This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qxGK_Wj02UmZdV4prC9xtSlbXAw.roa
File: qxGK_Wj02UmZdV4prC9xtSlbXAw.roa (raw, json)
Hash identifier: LvesaCauROFPJQh/fUTIl8GbjehY9Hpx68NgyMY0C5g=
Subject key identifier: AB:11:8A:FD:68:F4:D9:49:99:75:5E:29:AC:2F:71:B5:29:5B:5C:0C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB3BC071CBD4F823F75D453E5EEEB4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qxGK_Wj02UmZdV4prC9xtSlbXAw.roa
Signing time: Fri 02 Jan 2026 08:20:29 +0000
ROA not before: Fri 02 Jan 2026 08:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55701
IP address blocks: 151.243.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Jan 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:3b:c0:71:cb:d4:f8:23:f7:5d:45:3e:5e:ee:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab118afd68f4d94999755e29ac2f71b5295b5c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:ab:4a:f8:31:a6:42:bb:87:53:c2:e1:06:
b1:57:97:50:95:d4:da:7c:db:01:6c:9b:fc:8d:cb:
33:28:12:93:7f:1e:7f:65:4e:f5:4c:d5:d9:32:17:
f6:df:7a:d7:63:d6:ec:53:38:fc:e3:fc:43:2b:df:
35:08:98:28:c6:cb:d0:de:04:34:98:8c:62:18:14:
fc:20:60:4e:39:74:b0:46:86:6b:88:02:40:9c:87:
03:47:c2:14:29:45:61:9c:ff:d1:76:74:b8:99:27:
25:23:9f:68:3d:55:61:22:f6:df:8a:55:2c:f5:5e:
c4:69:6a:78:5c:9d:59:c0:73:d8:41:a7:11:28:c8:
ff:1a:46:61:31:48:ef:8b:11:3e:0b:c1:26:d7:28:
82:8d:bf:07:4c:58:66:c5:a5:6e:04:74:74:9d:00:
88:d3:96:e6:69:4e:fa:3c:e5:83:7a:18:39:d1:b0:
80:0c:e8:5f:22:79:85:ab:1b:42:1c:0c:8c:08:32:
3a:ec:43:89:de:a8:bd:bb:98:55:46:e8:1f:ae:38:
25:0c:69:c9:c2:d4:0a:c4:73:02:0e:0e:61:64:77:
fc:42:0f:07:9d:be:27:c4:fa:bc:a2:ad:33:0e:76:
76:7a:fd:0e:52:50:d4:78:30:80:b5:7f:3a:cf:85:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:8A:FD:68:F4:D9:49:99:75:5E:29:AC:2F:71:B5:29:5B:5C:0C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qxGK_Wj02UmZdV4prC9xtSlbXAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.1.0/24
Signature Algorithm: sha256WithRSAEncryption
45:72:c8:f8:e0:c0:6a:fa:58:37:3d:06:c8:01:0c:9b:11:ae:
ea:f3:07:4b:ad:4b:ab:47:dd:ca:c3:e1:ee:71:bd:7f:58:b8:
5d:54:f6:e3:4f:c8:05:7a:97:70:0f:fe:1a:7e:94:b7:66:4b:
03:21:9f:e8:5d:2b:ae:a6:02:ea:6c:19:f5:bf:00:01:c1:9f:
23:d8:f3:ab:e1:5d:f7:03:cf:fb:82:ae:1a:62:85:57:0e:e3:
dc:b6:f4:f0:a1:57:e5:10:d4:33:9c:c4:68:f9:91:5c:a3:4f:
50:17:4a:af:b7:1c:25:64:ef:ff:af:50:bf:ff:8a:34:1e:e0:
0f:8c:15:65:9b:e0:f8:a1:42:bb:d4:96:03:85:fd:81:eb:5c:
de:3e:61:5b:ec:74:1e:66:ab:4e:81:86:3a:b5:73:6b:df:a4:
6d:9c:b2:da:a5:b7:ac:58:da:53:00:2f:b6:0f:1d:81:9a:d1:
e5:0f:13:6e:bb:fa:d6:0c:f6:96:d6:a8:61:ad:b1:f3:16:84:
92:71:38:77:33:cd:25:d3:5a:d0:f6:19:ad:92:b0:38:e8:58:
8c:3c:94:43:29:2d:9b:5e:40:26:66:39:79:88:2a:eb:f8:b5:
2f:c7:a3:81:ed:89:3b:86:76:3f:c6:8f:b7:2f:33:d9:61:78:
f6:6a:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 06:30:54 2026 by rpki-client