This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q1G132nj6F_UfZNr5_5dkezP8AM.roa
File: Q1G132nj6F_UfZNr5_5dkezP8AM.roa (raw, json)
Hash identifier: vh7PSiv8NCGoSBEEQL74DtkgX37GqqH6Z5NyGtmUyNM=
Subject key identifier: 43:51:B5:DF:69:E3:E8:5F:D4:7D:93:6B:E7:FE:5D:91:EC:CF:F0:03
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019B7AC7BF3F332C1D9998046E0F053CD087
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q1G132nj6F_UfZNr5_5dkezP8AM.roa
Signing time: Thu 01 Jan 2026 18:17:49 +0000
ROA not before: Thu 01 Jan 2026 18:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.81.48.0/24 maxlen: 24
80.81.53.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
80.255.224.0/20 maxlen: 20
83.223.130.0/24 maxlen: 24
83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.137.0/24 maxlen: 24
83.223.142.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
91.190.47.0/24 maxlen: 24
94.101.226.0/24 maxlen: 24
94.101.237.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.240.0/24 maxlen: 24
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:bf:3f:33:2c:1d:99:98:04:6e:0f:05:3c:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 18:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4351b5df69e3e85fd47d936be7fe5d91eccff003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:e6:e8:88:9b:1a:63:b9:2f:cd:b2:18:5b:
69:13:30:ef:7d:cd:22:74:45:da:79:57:97:05:f9:
a7:17:ad:78:4e:51:1a:b1:73:20:ee:a3:2a:70:2f:
78:06:a7:fc:0f:5a:19:cc:aa:31:f2:36:38:a3:44:
b0:a8:bb:13:ee:ca:bb:d8:c4:77:a7:18:2d:f4:a8:
d6:c3:71:6c:82:82:ba:95:cb:e2:af:a7:f7:cd:f9:
4b:33:88:03:e9:62:e3:29:74:6e:0a:98:86:24:7b:
b5:d9:c1:25:72:6d:70:db:d2:fd:6d:0d:0d:72:05:
8e:bb:c9:bc:d5:55:4c:89:3f:1e:75:8a:19:8f:83:
13:2e:09:64:6c:87:78:7c:41:d5:24:f2:9c:87:6e:
95:2c:68:38:ac:5b:f1:f0:c9:b7:3c:55:84:1b:8c:
9e:91:9f:b9:4a:9e:bb:b3:9a:4d:f0:ed:b4:6b:e8:
56:0d:0d:4b:0b:78:67:ff:72:99:ee:2d:a1:69:b4:
db:e1:ad:ea:5e:87:fa:1c:fb:ec:49:80:65:56:c8:
68:60:60:9b:51:71:96:35:cc:06:63:5d:2c:d6:dc:
b8:1b:0f:ee:3c:74:30:66:a4:12:6d:1c:ab:a8:d9:
3b:e2:13:33:f3:d5:2e:a0:3e:94:24:72:e9:52:93:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:B5:DF:69:E3:E8:5F:D4:7D:93:6B:E7:FE:5D:91:EC:CF:F0:03
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q1G132nj6F_UfZNr5_5dkezP8AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.48.0/24
80.81.53.0/24
80.81.58.0/24
80.255.224.0/20
83.223.130.0/24
83.223.134.0/23
83.223.137.0/24
83.223.142.0/24
83.223.153.0-83.223.154.255
91.190.47.0/24
94.101.226.0/24
94.101.237.0/24
159.148.149.0/24
159.148.240.0/24
185.7.237.0-185.7.239.255
Signature Algorithm: sha256WithRSAEncryption
c0:2f:c6:67:07:9e:f9:0d:26:1f:33:af:75:3f:5e:62:30:e2:
f5:c1:fc:24:0e:6b:fc:8a:e5:f1:50:a9:22:19:24:d4:87:b8:
db:51:eb:68:d0:02:ad:2e:6a:54:0f:e9:5e:dc:99:bf:73:4d:
b1:57:d0:21:48:56:e9:06:e5:38:7b:2d:49:0b:12:07:f0:fc:
d4:2e:f4:f0:f8:71:ea:44:a6:b6:94:a6:19:26:f1:d1:ab:c8:
06:84:b0:a5:54:d8:4e:86:f7:45:c6:0d:fb:41:56:ad:1f:64:
d2:4a:8f:93:e2:dd:e5:72:84:d6:5b:d1:c9:18:e8:19:be:8a:
45:69:52:6b:ab:3a:6a:94:05:a4:58:4c:ef:9b:ec:7b:ea:c1:
a2:26:ed:4d:7c:b5:bb:d2:dd:53:20:3f:51:b4:0a:c7:d1:cb:
6d:53:e5:69:c4:ba:85:fe:26:ae:c0:01:f6:66:1f:0c:ff:fb:
ab:e4:e3:f3:b6:2f:8d:44:31:f7:5b:ce:c1:ab:27:22:28:93:
90:a3:cd:aa:fb:f7:df:38:f2:41:a1:49:91:0c:a7:6e:8b:7a:
e4:c9:fd:16:4c:ae:91:f3:c0:bb:c9:be:91:ec:1d:7f:93:95:
a3:e3:07:05:c2:e9:af:74:9a:04:f0:d8:c0:07:4e:d3:f0:d4:
45:df:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:48 2026 by rpki-client