This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/QdKKzUWWaCDa8MoFy-JpYhIJqu0.roa File: QdKKzUWWaCDa8MoFy-JpYhIJqu0.roa (raw, json) Hash identifier: IyTvMa/VvO57BrPkvJnaGVXz60MbVRz3xbmHxByMkkQ= Subject key identifier: 41:D2:8A:CD:45:96:68:20:DA:F0:CA:05:CB:E2:69:62:12:09:AA:ED Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019AF9BE4CF88B18B99BF2405E30F843E30B Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/QdKKzUWWaCDa8MoFy-JpYhIJqu0.roa Signing time: Sun 07 Dec 2025 16:56:29 +0000 ROA not before: Sun 07 Dec 2025 16:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212701 IP address blocks: 2a01:ecc0:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:be:4c:f8:8b:18:b9:9b:f2:40:5e:30:f8:43:e3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Dec 7 16:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41d28acd45966820daf0ca05cbe269621209aaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:51:09:23:c3:63:20:f1:d5:33:e4:29:7d: c1:96:59:c8:ef:e8:94:5e:bc:50:9e:ca:7e:52:69: d0:c7:e0:71:86:24:6b:23:12:cf:ee:47:c6:88:55: 2d:53:04:2b:4c:c6:2f:8a:24:8a:9d:67:ac:74:c9: d2:8e:fc:cd:58:df:18:1b:fa:6f:48:95:d6:00:34: 3a:96:04:4d:77:3b:b1:8c:aa:45:4d:00:bc:f6:89: 23:7f:10:4d:a7:a1:39:b4:b7:42:8d:00:af:5b:41: 02:85:3e:47:5e:a0:9e:79:b2:cb:2c:6f:57:b7:12: ac:e5:2a:04:cb:ac:9d:fe:62:9a:31:d6:3b:0e:40: 29:b3:b6:f7:df:8f:a6:9f:b0:7a:fc:2b:83:07:d5: aa:e2:af:ac:a3:ae:75:97:db:a2:9b:98:0c:6b:4a: 1f:79:e0:d3:3f:f3:b8:30:c0:32:c9:99:55:4c:73: 00:59:65:9a:ad:0f:e2:70:80:1e:30:81:a8:fe:7f: 7c:88:35:e7:48:49:f5:cb:4c:c7:e5:fd:30:0b:7b: b0:67:8a:cf:9d:95:c9:b4:7a:4b:a8:b1:74:26:dd: 38:61:c5:13:6c:50:a7:38:90:da:3c:2e:60:e3:f7: a8:f8:cc:93:66:ad:90:87:80:e6:f0:09:a1:ea:fd: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D2:8A:CD:45:96:68:20:DA:F0:CA:05:CB:E2:69:62:12:09:AA:ED X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/QdKKzUWWaCDa8MoFy-JpYhIJqu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 2a:b3:d1:72:8b:19:a6:19:3c:c1:ad:84:3d:f5:ca:96:72:9b: 55:79:9d:ef:4c:f3:27:c8:de:69:02:0d:16:18:82:c4:80:8e: aa:c0:da:8e:43:cc:c1:85:11:f7:b8:dd:26:a3:fc:2a:c5:01: 40:ee:72:00:8d:55:f2:f7:ed:e0:8c:47:2e:24:93:a4:86:5f: 1d:c5:13:5c:ea:90:76:5c:53:a0:ab:27:e5:6a:85:4d:37:d9: 19:6a:41:57:1c:da:5b:83:be:9a:f4:ad:78:fd:9d:5e:80:50: 78:cb:02:11:3a:7d:78:b4:df:3d:7c:4d:4f:33:b4:4d:20:0c: 32:ce:01:9c:af:1c:6c:63:84:9d:c4:84:b4:e5:f5:f5:45:79: 69:fd:b5:00:35:20:53:ee:ee:a0:7e:9d:49:59:bb:d6:82:54: 60:d5:bb:e9:4e:69:69:ef:21:e4:40:af:d7:4c:ad:1c:ac:40: 98:b8:22:89:bf:0b:d8:62:21:b8:46:70:a6:00:96:c0:f1:fc: 30:3b:f9:7a:54:cd:78:ab:f0:4c:bb:76:d2:41:b4:a4:e3:59: c0:07:6f:be:a8:c6:fc:e0:66:6d:b7:cf:d7:90:48:a8:2e:0e: 64:7c:29:3b:f2:78:99:e7:40:43:c9:2b:11:98:57:18:54:c0: a4:a3:53:60 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZr5vkz4ixi5m/JAXjD4Q+MLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjUxMjA3MTY1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWQyOGFjZDQ1OTY2ODIwZGFmMGNhMDVjYmUyNjk2MjEyMDlhYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sZRCSPDYyDx1TPkKX3BllnI7+iU XrxQnsp+UmnQx+BxhiRrIxLP7kfGiFUtUwQrTMYviiSKnWesdMnSjvzNWN8YG/pv SJXWADQ6lgRNdzuxjKpFTQC89okjfxBNp6E5tLdCjQCvW0EChT5HXqCeebLLLG9X txKs5SoEy6yd/mKaMdY7DkAps7b334+mn7B6/CuDB9Wq4q+so651l9uim5gMa0of eeDTP/O4MMAyyZlVTHMAWWWarQ/icIAeMIGo/n98iDXnSEn1y0zH5f0wC3uwZ4rP nZXJtHpLqLF0Jt04YcUTbFCnOJDaPC5g4/eo+MyTZq2Qh4Dm8Amh6v15fwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEHSis1Flmgg2vDKBcviaWISCartMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvUWRLS3pVV1dhQ0RhOE1vRnktSnBZaElKcXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgHswDAw DQYJKoZIhvcNAQELBQADggEBACqz0XKLGaYZPMGthD31ypZym1V5ne9M8yfI3mkC DRYYgsSAjqrA2o5DzMGFEfe43Saj/CrFAUDucgCNVfL37eCMRy4kk6SGXx3FE1zq kHZcU6CrJ+VqhU032RlqQVcc2luDvpr0rXj9nV6AUHjLAhE6fXi03z18TU8ztE0g DDLOAZyvHGxjhJ3EhLTl9fVFeWn9tQA1IFPu7qB+nUlZu9aCVGDVu+lOaWnvIeRA r9dMrRysQJi4Iom/C9hiIbhGcKYAlsDx/DA7+XpUzXir8Ey7dtJBtKTjWcAHb76o xvzgZm23z9eQSKguDmR8KTvyeJnnQEPJKxGYVxhUwKSjU2A= -----END CERTIFICATE-----Generated at Sun Dec 21 01:58:09 2025 by rpki-client