This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qEbYFQoXre_OuLtdayPj8liTJCA.roa
File: qEbYFQoXre_OuLtdayPj8liTJCA.roa (raw, json)
Hash identifier: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=
Subject key identifier: A8:46:D8:15:0A:17:AD:EF:CE:B8:BB:5D:6B:23:E3:F2:58:93:24:20
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019B7D5C76FEBC784B2C6D7E3A1A97B35D20
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qEbYFQoXre_OuLtdayPj8liTJCA.roa
Signing time: Fri 02 Jan 2026 06:19:30 +0000
ROA not before: Fri 02 Jan 2026 06:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7721
IP address blocks: 2a13:b487:1200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:76:fe:bc:78:4b:2c:6d:7e:3a:1a:97:b3:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 06:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a846d8150a17adefceb8bb5d6b23e3f258932420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:4a:e5:47:c9:87:2c:4c:41:58:72:ea:bc:
9f:32:13:2f:34:c4:4e:a4:4b:12:d5:5e:70:7a:93:
0c:e8:10:20:77:19:30:0b:28:db:40:66:b1:78:c8:
06:8f:af:09:ae:70:c7:15:19:aa:6c:af:d1:a2:fc:
dd:f8:1a:dc:de:07:79:26:6f:f0:e0:da:88:f8:92:
f8:3c:52:37:c2:46:89:2a:69:7c:27:11:86:0f:f1:
93:0c:ab:6f:73:c1:66:1e:aa:20:b0:91:a8:31:69:
97:33:ef:b4:13:17:e2:c0:85:92:3c:3c:4b:9c:cf:
dc:2b:c5:8f:46:df:01:0e:1d:e8:2f:f5:33:ff:b7:
ec:2f:fd:75:83:94:bd:f3:67:f9:74:fc:f0:26:0f:
52:d5:ca:77:ff:23:61:35:fd:9f:a7:ae:74:df:1b:
82:67:38:c9:d8:50:68:63:c4:c2:aa:2f:e3:bb:03:
af:00:91:21:7b:8f:68:95:3d:dd:17:2d:78:4c:0a:
cf:c3:1b:07:15:5e:28:2b:26:ad:e0:6d:f6:18:9e:
f1:55:38:71:5f:b6:64:83:ed:e1:8f:07:b9:c2:32:
d7:22:93:4a:60:dd:6f:1e:c9:21:db:dd:e3:fd:ee:
35:7e:02:3e:a3:4a:7d:af:ab:ed:43:f0:5d:b6:43:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:D8:15:0A:17:AD:EF:CE:B8:BB:5D:6B:23:E3:F2:58:93:24:20
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qEbYFQoXre_OuLtdayPj8liTJCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1200::/40
Signature Algorithm: sha256WithRSAEncryption
74:28:b7:c4:fb:dd:1e:23:aa:bf:36:18:b1:37:06:55:8d:ac:
6a:80:b1:fc:ac:5b:d4:5c:2f:0c:11:66:97:be:73:7d:26:8c:
af:a5:6e:f3:8e:a4:5b:01:13:e6:46:38:dd:80:b8:78:99:51:
49:07:60:b7:33:cc:f9:0d:cd:7e:9e:d5:b9:8a:0a:12:3c:4e:
5d:01:1b:eb:e6:ca:af:dd:86:78:5a:03:a2:d1:0f:5e:ef:2c:
ed:fc:21:12:99:0e:ee:a8:96:fb:ac:4c:bd:67:5d:cc:75:ba:
63:ed:ad:1f:f9:62:9f:0f:2d:38:7a:fe:a4:63:31:10:b0:1f:
d3:55:02:c8:bb:72:6d:67:98:5f:03:c1:5b:fd:73:0c:12:1b:
9f:05:bb:dc:c0:99:8a:3d:92:f8:fc:56:30:36:75:5a:3c:5d:
06:39:86:b5:ce:d7:a7:5a:39:46:b8:c4:0d:74:2b:4e:a7:ba:
40:5e:c0:49:8b:e8:15:c1:73:f4:1a:79:69:df:7c:3c:29:74:
81:14:70:6b:ac:35:c3:3b:ff:3b:25:a7:4a:c5:ba:47:24:11:
ea:93:b3:40:8c:ae:69:bd:da:d8:57:5f:3b:55:82:31:31:9b:
9f:5d:27:80:e4:d5:8f:7e:25:78:8b:45:46:ac:ef:57:15:94:
b5:50:5c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 06:18:43 2026 by rpki-client