This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/BQRT8MPKIPPADJStIFOXOoMHZS0.roa File: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (raw, json) Hash identifier: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8= Subject key identifier: 05:04:53:F0:C3:CA:20:F3:C0:0C:94:AD:20:53:97:3A:83:07:65:2D Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Certificate serial: 019B7D5B37ADD6C6A64DABEE12B18B185B1C Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/BQRT8MPKIPPADJStIFOXOoMHZS0.roa Signing time: Fri 02 Jan 2026 06:18:08 +0000 ROA not before: Fri 02 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47246 IP address blocks: 2a02:ddc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:37:ad:d6:c6:a6:4d:ab:ee:12:b1:8b:18:5b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=050453f0c3ca20f3c00c94ad2053973a8307652d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:d1:75:12:88:f8:f2:e0:83:8f:41:0f:ba: ba:98:73:1a:fa:cf:94:ff:63:60:1a:fb:8d:56:05: 6a:e4:78:c6:f7:af:ac:38:c9:43:d6:e3:c1:d0:c1: 86:6d:47:bf:fd:76:ee:a4:72:9c:f6:37:c6:16:af: 45:68:34:ef:a4:87:66:c9:92:d2:1e:3a:f8:99:d3: 0e:9c:32:9b:b4:77:cb:e1:1f:4d:40:08:6f:04:60: 79:67:3c:4e:94:9c:30:05:e6:2d:1a:3f:51:b2:74: f9:f8:10:bc:fe:8f:dd:27:69:40:3a:ef:d8:a4:5e: 43:a2:93:db:13:66:f4:e2:9f:45:78:bb:4c:cf:87: 42:12:91:96:53:db:a9:bb:fe:a4:68:68:1c:71:4a: 6b:c1:1b:7a:87:01:a9:12:8a:03:a0:dc:d0:63:25: 39:4a:c5:7e:62:c9:1a:5a:cd:65:04:7d:c1:8c:2e: 00:c0:e8:15:f1:65:37:89:62:ac:9d:f7:1a:a6:e5: e7:54:89:57:59:41:61:22:03:c2:67:32:d5:b0:45: 03:38:d1:93:e7:a6:ac:2f:6f:25:8c:7c:13:8b:b3: 8b:b7:76:ea:81:03:42:7d:2c:f2:79:a7:38:bf:d3: ee:d9:9e:8a:27:1a:2c:b3:9c:eb:58:f2:6d:6f:d3: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:04:53:F0:C3:CA:20:F3:C0:0C:94:AD:20:53:97:3A:83:07:65:2D X509v3 Authority Key Identifier: keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/BQRT8MPKIPPADJStIFOXOoMHZS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ddc3::/48 Signature Algorithm: sha256WithRSAEncryption 98:fb:06:9e:5b:5a:8f:fc:11:af:f7:54:a3:6e:c9:b8:f2:d3: 65:1d:41:49:56:ec:19:05:47:37:69:cb:ce:98:5f:fb:82:75: 6d:97:be:85:a9:8a:c0:cc:a7:35:ff:39:7a:50:70:33:d9:37: 6d:eb:75:78:5b:9e:46:8a:f3:ed:46:9a:93:ea:30:41:55:84: 83:1a:aa:42:3e:3d:b5:7c:b3:49:d8:80:89:9b:e7:e9:a1:a3: 97:9f:53:b6:1d:51:0e:f2:dc:5c:e2:83:47:6d:24:1a:32:c4: a0:dd:b6:73:71:c7:b4:a1:7e:a3:6f:29:e4:a0:60:0c:ba:bf: 67:04:26:84:b7:33:24:81:d9:b6:52:31:e1:a4:39:d8:23:64: aa:fb:c5:61:94:14:87:28:d2:17:46:85:94:9e:a4:47:47:c5: af:d1:26:f8:5c:ad:d1:d1:86:6a:ad:f6:79:03:df:64:34:83: 74:6c:e5:e4:b1:c6:f5:5d:fd:36:5d:b8:fd:c3:c7:01:e0:10: a4:da:a3:60:32:16:fd:07:20:81:bf:9a:3d:8b:51:cd:c9:cd: dc:67:d9:0f:92:27:44:02:5b:e9:00:f7:cc:18:e6:7f:b0:3f: 2f:69:c5:9e:8d:99:a1:97:d5:8e:52:98:11:80:e5:95:ca:99: 17:ce:03:a8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9Wzet1samTavuErGLGFscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx MzVhM2EwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTA0NTNmMGMzY2EyMGYzYzAwYzk0YWQyMDUzOTczYTgzMDc2NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBTRdRKI+PLgg49BD7q6mHMa+s+U /2NgGvuNVgVq5HjG96+sOMlD1uPB0MGGbUe//XbupHKc9jfGFq9FaDTvpIdmyZLS Hjr4mdMOnDKbtHfL4R9NQAhvBGB5ZzxOlJwwBeYtGj9RsnT5+BC8/o/dJ2lAOu/Y pF5DopPbE2b04p9FeLtMz4dCEpGWU9upu/6kaGgccUprwRt6hwGpEooDoNzQYyU5 SsV+YskaWs1lBH3BjC4AwOgV8WU3iWKsnfcapuXnVIlXWUFhIgPCZzLVsEUDONGT 56asL28ljHwTi7OLt3bqgQNCfSzyeac4v9Pu2Z6KJxoss5zrWPJtb9NLywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAUEU/DDyiDzwAyUrSBTlzqDB2UtMB8GA1UdIwQY MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt ZmE2MzQ4ZjY5NWI1LzEvQlFSVDhNUEtJUFBBREpTdElGT1hPb01IWlMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1 LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLdwwAA MA0GCSqGSIb3DQEBCwUAA4IBAQCY+waeW1qP/BGv91Sjbsm48tNlHUFJVuwZBUc3 acvOmF/7gnVtl76FqYrAzKc1/zl6UHAz2Tdt63V4W55GivPtRpqT6jBBVYSDGqpC Pj21fLNJ2ICJm+fpoaOXn1O2HVEO8txc4oNHbSQaMsSg3bZzcce0oX6jbynkoGAM ur9nBCaEtzMkgdm2UjHhpDnYI2Sq+8VhlBSHKNIXRoWUnqRHR8Wv0Sb4XK3R0YZq rfZ5A99kNIN0bOXkscb1Xf02Xbj9w8cB4BCk2qNgMhb9ByCBv5o9i1HNyc3cZ9kP kidEAlvpAPfMGOZ/sD8vacWejZmhl9WOUpgRgOWVypkXzgOo -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:18 2026 by rpki-client