This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QWpALpd_nd2R2VBvknhyRKKyzDo.roa File: QWpALpd_nd2R2VBvknhyRKKyzDo.roa (raw, json) Hash identifier: mOFvTfshn+3UD6LG9h1j0mZGsybrziqkEpUOAtgkBg0= Subject key identifier: 41:6A:40:2E:97:7F:9D:DD:91:D9:50:6F:92:78:72:44:A2:B2:CC:3A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFFF63F51379CE8BE181E376FFF99 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QWpALpd_nd2R2VBvknhyRKKyzDo.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205152 IP address blocks: 2a0e:b107:e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:f6:3f:51:37:9c:e8:be:18:1e:37:6f:ff:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=416a402e977f9ddd91d9506f92787244a2b2cc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:3b:a5:80:22:7b:4d:c7:29:64:58:22:ac: b3:17:96:c4:77:8a:a9:74:19:ff:94:f0:6a:96:26: bd:42:1e:8a:95:b7:cf:f8:09:98:1b:fc:7e:15:ed: 73:02:3e:ec:e3:8c:fc:6a:cd:5b:c2:91:7b:5d:f9: 6b:a0:d8:21:7a:96:6f:c2:cb:39:ba:c8:4c:b8:f2: 69:b5:23:79:64:a4:ee:0a:0c:d8:4c:a4:46:73:da: c5:32:b8:ce:59:58:c8:39:0f:ff:5c:db:4a:50:aa: 4a:59:55:7e:f9:0e:a9:2a:bf:38:71:dc:e7:49:07: b8:6b:8c:4f:f3:2a:af:74:12:25:02:c7:21:56:ee: c9:e2:21:40:48:05:61:5b:9c:7d:ef:0d:24:a5:f7: 29:27:1e:67:1b:ed:f2:a9:56:b8:da:0f:3a:69:0b: ba:4d:52:bf:a2:81:e7:81:f1:56:fc:76:e5:9c:29: 35:d5:76:29:a2:c5:cb:5b:8b:ea:40:91:61:79:d7: a2:47:8f:43:96:6d:81:a7:d3:32:44:ca:f8:74:f4: 38:61:f8:47:21:6a:ec:58:0b:39:6d:ed:db:74:a8: a9:6e:e4:8c:a0:f3:44:06:8b:5e:db:17:bb:de:53: cc:e2:a0:f9:1e:d8:09:9a:d5:57:48:e5:33:47:d0: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6A:40:2E:97:7F:9D:DD:91:D9:50:6F:92:78:72:44:A2:B2:CC:3A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QWpALpd_nd2R2VBvknhyRKKyzDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:e0::/44 Signature Algorithm: sha256WithRSAEncryption 16:73:1e:14:da:25:eb:7f:0b:ad:25:d1:83:85:cf:db:ee:64: 18:3f:05:d0:0d:62:3c:bb:ce:3d:46:f1:93:7c:fb:5a:38:86: 6e:c1:76:cd:e2:67:88:ea:52:83:45:3d:03:d2:3f:06:d0:dc: ec:4b:3f:66:a5:99:36:6f:71:b5:55:3a:48:18:72:fb:a6:cc: 85:78:85:88:8b:82:4f:2b:b0:13:52:34:71:33:23:5b:f4:1d: 41:a0:93:51:56:95:89:94:37:c0:e2:c9:68:cd:b3:64:c2:12: 16:78:9b:82:04:67:e0:fb:a3:2e:4c:a4:97:88:08:d7:05:c6: ff:35:e8:bc:f4:83:9f:75:93:90:3b:16:e0:cb:eb:f1:7a:1f: ca:9e:0e:95:bc:1a:29:31:77:49:94:63:ae:21:73:fe:21:8b: 16:53:bd:af:1f:e7:a1:16:15:a4:68:6a:25:62:22:31:82:e1: f7:75:a2:11:be:48:52:8f:89:b3:38:04:b9:f7:12:c6:13:ad: 69:a9:73:eb:c5:bc:76:5c:a8:9d:d1:f1:95:03:b7:0c:2b:16: df:53:18:33:a6:b6:bd:6e:28:4d:1d:b5:1f:f7:93:3d:4b:f2: c5:89:05:75:65:da:7b:6b:db:a3:a3:ed:56:ce:7c:50:d1:9c: 4d:8b:5f:7f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XP/2P1E3nOi+GB43b/+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTZhNDAyZTk3N2Y5ZGRkOTFkOTUwNmY5Mjc4NzI0NGEyYjJjYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4M7pYAie03HKWRYIqyzF5bEd4qp dBn/lPBqlia9Qh6KlbfP+AmYG/x+Fe1zAj7s44z8as1bwpF7XflroNghepZvwss5 ushMuPJptSN5ZKTuCgzYTKRGc9rFMrjOWVjIOQ//XNtKUKpKWVV++Q6pKr84cdzn SQe4a4xP8yqvdBIlAschVu7J4iFASAVhW5x97w0kpfcpJx5nG+3yqVa42g86aQu6 TVK/ooHngfFW/HblnCk11XYposXLW4vqQJFhedeiR49Dlm2Bp9MyRMr4dPQ4YfhH IWrsWAs5be3bdKipbuSMoPNEBote2xe73lPM4qD5HtgJmtVXSOUzR9C0AwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEFqQC6Xf53dkdlQb5J4ckSissw6MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUVdwQUxwZF9uZDJSMlZCdmtuaHlSS0t5ekRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwDg MA0GCSqGSIb3DQEBCwUAA4IBAQAWcx4U2iXrfwutJdGDhc/b7mQYPwXQDWI8u849 RvGTfPtaOIZuwXbN4meI6lKDRT0D0j8G0NzsSz9mpZk2b3G1VTpIGHL7psyFeIWI i4JPK7ATUjRxMyNb9B1BoJNRVpWJlDfA4slozbNkwhIWeJuCBGfg+6MuTKSXiAjX Bcb/Nei89IOfdZOQOxbgy+vxeh/Kng6VvBopMXdJlGOuIXP+IYsWU72vH+ehFhWk aGolYiIxguH3daIRvkhSj4mzOAS59xLGE61pqXPrxbx2XKid0fGVA7cMKxbfUxgz pra9bihNHbUf95M9S/LFiQV1Zdp7a9ujo+1WznxQ0ZxNi19/ -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:54 2026 by rpki-client