This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/q3vaJOTC8w8YJydcJlzdNu2t6t0.roa
File: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (raw, json)
Hash identifier: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=
Subject key identifier: AB:7B:DA:24:E4:C2:F3:0F:18:27:27:5C:26:5C:DD:36:ED:AD:EA:DD
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019B79ECC42C71199343B8E972899A056D75
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/q3vaJOTC8w8YJydcJlzdNu2t6t0.roa
Signing time: Thu 01 Jan 2026 14:18:38 +0000
ROA not before: Thu 01 Jan 2026 14:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204257
IP address blocks: 141.226.184.0/21 maxlen: 21
141.226.184.0/23 maxlen: 23
141.226.184.0/24 maxlen: 24
141.226.185.0/24 maxlen: 24
141.226.186.0/23 maxlen: 23
141.226.186.0/24 maxlen: 24
141.226.187.0/24 maxlen: 24
141.226.188.0/24 maxlen: 24
141.226.189.0/24 maxlen: 24
141.226.190.0/24 maxlen: 24
141.226.191.0/24 maxlen: 24
185.109.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c4:2c:71:19:93:43:b8:e9:72:89:9a:05:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Jan 1 14:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab7bda24e4c2f30f1827275c265cdd36edadeadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:ad:53:b5:75:41:a5:b2:fa:77:08:7c:2d:
88:27:e1:92:dc:34:46:3b:00:4c:c9:0d:08:12:e0:
be:43:40:e7:ee:19:5c:ae:44:df:96:07:9a:0e:07:
f7:af:35:89:eb:84:5b:1a:e5:94:72:80:0c:9b:eb:
0b:d2:10:fc:47:d9:5b:57:d2:96:ac:aa:8e:91:37:
fb:cb:88:d8:c4:71:5a:14:09:f4:06:98:67:5a:a8:
82:3f:0b:a6:ef:e7:23:f5:de:17:a5:46:2e:b7:ee:
7e:68:d0:47:18:1c:08:45:46:39:c4:63:d5:99:82:
06:4e:76:35:c3:59:2a:d1:ac:0c:c0:dc:32:b3:17:
b3:25:3a:23:c5:67:04:26:a4:c5:f2:a2:1e:36:d8:
30:ee:dc:87:a8:cd:63:8a:0a:a4:51:6b:df:7b:ca:
6d:cd:18:21:7b:f1:97:e8:d7:ff:fc:61:3b:80:47:
90:42:ee:dd:28:46:7d:42:6d:98:0f:17:b9:f8:c4:
2d:ca:7e:1b:6c:dd:63:18:fd:e6:f8:1d:22:43:76:
2f:47:05:8f:a0:9e:e3:62:ab:ff:e0:b5:e9:ba:69:
9b:32:31:cd:47:f1:8c:ed:94:ab:af:54:58:65:fd:
9a:d1:58:ba:1a:61:6d:dc:4d:72:f9:42:42:be:d3:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7B:DA:24:E4:C2:F3:0F:18:27:27:5C:26:5C:DD:36:ED:AD:EA:DD
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/q3vaJOTC8w8YJydcJlzdNu2t6t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.184.0/21
185.109.148.0/22
Signature Algorithm: sha256WithRSAEncryption
49:d1:82:81:ac:b2:d9:c6:ba:3e:22:2c:d4:9e:53:46:23:8f:
71:47:82:8f:c8:86:60:ed:8b:23:a7:23:c4:d8:13:53:85:84:
6f:b3:3f:62:e6:8f:35:e7:ea:85:28:51:25:4e:e8:e8:55:16:
00:f9:28:46:bb:ac:6d:8e:3d:83:48:d6:aa:b7:ae:7d:db:b4:
1c:ef:48:6a:44:6c:52:a2:4b:1a:6f:06:3e:4f:e8:a0:d2:33:
6b:16:f3:2b:1e:49:f8:a7:5f:73:18:43:ef:79:ea:a0:40:66:
7f:0d:59:f8:64:5e:32:f4:f0:b5:16:43:2f:f4:07:d0:99:f3:
2c:31:19:f1:2a:7f:52:6b:91:f3:af:dc:8c:94:01:ea:75:c6:
b2:53:7c:91:45:31:df:91:78:f1:97:4b:5b:8b:12:02:63:90:
b1:27:4f:85:9e:09:ec:02:09:e1:38:cf:79:cd:a5:a1:86:9a:
9e:59:dc:e6:ff:64:ca:61:d1:8b:22:73:4e:69:ce:bc:91:3d:
5d:7b:d6:5e:3d:27:7d:a5:f2:2c:23:ee:d0:13:c4:de:bf:75:
70:6b:f9:47:06:e9:81:da:5b:da:b4:5b:f3:50:2d:3d:8e:a5:
5e:ba:f7:74:5f:18:12:2f:12:98:bf:49:1b:7e:ba:73:56:9a:
dc:0b:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:05 2026 by rpki-client