This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/qOlFxZL8qRvtCfn6pv83b3CjTWk.roa
File: qOlFxZL8qRvtCfn6pv83b3CjTWk.roa (raw, json)
Hash identifier: yAGRaZNO2UXU7Vp3V5rpWxYXofVJuCbat4KTkM4jlWI=
Subject key identifier: A8:E9:45:C5:92:FC:A9:1B:ED:09:F9:FA:A6:FF:37:6F:70:A3:4D:69
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 019B7E3768498A4AE3E31FBB50A8DBE5F0FA
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/qOlFxZL8qRvtCfn6pv83b3CjTWk.roa
Signing time: Fri 02 Jan 2026 10:18:38 +0000
ROA not before: Fri 02 Jan 2026 10:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210962
IP address blocks: 194.26.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:68:49:8a:4a:e3:e3:1f:bb:50:a8:db:e5:f0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jan 2 10:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8e945c592fca91bed09f9faa6ff376f70a34d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:3c:b7:35:dd:47:39:65:97:3b:54:9c:df:
c1:6b:21:df:21:5b:f5:ca:45:dd:68:22:a0:d2:ec:
d2:03:f3:a6:3f:93:cd:af:f0:1e:37:1c:ee:fa:d6:
98:f7:af:7d:90:c6:a6:1d:29:8c:10:11:27:13:96:
ca:7e:b8:a4:ea:55:b1:aa:41:56:54:76:69:86:18:
cc:7f:25:54:06:24:9c:b1:0c:df:b1:44:02:34:05:
04:d7:0c:58:f4:47:19:57:de:0c:3b:00:99:ed:cf:
6f:fc:a8:6b:1d:81:24:5d:03:9a:09:e6:02:c6:14:
50:c1:14:d4:fa:95:4c:8f:37:c5:79:8a:6c:e9:73:
d1:97:ae:3b:df:f1:f9:56:ed:52:69:79:19:89:3d:
f4:0b:c3:f4:27:5d:c9:9d:29:48:2d:73:93:07:4d:
3d:3f:41:5e:df:8d:d0:b7:bb:3b:1e:89:ff:2e:dc:
05:7e:86:4d:a1:e2:aa:c2:19:af:ca:36:11:b8:2e:
3e:b3:e5:87:60:2b:e7:a9:5a:6a:82:cf:4f:0a:5f:
2c:ee:ad:19:48:7f:97:2c:42:58:73:56:03:4d:23:
6b:cd:49:81:08:8b:de:74:07:db:9f:1d:04:ef:a0:
d5:b7:49:6f:af:e3:53:22:12:e8:58:47:54:4b:fe:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:45:C5:92:FC:A9:1B:ED:09:F9:FA:A6:FF:37:6F:70:A3:4D:69
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/qOlFxZL8qRvtCfn6pv83b3CjTWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:20:4c:b9:52:e9:3f:30:96:d5:04:03:a1:30:8a:18:c4:0f:
5e:36:ff:d9:b4:b0:dd:29:f2:d3:f4:51:73:d2:c8:c9:45:0f:
07:4a:b4:a3:24:b8:c8:63:b5:d7:77:1d:f6:22:ef:d0:cb:6b:
ab:40:35:14:65:cb:80:17:16:56:4d:13:94:a6:90:3c:6a:f7:
dd:f7:cb:73:27:b3:08:a4:cc:1f:8f:f8:d6:a8:a8:f9:94:41:
78:e7:34:62:81:57:a6:0b:5d:a1:ec:b2:9e:d9:94:ce:e2:09:
89:97:87:47:f8:88:e3:b6:9b:c9:4a:f0:ea:14:c4:0f:c4:14:
a4:bd:bc:7d:2d:22:d3:a1:05:44:d3:f1:7a:ee:f8:92:2e:3e:
7e:1a:ac:ed:91:5d:21:72:94:12:38:cf:12:a1:bf:19:9f:3b:
37:bd:91:cb:c3:17:63:2b:39:d2:79:ef:3e:17:85:8a:3e:c1:
6d:97:42:a3:f6:ea:e3:da:d9:2f:43:c4:6f:a7:f0:50:67:b0:
f4:98:9f:35:47:c7:15:3e:97:e2:f9:1f:2f:49:71:fe:04:b5:
65:42:f2:11:68:7d:20:a8:e0:ec:c2:0b:94:5b:5d:7b:2c:f5:
d5:0a:dd:b6:f1:de:33:92:02:2b:11:c9:5d:00:08:29:ae:54:
b2:78:08:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:23 2026 by rpki-client