5:ce:dc:7b:4d:90: 30:f9:93:11:de:80:fc:24:f1:14:3b:92:7e:d9:fc:6f:af:d2: 08:7a:e1:9e:1b:28:fb:7b:2c:ad:9d:75:ae:ea:bd:1e:f5:ba: cd:b1:f1:a7:af:2b:dd:33:ab:11:a7:4c:81:c9:8c:e8:e4:30: 12:16:f7:1c:fe:20:22:d8:2a:eb:5f:31:56:74:dc:89:3c:a0: 44:92:32:43:50:98:1a:20:33:53:d8:ac:ac:b1:bc:cf:65:ea: ba:93:b3:c5:30:91:3f:c8:8d:e3:89:bb:9a:ff:ce:a7:9c:24: b2:0e:b2:94:d1:39:6a:33:86:1d:b3:57:b8:c2:2d:a3:87:6f: 61:e4:d8:53:cd:50:77:64:0a:16:80:29:ff:8b:63:1a:63:0e: 8b:bd:c2:47:bc:b7:86:4d:26:d2:79:a5:19:08:e0:49:55:75: 71:92:08:58:c2:2a:0c:3e:a5:15:9d:23:1e:6c:55:04:87:dd: ab:eb:80:3d:94:07:58:b1:c9:55:f1:aa:36:6d:1b:28:7f:fe: 0e:3d:cb:e9:fa:b6:b6:bc:70:8d:a1:04:e6:9b:1f:9b:71:30: f7:91:e5:ca -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt5flxTC6E8hA/14Z1HFulpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5 MDMwNDEwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjRlNGNhNGQ3NTEyZjlkYWFiZTJiNmZmNjRkMTdiZGRiZGM2YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0IDRT2j8QR+f0bfdWtYdbCtXugU z+Ony0l4DkjRmz1Tm61Ygq986hsUgV0un+2jAHnOBzGYf8rWC/tfGTjEl15GXbxO DM/js8R2+u4bxPokj3ctT+1DC8DUikLDah3eunwHqjXX4F/DsP5655dt+K0yi22t 9YE/hpi+3Flsuua6TqIlvgEDSDIA3TLO01ILgbS/Ychka+ot/Bh/8SRIi+WISzn5 gEwuxlKsdeL7To3LEq6Yi6YZcKRAV7+k7zcPouPBzj4w/hDw3uH9atMJUEyco7Q4 zvbC2BezXH+jzFb5ynWsNQZFOYzmSoU6KvQ0p2JknnQPAdP0DMfEetBZPwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFEJOTKTXUS+dqr4rb/ZNF73b3GqSMB8GA1UdIwQY MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3 LWFhY2U4NzhiYWI2NS8xL1FrNU1wTmRSTDUycXZpdHY5azBYdmR2Y2FwSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3LWFhY2U4NzhiYWI2 NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ8 EqwwDQYJKoZIhvcNAQELBQADggEBAEl3bWYDGulS/FS5Aayja3jmtqz5tKSHUCAh LEjOC7XO3HtNkDD5kxHegPwk8RQ7kn7Z/G+v0gh64Z4bKPt7LK2dda7qvR71us2x 8aevK90zqxGnTIHJjOjkMBIW9xz+ICLYKutfMVZ03Ik8oESSMkNQmBogM1PYrKyx vM9l6rqTs8UwkT/IjeOJu5r/zqecJLIOspTROWozhh2zV7jCLaOHb2Hk2FPNUHdk ChaAKf+LYxpjDou9wke8t4ZNJtJ5pRkI4ElVdXGSCFjCKgw+pRWdIx5sVQSH3avr gD2UB1ixyVXxqjZtGyh//g49y+n6tra8cI2hBOabH5txMPeR5co= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:32 2026 by rpki-client