When might quantum computers break RSA?

I am not certain of a specific timeline - estimates from researchers and government agencies vary widely, ranging from approximately 10 to 30 or more years for a cryptographically relevant quantum computer. NIST, NSA, and CISA have all recommended beginning PQC migration now because large-scale infrastructure migrations take years to complete. Verify current agency guidance for updated estimates.