This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qz3aP-juoyMD-M-iKnHV0O9LFUo.roa File: Qz3aP-juoyMD-M-iKnHV0O9LFUo.roa (raw, json) Hash identifier: fjzGW0mnnwq26koZC16L7Ttjc2FZ3eZR0AlaUoNf0mQ= Subject key identifier: 43:3D:DA:3F:E8:EE:A3:23:03:F8:CF:A2:2A:71:D5:D0:EF:4B:15:4A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4672174C00528DEB46CE915149EB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qz3aP-juoyMD-M-iKnHV0O9LFUo.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211876 IP address blocks: 2a0e:97c0:120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:46:72:17:4c:00:52:8d:eb:46:ce:91:51:49:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=433dda3fe8eea32303f8cfa22a71d5d0ef4b154a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:ab:c9:90:b1:fb:49:05:5c:3a:ff:bd:5b: 29:cf:7d:98:de:a6:d9:38:b4:f3:28:29:c0:d1:78: 99:8e:a9:f1:bd:10:1c:7d:20:12:1d:68:6d:ac:c8: 20:23:1f:4f:5b:c5:b1:79:b3:bd:0f:61:b0:2f:ad: 1d:f2:c5:ef:d4:22:84:80:75:77:68:d3:f9:57:40: 77:79:02:05:dc:8e:c5:ee:2d:d5:05:f4:ca:f6:60: 1e:bc:cd:70:72:76:82:f7:be:1d:f1:ad:28:0b:51: 15:66:db:ad:09:82:9b:9f:09:ef:e7:b9:14:94:6d: 75:89:e7:7e:59:f8:ce:45:bb:07:7e:5c:54:42:5f: 4d:f5:09:b1:e4:51:cd:a1:a6:b2:5c:d0:24:e5:f2: eb:e3:7b:11:fa:0a:de:f9:1d:a7:e1:09:d4:bb:66: 80:fe:2b:77:4e:8c:f6:c5:4b:9c:03:72:af:06:1d: fc:a5:e4:c4:ff:49:4c:33:a4:d6:04:3f:a2:d1:37: 77:18:1a:ed:65:9b:d3:08:46:44:9a:92:90:37:cf: 49:88:7e:98:ed:e6:8d:81:44:aa:9e:41:db:ea:1a: dc:38:bd:4d:37:85:c4:0c:f4:cd:57:d2:b7:88:c8: c3:d5:c5:78:b5:87:63:a0:65:7f:36:7f:07:d7:6b: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3D:DA:3F:E8:EE:A3:23:03:F8:CF:A2:2A:71:D5:D0:EF:4B:15:4A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qz3aP-juoyMD-M-iKnHV0O9LFUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:120::/44 Signature Algorithm: sha256WithRSAEncryption 1d:f9:8b:5f:d6:7a:19:3b:15:11:c1:9b:fd:1b:26:85:bb:2d: 9d:de:af:55:e8:b1:b8:44:4f:22:34:56:a3:02:2e:98:85:7b: 29:b0:65:c9:22:37:fb:b4:fa:81:b7:b4:8a:4d:4f:d4:4f:ef: 1d:0f:c2:a5:ae:b3:d6:20:dd:8b:f9:26:5c:a9:3f:54:dc:97: c6:4c:02:83:c3:68:ea:a5:02:a0:00:48:7c:ff:a8:e5:0a:93: 97:22:73:3d:30:3e:53:83:3f:ae:26:86:96:c2:69:23:a1:58: 8f:80:3d:e1:6d:8c:11:b3:7f:0e:f5:2f:63:25:15:81:a2:9f: 27:33:52:f0:35:01:24:5d:7d:62:82:b8:6d:17:92:a2:6d:db: ce:fe:48:40:cd:74:87:f3:bc:4d:bd:e3:31:d7:a0:22:02:32: 87:07:dd:11:c1:0c:ff:16:6a:85:bf:04:ad:5d:e1:bd:b4:93: 00:fe:82:19:f7:f4:02:77:70:79:74:77:54:cb:0a:18:a2:50: b0:07:7e:9a:80:ef:aa:06:13:8d:4a:fd:51:5b:fd:53:b1:30: ee:f0:d2:a5:a5:a0:a5:e5:82:2e:87:49:e8:67:c2:9f:4a:5a: ae:ca:c8:83:8e:75:11:5d:4e:df:70:3f:d7:ad:48:1e:3d:ea: 06:99:5b:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUZyF0wAUo3rRs6RUUnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzNkZGEzZmU4ZWVhMzIzMDNmOGNmYTIyYTcxZDVkMGVmNGIxNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotOryZCx+0kFXDr/vVspz32Y3qbZ OLTzKCnA0XiZjqnxvRAcfSASHWhtrMggIx9PW8WxebO9D2GwL60d8sXv1CKEgHV3 aNP5V0B3eQIF3I7F7i3VBfTK9mAevM1wcnaC974d8a0oC1EVZtutCYKbnwnv57kU lG11ied+WfjORbsHflxUQl9N9Qmx5FHNoaayXNAk5fLr43sR+gre+R2n4QnUu2aA /it3Toz2xUucA3KvBh38peTE/0lMM6TWBD+i0Td3GBrtZZvTCEZEmpKQN89JiH6Y 7eaNgUSqnkHb6hrcOL1NN4XEDPTNV9K3iMjD1cV4tYdjoGV/Nn8H12tsfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEM92j/o7qMjA/jPoipx1dDvSxVKMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUXozYVAtanVveU1ELU0taUtuSFYwTzlMRlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAEg MA0GCSqGSIb3DQEBCwUAA4IBAQAd+Ytf1noZOxURwZv9GyaFuy2d3q9V6LG4RE8i NFajAi6YhXspsGXJIjf7tPqBt7SKTU/UT+8dD8KlrrPWIN2L+SZcqT9U3JfGTAKD w2jqpQKgAEh8/6jlCpOXInM9MD5Tgz+uJoaWwmkjoViPgD3hbYwRs38O9S9jJRWB op8nM1LwNQEkXX1igrhtF5KibdvO/khAzXSH87xNveMx16AiAjKHB90RwQz/FmqF vwStXeG9tJMA/oIZ9/QCd3B5dHdUywoYolCwB36agO+qBhONSv1RW/1TsTDu8NKl paCl5YIuh0noZ8KfSlquysiDjnURXU7fcD/XrUgePeoGmVsG -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client