This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/q1jBfLjL1kb_PCa_qTBjMZyucu0.roa
File: q1jBfLjL1kb_PCa_qTBjMZyucu0.roa (raw, json)
Hash identifier: /UBBiN7oTDbe2+3aCUtdKp43MVDaJatnqNvvyJu2c6k=
Subject key identifier: AB:58:C1:7C:B8:CB:D6:46:FF:3C:26:BF:A9:30:63:31:9C:AE:72:ED
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 019B79ECD57E03C9A7AA2410792E6796F8E9
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/q1jBfLjL1kb_PCa_qTBjMZyucu0.roa
Signing time: Thu 01 Jan 2026 14:18:42 +0000
ROA not before: Thu 01 Jan 2026 14:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206241
IP address blocks: 212.87.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:d5:7e:03:c9:a7:aa:24:10:79:2e:67:96:f8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 14:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab58c17cb8cbd646ff3c26bfa93063319cae72ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:49:21:ac:93:62:a2:41:86:40:0b:d3:d9:
84:cf:e8:5d:0f:f0:2e:42:aa:f7:ee:1f:63:88:60:
46:fd:3d:32:a6:83:63:b6:75:a6:79:54:ce:43:2a:
e3:1c:37:95:9e:44:e1:f8:c7:8d:99:4c:6a:ee:f9:
1c:42:b2:89:7e:89:ab:64:93:5c:1e:e2:60:f4:02:
54:aa:0b:c8:bd:1f:75:b2:72:7c:72:3a:d0:7f:06:
b6:00:71:01:35:54:c1:36:82:96:76:5a:2f:30:e8:
ce:dd:03:76:35:63:c4:11:56:25:26:6d:cb:40:a0:
c4:70:1a:7e:68:c6:f1:64:2d:b9:18:ec:ae:a0:92:
bf:a1:22:41:d3:1f:d3:07:71:9f:9b:b2:74:bf:2e:
99:8c:e3:30:6b:1e:6b:14:88:8c:1f:20:bc:e1:15:
13:fd:56:41:b1:ca:cc:f0:3e:8b:d9:21:5f:86:a1:
5e:e2:26:bf:55:cc:eb:d2:7e:96:0b:d4:7c:f5:ad:
45:e5:a9:f8:c6:d6:de:b6:aa:26:71:36:c7:f1:f9:
e9:25:de:82:37:3c:d9:aa:f1:cb:41:47:74:9b:07:
c1:76:18:1a:da:ba:05:e5:b5:ef:8a:90:91:bb:07:
98:6a:8f:ad:05:73:cc:49:f2:27:ff:c8:88:98:1a:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:C1:7C:B8:CB:D6:46:FF:3C:26:BF:A9:30:63:31:9C:AE:72:ED
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/q1jBfLjL1kb_PCa_qTBjMZyucu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:52:df:95:04:b1:8a:51:27:c8:1f:c5:04:d6:f4:2a:6b:b0:
4d:53:aa:7b:da:55:c9:fb:ca:ea:c0:2a:29:bf:61:f2:d1:d8:
f5:3a:56:d9:57:c1:31:5f:c6:36:8e:32:7b:a1:1f:6f:9c:2d:
73:b7:03:be:f1:da:99:a3:fb:38:44:8b:90:ed:1d:f3:30:fe:
e8:ac:ea:10:50:29:4d:77:f8:2e:d9:b9:b0:dd:09:d7:36:20:
4b:89:e2:25:a7:5b:85:63:fe:95:64:08:cd:8d:14:44:f8:22:
84:d2:c7:7d:6f:da:cf:8c:37:36:29:46:df:ae:22:f5:72:11:
c3:e0:22:db:57:63:5c:80:15:81:fd:40:6a:96:ca:04:92:7c:
7b:f9:fe:36:3e:73:43:2e:f9:ec:bd:42:9e:40:8f:2d:71:6e:
fd:b6:01:3f:ae:11:f5:43:67:cc:7a:09:d3:49:7b:17:3f:b1:
fa:6b:1b:06:45:5a:44:3a:2e:de:6c:49:88:8b:ad:c3:49:7e:
f0:15:6e:16:56:79:f6:cb:f8:d6:28:6b:a3:1a:52:2b:46:9c:
af:b8:47:77:c3:92:9b:c7:59:cd:f4:e6:2e:94:85:34:93:22:
e7:eb:df:18:79:e3:a5:fe:e9:ed:29:79:20:20:c5:0e:c7:5c:
0c:e5:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:21:43 2026 by rpki-client