This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/q1BEcW3yDL01Np_jgFRFv-1DHcU.roa
File: q1BEcW3yDL01Np_jgFRFv-1DHcU.roa (raw, json)
Hash identifier: Y97YBZ6a5ecPlLjsFAxO1R/MZtwx3Kn20kQbNzjd2go=
Subject key identifier: AB:50:44:71:6D:F2:0C:BD:35:36:9F:E3:80:54:45:BF:ED:43:1D:C5
Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial: 019B7EA6E7143667CB54477938A8DF7A76C4
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/q1BEcW3yDL01Np_jgFRFv-1DHcU.roa
Signing time: Fri 02 Jan 2026 12:20:25 +0000
ROA not before: Fri 02 Jan 2026 12:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41692
IP address blocks: 194.54.92.0/22 maxlen: 22
2001:7f8:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:e7:14:36:67:cb:54:47:79:38:a8:df:7a:76:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
Validity
Not Before: Jan 2 12:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab5044716df20cbd35369fe3805445bfed431dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:57:1a:0b:58:f8:d3:90:16:6b:63:60:19:
46:64:f6:a1:bd:97:f5:bf:a2:5b:32:2e:1e:92:fd:
e4:28:7e:b8:f1:e9:a4:31:e3:4d:e9:8c:5a:2a:86:
85:31:d6:eb:9f:5e:11:6c:9b:ac:91:38:77:09:df:
de:c5:9f:67:18:f8:71:3d:00:b6:36:18:4f:23:25:
d4:86:25:95:da:9e:2a:d9:49:ef:e8:97:db:6b:a9:
43:a2:5a:dd:da:3f:ed:99:14:fc:e3:26:d3:3b:86:
a0:bb:85:69:c5:0c:8e:ae:1d:2f:39:58:73:e4:47:
d2:26:d6:b8:6f:48:e9:de:ea:be:28:07:44:09:ce:
9b:f2:a9:f5:41:f8:ce:de:0b:1a:a3:24:49:13:7f:
75:68:c6:5a:e8:c8:a5:f5:e5:bb:65:e8:0d:2f:83:
6e:b3:fe:a0:99:0e:e6:b1:5b:b6:e3:96:aa:37:ba:
11:c2:47:a5:a7:3f:48:14:63:87:85:88:80:7d:e9:
a5:78:52:61:18:65:b4:da:8c:45:50:96:10:23:94:
b6:0a:b2:80:88:2b:88:77:0f:35:99:7b:e3:00:25:
26:58:b6:8b:91:de:0e:25:06:9f:e3:0c:08:ba:fb:
9e:35:9a:c8:d3:24:d5:40:01:9c:a1:c9:36:e3:09:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:44:71:6D:F2:0C:BD:35:36:9F:E3:80:54:45:BF:ED:43:1D:C5
X509v3 Authority Key Identifier:
keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/q1BEcW3yDL01Np_jgFRFv-1DHcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.92.0/22
IPv6:
2001:7f8:3a::/48
Signature Algorithm: sha256WithRSAEncryption
18:85:aa:d6:7e:d5:94:7d:e5:4d:83:6a:d2:03:21:aa:ee:11:
e2:90:c1:d5:2e:bc:ea:f7:0c:74:81:f9:3a:39:57:de:95:0e:
51:0c:0c:3d:94:2c:21:c7:df:ba:2c:65:9b:e9:43:01:c0:f6:
1c:3f:c6:1c:1e:ec:37:40:5e:5f:1e:56:ba:fd:10:9c:1c:43:
d3:2c:e3:79:57:22:20:36:f7:13:01:72:bf:c6:d0:35:66:8a:
a5:6f:5b:45:55:52:bb:fd:81:96:9f:6d:3f:4f:f2:48:09:9f:
e3:6c:12:96:2d:87:fe:21:e0:aa:f4:ee:b3:f4:2e:19:77:4f:
17:35:df:50:00:01:f0:e4:cf:b5:95:39:c3:da:cd:c9:76:83:
94:5a:9c:49:33:97:cc:fc:3a:a3:bb:50:d1:40:7a:f6:f0:21:
10:62:60:32:1f:3c:95:a4:33:ee:56:dd:9e:8a:34:68:a3:dc:
3d:bf:5e:62:df:2e:57:e7:f9:58:76:48:f4:22:98:51:d2:d3:
b8:40:76:b3:85:a7:50:6a:0e:28:77:d3:24:dc:75:0a:02:91:
99:09:60:f3:9b:3e:9c:b4:db:5c:49:c5:29:31:05:ca:32:63:
d0:8c:f1:f5:78:12:76:f3:6b:5d:db:26:9a:2f:4f:3f:9a:87:
f3:17:20:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt+pucUNmfLVEd5OKjfenbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDk5MzMxOWRjYzkyOTc2OTQzMThiMjQ2ZWIzNmY1NWZm
MTM3MGUwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjUwNDQ3MTZkZjIwY2JkMzUzNjlmZTM4MDU0NDViZmVkNDMxZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbZXGgtY+NOQFmtjYBlGZPahvZf1
v6JbMi4ekv3kKH648emkMeNN6YxaKoaFMdbrn14RbJuskTh3Cd/exZ9nGPhxPQC2
NhhPIyXUhiWV2p4q2Unv6Jfba6lDolrd2j/tmRT84ybTO4agu4VpxQyOrh0vOVhz
5EfSJta4b0jp3uq+KAdECc6b8qn1QfjO3gsaoyRJE391aMZa6Mil9eW7ZegNL4Nu
s/6gmQ7msVu245aqN7oRwkelpz9IFGOHhYiAfemleFJhGGW02oxFUJYQI5S2CrKA
iCuIdw81mXvjACUmWLaLkd4OJQaf4wwIuvueNZrI0yTVQAGcock24wkVDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKtQRHFt8gy9NTaf44BURb/tQx3FMB8GA1UdIwQY
MBaAFFfZkzGdzJKXaUMYskbrNvVf8TcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEt
MDNhZmFjZWE3MDEwLzEvcTFCRWNXM3lETDAxTnBfamdGUkZ2LTFESGNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEtMDNhZmFjZWE3MDEw
LzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwjZcMA8E
AgACMAkDBwAgAQf4ADowDQYJKoZIhvcNAQELBQADggEBABiFqtZ+1ZR95U2DatID
IaruEeKQwdUuvOr3DHSB+To5V96VDlEMDD2ULCHH37osZZvpQwHA9hw/xhwe7DdA
Xl8eVrr9EJwcQ9Ms43lXIiA29xMBcr/G0DVmiqVvW0VVUrv9gZafbT9P8kgJn+Ns
EpYth/4h4Kr07rP0Lhl3Txc131AAAfDkz7WVOcPazcl2g5RanEkzl8z8OqO7UNFA
evbwIRBiYDIfPJWkM+5W3Z6KNGij3D2/XmLfLlfn+Vh2SPQimFHS07hAdrOFp1Bq
Dih30yTcdQoCkZkJYPObPpy021xJxSkxBcoyY9CM8fV4Enbza13bJpovTz+ah/MX
IFY=
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:17 2026 by rpki-client