This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qMC2--XuR4SCGD9HB3viQaQt1e8.roa File: qMC2--XuR4SCGD9HB3viQaQt1e8.roa (raw, json) Hash identifier: 08AWUy7EGJICge4W9sp0pPN0ZfmsyKgfxVaOy6YklHQ= Subject key identifier: A8:C0:B6:FB:E5:EE:47:84:82:18:3F:47:07:7B:E2:41:A4:2D:D5:EF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF4EE3D456A9D3C95F753CDE08A5C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qMC2--XuR4SCGD9HB3viQaQt1e8.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203521 IP address blocks: 2a0e:b107:1b80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f4:ee:3d:45:6a:9d:3c:95:f7:53:cd:e0:8a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8c0b6fbe5ee478482183f47077be241a42dd5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:32:46:a6:5a:ba:f9:d4:36:93:49:69:75: e3:7b:31:79:dd:1e:91:f3:ec:0f:00:69:36:29:92: 0d:4e:da:59:04:25:66:bb:82:3b:24:f7:55:8f:a8: db:4a:92:52:ec:3e:0f:14:0a:f9:1a:66:4d:78:11: 71:2b:bf:bc:21:8b:64:cd:53:62:58:df:96:9d:e5: 7e:6e:ec:59:e3:0f:0b:8b:05:a9:72:64:6a:c2:9d: 7b:cd:62:44:06:90:c7:21:27:30:3d:80:12:94:8a: 5c:f4:21:cc:f5:61:d9:ca:60:98:90:b4:0a:e6:2a: a3:ea:38:97:10:0f:f6:af:c1:7d:2c:01:36:7f:aa: 7b:61:48:09:e0:7b:33:a2:87:80:f2:23:eb:9e:e8: 11:c4:f0:5e:6e:26:3a:a6:b1:91:5a:8c:b5:1a:81: 94:56:8b:3f:e7:ab:40:7e:cd:20:48:4f:8c:91:7d: 75:11:fe:f8:74:f9:46:7c:f7:03:67:fa:81:d1:c6: a0:23:3b:5a:c3:96:17:21:4b:8a:f6:12:2f:75:7e: 26:12:2e:48:03:61:a9:b7:84:4f:84:c7:bb:db:b2: a2:3f:77:49:3b:8b:1b:2d:f1:31:76:b9:f8:e3:aa: 77:a9:34:05:3a:84:f5:61:aa:22:2e:67:c7:83:53: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C0:B6:FB:E5:EE:47:84:82:18:3F:47:07:7B:E2:41:A4:2D:D5:EF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qMC2--XuR4SCGD9HB3viQaQt1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1b80::/44 Signature Algorithm: sha256WithRSAEncryption b4:67:a3:f0:af:37:00:2d:b5:97:37:f7:6e:35:f0:e0:bf:2b: f2:5c:aa:db:57:71:e1:72:68:e6:a4:bf:36:5b:09:6d:b2:94: c8:5f:80:86:4f:58:f7:f1:8f:11:51:8c:c7:60:7b:bb:11:0c: 7f:66:e6:7f:6c:d1:d2:97:02:a3:42:b9:8d:79:4a:20:85:4c: 9d:db:a0:de:36:21:34:e0:e0:a6:64:54:49:c9:03:d2:20:75: 83:3c:5a:24:0b:92:77:40:7b:bd:83:5f:41:8d:00:36:10:ce: 9f:84:4c:df:b7:80:f6:d3:c1:6d:c7:63:eb:3a:8b:72:57:a2: 87:83:71:94:67:9a:73:f3:b5:ea:7e:97:c4:6d:d1:29:0d:61: a4:ad:26:be:13:9c:a9:79:be:79:05:ba:6d:72:b5:61:70:71: 60:f9:d6:68:80:65:16:04:c0:d8:9d:c6:2a:cb:12:8f:74:b2: f4:c2:77:aa:1b:84:52:61:75:5c:1b:55:c5:69:24:cf:a8:08: 0b:7d:96:b4:50:72:3a:43:77:96:f6:25:50:59:dc:7e:ce:1f: 4c:ba:aa:70:40:b3:a3:d4:4a:9c:8c:9e:77:ec:58:da:15:f6: 66:50:56:e4:20:11:4b:99:4d:b4:20:25:55:f0:b8:cf:28:1c: 00:dc:41:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPTuPUVqnTyV91PN4IpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGMwYjZmYmU1ZWU0Nzg0ODIxODNmNDcwNzdiZTI0MWE0MmRkNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQyRqZauvnUNpNJaXXjezF53R6R 8+wPAGk2KZINTtpZBCVmu4I7JPdVj6jbSpJS7D4PFAr5GmZNeBFxK7+8IYtkzVNi WN+WneV+buxZ4w8LiwWpcmRqwp17zWJEBpDHIScwPYASlIpc9CHM9WHZymCYkLQK 5iqj6jiXEA/2r8F9LAE2f6p7YUgJ4HszooeA8iPrnugRxPBebiY6prGRWoy1GoGU Vos/56tAfs0gSE+MkX11Ef74dPlGfPcDZ/qB0cagIztaw5YXIUuK9hIvdX4mEi5I A2Gpt4RPhMe727KiP3dJO4sbLfExdrn446p3qTQFOoT1YaoiLmfHg1PhaQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKjAtvvl7keEghg/Rwd74kGkLdXvMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcU1DMi0tWHVSNFNDR0Q5SEIzdmlRYVF0MWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxuA MA0GCSqGSIb3DQEBCwUAA4IBAQC0Z6PwrzcALbWXN/duNfDgvyvyXKrbV3Hhcmjm pL82WwltspTIX4CGT1j38Y8RUYzHYHu7EQx/ZuZ/bNHSlwKjQrmNeUoghUyd26De NiE04OCmZFRJyQPSIHWDPFokC5J3QHu9g19BjQA2EM6fhEzft4D208Ftx2PrOoty V6KHg3GUZ5pz87XqfpfEbdEpDWGkrSa+E5ypeb55BbptcrVhcHFg+dZogGUWBMDY ncYqyxKPdLL0wneqG4RSYXVcG1XFaSTPqAgLfZa0UHI6Q3eW9iVQWdx+zh9Muqpw QLOj1EqcjJ537FjaFfZmUFbkIBFLmU20ICVV8LjPKBwA3EHj -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:50 2026 by rpki-client