This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/qfssabipb-ztXEUVfY8jVD0wDUU.roa
File: qfssabipb-ztXEUVfY8jVD0wDUU.roa (raw, json)
Hash identifier: 35vnggv/gBzV949aBfyIzEwsk9uuE/B6VzD7g0Qyt3w=
Subject key identifier: A9:FB:2C:69:B8:A9:6F:EC:ED:5C:45:15:7D:8F:23:54:3D:30:0D:45
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019C0A3FAA4A7BF90F0141FD64820E91E605
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/qfssabipb-ztXEUVfY8jVD0wDUU.roa
Signing time: Thu 29 Jan 2026 14:54:30 +0000
ROA not before: Thu 29 Jan 2026 14:54:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 153.51.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0a:3f:aa:4a:7b:f9:0f:01:41:fd:64:82:0e:91:e6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jan 29 14:54:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9fb2c69b8a96feced5c45157d8f23543d300d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:c0:23:2b:fa:60:cc:ab:8e:95:43:54:14:
48:ed:c0:42:7d:dd:ab:37:45:96:1a:c9:b0:9f:81:
2d:c9:66:ad:5d:ab:b0:6b:9d:24:bf:90:b2:b5:3d:
27:d7:5c:03:e6:5d:f4:4e:3d:9d:fe:0e:65:3e:40:
00:b7:98:47:3c:e7:60:b0:7d:c6:09:95:41:60:89:
53:50:d0:8c:59:83:d1:ae:3c:85:e7:b1:fd:44:02:
0d:c8:ad:b0:d7:62:e7:9d:a8:d4:af:94:66:2c:27:
d7:82:9b:1d:83:e2:a0:2c:b1:41:5a:2b:e3:49:5e:
0a:82:14:08:70:55:53:86:d8:91:be:df:6e:b4:ae:
2e:57:74:94:3c:4e:20:23:bf:e9:b9:a9:f8:3a:15:
48:a7:d2:9e:9f:29:9a:58:64:2d:0b:f3:b5:b8:05:
ed:33:a9:28:73:1f:12:b6:c0:f6:c1:fb:e1:da:a6:
6d:a8:45:9b:b8:59:1e:df:8b:df:9f:4c:62:88:f3:
dd:66:6b:c2:76:49:4c:0b:5f:1d:bd:ef:ec:02:62:
c0:fe:d9:e1:cb:10:bd:48:03:54:cd:63:9a:b9:b3:
b8:91:3a:57:31:de:8d:7a:fd:d9:76:19:00:39:cf:
9c:1c:49:92:fc:b1:39:aa:20:bd:13:ff:c7:05:9b:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:2C:69:B8:A9:6F:EC:ED:5C:45:15:7D:8F:23:54:3D:30:0D:45
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/qfssabipb-ztXEUVfY8jVD0wDUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.190.0/24
Signature Algorithm: sha256WithRSAEncryption
24:10:7a:f7:78:74:59:37:66:cd:51:23:49:10:d5:65:ad:4e:
3e:af:e3:b8:45:d1:20:fb:5b:b4:7b:13:79:5e:6d:df:93:b9:
9a:d3:29:44:dd:b6:e2:52:63:43:d9:bc:51:85:44:0e:04:bc:
05:54:bd:8e:78:55:a6:5c:5a:8f:f2:28:b1:47:07:1e:35:a9:
98:e8:a2:c0:46:0a:60:a4:ba:ed:aa:58:de:65:2f:9d:13:22:
05:3d:6c:0f:ed:ad:17:7e:12:ba:bd:55:0b:62:6a:65:37:d7:
e7:da:98:b9:31:85:66:9c:3d:f0:62:a9:e6:1f:7c:7a:fd:2e:
c1:e9:f4:38:42:f0:bf:55:ea:1b:23:f2:a6:49:5a:c8:08:e3:
11:3a:76:a3:d9:ff:29:1c:b7:92:55:f8:f1:7a:f3:4d:d0:0b:
70:a8:7d:2a:a7:d2:cc:01:e2:cc:03:ae:4d:8a:a4:cc:07:4a:
b4:8a:f0:dd:19:c6:71:e9:95:df:12:d8:a8:a5:90:70:8c:5f:
e2:91:9d:78:b9:4d:25:ab:f5:2d:98:62:f3:92:41:06:ce:40:
9b:4b:0e:e3:d5:aa:20:e1:72:d2:a4:84:15:6e:78:41:6e:63:
d3:28:4f:ae:32:e8:ec:ca:20:5c:f7:97:d4:36:31:71:97:f6:
8d:f1:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 09:09:35 2026 by rpki-client