This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qRgY50JkFy4slxZntJSuBuZQHus.roa File: qRgY50JkFy4slxZntJSuBuZQHus.roa (raw, json) Hash identifier: +eri9krwmYVIXMlvcTueRFwNlg0La+jpznK/EcX1yvU= Subject key identifier: A9:18:18:E7:42:64:17:2E:2C:97:16:67:B4:94:AE:06:E6:50:1E:EB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6F48B2380798B1A801B420B98B1B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qRgY50JkFy4slxZntJSuBuZQHus.roa Signing time: Fri 02 Jan 2026 06:20:33 +0000 ROA not before: Fri 02 Jan 2026 06:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214592 IP address blocks: 2a0e:97c0:420::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:6f:48:b2:38:07:98:b1:a8:01:b4:20:b9:8b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a91818e74264172e2c971667b494ae06e6501eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:8d:63:a9:a5:97:b1:6d:28:79:3c:86:bc: 5a:2d:e1:10:29:28:7c:d2:0a:4f:7d:cb:e7:5b:86: a0:08:49:82:e1:ed:51:05:5f:06:31:6c:da:82:bc: 8b:4c:30:4a:44:7e:b5:9e:b6:e3:7d:15:a0:92:68: a5:ce:75:cb:ee:fb:3b:06:de:80:0f:29:81:03:86: e3:af:42:c3:40:61:1d:02:4e:cb:48:f0:a1:b5:4c: 7c:47:14:ad:43:2a:43:a9:16:c5:4f:ff:4b:b8:f1: aa:09:ff:24:ec:95:83:f0:1a:19:28:a1:af:eb:4b: f6:a2:3b:65:a1:46:b4:5b:97:a0:1d:56:0a:bc:2b: 49:f8:76:aa:13:e6:ef:50:df:c0:9b:0a:bc:ca:01: d5:77:c1:48:3e:1a:3a:cc:d5:90:8e:78:8f:2c:b7: ab:e4:15:85:1b:b0:42:4b:2e:28:61:ad:f5:aa:90: 15:5a:47:02:56:28:ac:c3:54:ca:57:85:62:18:3c: 6c:73:cf:60:c0:cc:78:90:1f:1d:c0:0a:c0:eb:4f: 1f:33:cf:31:ec:04:93:01:38:2e:d2:f6:64:61:91: 17:69:5d:e6:4d:1b:03:b6:d3:7a:c4:a7:cd:e7:45: c3:d8:5b:f1:8e:04:d6:21:75:42:a9:ff:22:82:d7: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:18:18:E7:42:64:17:2E:2C:97:16:67:B4:94:AE:06:E6:50:1E:EB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qRgY50JkFy4slxZntJSuBuZQHus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:420::/44 Signature Algorithm: sha256WithRSAEncryption af:36:00:74:c0:12:00:fa:dc:a6:bf:85:41:02:d9:dd:f0:45: 64:89:53:72:a7:90:7d:7c:a2:b1:c7:cb:96:99:74:d5:aa:6b: 04:16:25:93:8d:91:f5:35:89:13:1f:41:eb:6f:8a:76:fa:b3: 41:02:eb:df:2d:2b:79:0b:8a:5d:9f:7f:3e:23:b0:d6:e4:67: 8f:3e:68:95:66:41:02:75:32:10:be:75:a3:7e:4f:30:15:87: 8b:31:82:46:a6:67:11:f2:19:c8:2f:26:d1:cd:5a:bb:01:6d: db:3a:18:b1:2f:80:1f:0f:98:79:f8:0d:4a:35:5e:df:0e:07: 34:e8:7f:b5:ae:8e:2e:05:12:b4:6a:3d:e1:32:8f:a0:b9:76: de:2c:1a:a3:89:33:9e:e8:0a:71:11:42:c1:50:a8:40:74:d6: 08:cf:c5:49:12:d6:39:41:31:e7:c3:60:79:31:5d:87:22:76: c0:08:21:cd:df:8e:78:34:5a:2d:1d:e6:21:c3:59:91:78:62: 2e:93:a2:b7:af:15:47:29:16:91:8a:2a:b7:2f:41:ba:94:e2: ae:25:14:6b:a7:a6:a1:b3:93:14:8e:43:cd:8e:9c:bd:e1:8e: f8:45:4c:ad:90:2c:3c:91:d3:8e:58:c9:bc:36:93:b6:32:14: 27:df:2a:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XW9IsjgHmLGoAbQguYsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTE4MThlNzQyNjQxNzJlMmM5NzE2NjdiNDk0YWUwNmU2NTAxZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qSNY6mll7FtKHk8hrxaLeEQKSh8 0gpPfcvnW4agCEmC4e1RBV8GMWzagryLTDBKRH61nrbjfRWgkmilznXL7vs7Bt6A DymBA4bjr0LDQGEdAk7LSPChtUx8RxStQypDqRbFT/9LuPGqCf8k7JWD8BoZKKGv 60v2ojtloUa0W5egHVYKvCtJ+HaqE+bvUN/Amwq8ygHVd8FIPho6zNWQjniPLLer 5BWFG7BCSy4oYa31qpAVWkcCViisw1TKV4ViGDxsc89gwMx4kB8dwArA608fM88x 7ASTATgu0vZkYZEXaV3mTRsDttN6xKfN50XD2FvxjgTWIXVCqf8igtf73QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKkYGOdCZBcuLJcWZ7SUrgbmUB7rMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcVJnWTUwSmtGeTRzbHhabnRKU3VCdVpRSHVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAQg MA0GCSqGSIb3DQEBCwUAA4IBAQCvNgB0wBIA+tymv4VBAtnd8EVkiVNyp5B9fKKx x8uWmXTVqmsEFiWTjZH1NYkTH0Hrb4p2+rNBAuvfLSt5C4pdn38+I7DW5GePPmiV ZkECdTIQvnWjfk8wFYeLMYJGpmcR8hnILybRzVq7AW3bOhixL4AfD5h5+A1KNV7f Dgc06H+1ro4uBRK0aj3hMo+guXbeLBqjiTOe6ApxEULBUKhAdNYIz8VJEtY5QTHn w2B5MV2HInbACCHN3454NFotHeYhw1mReGIuk6K3rxVHKRaRiiq3L0G6lOKuJRRr p6ahs5MUjkPNjpy94Y74RUytkCw8kdOOWMm8NpO2MhQn3yrl -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:24 2026 by rpki-client