This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/TqluBkd6UQL59Ze0Zq97K0BmVTU.roa
File: TqluBkd6UQL59Ze0Zq97K0BmVTU.roa (raw, json)
Hash identifier: JviIbVzjJLsxCvwAUOWWxAWG+oSpM8WgOJkmQ0ir8uM=
Subject key identifier: 4E:A9:6E:06:47:7A:51:02:F9:F5:97:B4:66:AF:7B:2B:40:66:55:35
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019B7C1347C7E9B40CF39113704271096B2D
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/TqluBkd6UQL59Ze0Zq97K0BmVTU.roa
Signing time: Fri 02 Jan 2026 00:19:56 +0000
ROA not before: Fri 02 Jan 2026 00:19:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35023
IP address blocks: 193.221.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:47:c7:e9:b4:0c:f3:91:13:70:42:71:09:6b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Jan 2 00:19:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ea96e06477a5102f9f597b466af7b2b40665535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:00:a3:91:2f:7d:9a:e0:cc:d2:3c:3e:7d:
1f:ee:71:70:b7:8d:b4:71:88:eb:40:3e:b0:34:86:
38:55:b6:ed:e0:cc:3d:9e:e9:63:a0:81:30:2c:8d:
4b:4a:39:76:98:71:12:69:55:f6:e2:97:c0:75:47:
17:62:30:e1:38:86:ef:bf:a4:0c:e0:c5:d3:2b:5a:
c2:7a:77:45:c0:10:74:01:74:18:4e:6e:dc:9d:c4:
f1:c2:62:7b:86:a1:51:b5:1d:20:3d:11:32:d9:c3:
af:fa:f8:ca:53:08:16:5a:5b:a2:cc:8f:d1:9c:99:
02:3f:1f:70:a4:e9:2a:a5:0e:e0:b2:f5:fb:67:83:
96:a5:0a:ab:27:02:64:7a:f7:12:4f:e4:bb:92:78:
b3:e9:f0:0c:a8:e4:33:a5:88:52:48:25:a9:dc:b0:
f6:31:ad:1d:59:2d:5a:e5:4e:24:c2:68:b0:2d:44:
3f:32:59:96:de:0f:d7:65:dc:12:d3:09:de:f8:33:
ee:2f:74:5d:ed:99:2a:d0:30:2d:3b:43:62:eb:ae:
8f:ec:59:8b:ce:8d:ff:69:c2:2a:d0:21:3b:57:97:
ce:0c:01:fb:e3:8f:c7:c1:98:70:ab:43:fe:f7:98:
c6:8d:62:45:16:32:04:b3:68:d8:c1:2a:82:d5:b1:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A9:6E:06:47:7A:51:02:F9:F5:97:B4:66:AF:7B:2B:40:66:55:35
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/TqluBkd6UQL59Ze0Zq97K0BmVTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6a:ba:a7:c3:43:6b:67:94:8d:5f:4d:eb:c2:0b:61:26:d0:
f7:34:e2:98:39:74:35:8c:bb:48:9c:78:16:76:b8:d1:d6:13:
23:5b:85:47:cf:9c:49:92:bc:3d:9c:a1:38:c9:df:e9:b8:88:
3f:b7:c2:1a:d7:fd:91:19:5e:78:d8:94:32:f4:e3:f9:c9:1d:
b8:58:2c:03:47:dc:d2:93:d6:a1:ee:02:5c:67:2b:bf:4e:0c:
55:d8:79:0d:ec:da:ec:c1:98:76:60:ae:46:dd:86:d4:31:cb:
bd:9c:ea:a2:2b:dc:31:ba:2d:5c:6d:c8:cf:87:63:93:64:f3:
a9:13:77:35:b3:2d:5e:67:84:24:b6:1e:46:4b:02:d7:0a:d2:
21:ab:b9:a3:9a:59:86:71:af:2a:43:6f:55:73:ce:a8:55:24:
2e:65:f2:88:f2:ad:4e:1d:59:88:c1:b4:3f:08:ca:d2:98:22:
89:0b:df:b6:70:22:da:e7:0d:31:ac:e5:1b:8d:a8:f2:d2:d1:
a3:87:1e:34:9d:5d:2d:29:2f:06:dc:4c:8d:94:bc:12:22:97:
ef:c5:09:85:26:e3:33:41:e3:5f:74:22:e6:bb:a0:c9:a9:c6:
62:27:89:71:03:6c:ee:30:8f:c2:d1:68:ce:df:b2:04:bd:83:
5b:aa:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:46:45 2026 by rpki-client