This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/quxQSGyWJhHDAfLuDkQyexSsWNo.roa
File: quxQSGyWJhHDAfLuDkQyexSsWNo.roa (raw, json)
Hash identifier: QJUzp2BDkvqx7iNzEofWQzAg6trEX99bkGdAFq+EWzo=
Subject key identifier: AA:EC:50:48:6C:96:26:11:C3:01:F2:EE:0E:44:32:7B:14:AC:58:DA
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019BF9EFF391A3AA7D009A32D32AFDCDD477
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/quxQSGyWJhHDAfLuDkQyexSsWNo.roa
Signing time: Mon 26 Jan 2026 10:53:30 +0000
ROA not before: Mon 26 Jan 2026 10:53:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 80.174.124.0/24 maxlen: 24
80.174.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:ef:f3:91:a3:aa:7d:00:9a:32:d3:2a:fd:cd:d4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jan 26 10:53:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaec50486c962611c301f2ee0e44327b14ac58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:db:9b:58:0e:fa:22:2a:cb:d5:02:e7:6b:
05:5f:41:a8:71:49:37:21:9a:17:f2:de:54:e2:49:
cc:8f:2f:ea:96:3d:66:2a:5e:44:20:59:04:22:9d:
e6:c6:29:f7:33:c4:8e:6f:b2:2b:f8:60:b9:ab:30:
70:bb:34:65:ef:46:3b:45:ac:32:5a:1c:59:e1:9e:
79:5a:08:76:ab:04:2f:aa:94:17:92:83:0e:6c:55:
20:62:d8:3b:02:3e:76:9c:f9:c6:c7:e1:87:67:65:
86:0f:2e:18:05:94:71:8e:7b:35:fd:04:82:91:e3:
ec:dd:75:f3:1e:8d:a7:02:17:d6:5d:34:87:2b:9c:
05:e6:08:77:36:9d:76:9e:1c:b2:23:17:22:81:6d:
af:c3:30:53:0e:10:c7:09:32:31:1c:65:39:3d:a0:
29:11:13:74:a6:2d:3a:bb:b3:82:ae:1f:2d:be:a4:
88:75:ef:43:0a:66:f0:05:fb:86:0f:b3:f7:a5:c7:
c3:fd:26:37:0c:62:e7:a1:a5:4c:93:13:d6:07:31:
92:93:ce:9d:d9:43:7d:f2:e4:f7:dd:33:3d:24:af:
2c:b4:8a:a9:12:4e:ec:63:38:08:48:14:26:a0:7f:
2b:06:59:48:b4:77:cb:37:7c:e6:a1:39:8e:f4:6c:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EC:50:48:6C:96:26:11:C3:01:F2:EE:0E:44:32:7B:14:AC:58:DA
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/quxQSGyWJhHDAfLuDkQyexSsWNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.124.0/24
80.174.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:26:37:24:c4:0a:38:80:9f:72:3c:1b:d1:14:9e:6b:49:be:
ba:75:42:f7:f9:fe:3c:6e:e8:dd:7c:8d:06:1b:44:c6:c9:ae:
ba:30:30:b4:e1:a4:fe:08:c9:20:9c:66:a6:b1:a3:43:75:df:
97:5c:a3:c5:9f:63:89:d2:1c:b3:78:6c:2b:4c:ad:58:9d:21:
65:be:74:ee:c6:73:63:cc:1b:d7:40:ee:8f:a2:8a:1a:18:ae:
eb:cb:1f:af:91:fa:af:cc:e0:c4:b5:5a:e3:db:f3:2a:4b:d0:
0d:b0:95:f2:f1:cd:17:9d:78:b3:b5:88:e4:0f:c4:0f:34:67:
a9:95:31:3e:c1:01:5b:e5:62:0a:16:24:17:b0:57:ca:4a:24:
ef:0d:93:b2:4e:ae:05:96:c7:7d:3d:b2:91:79:67:f6:aa:b3:
56:5e:57:58:2f:20:db:51:06:92:87:f3:31:3c:05:e8:76:f8:
47:29:16:85:96:cc:1e:91:c2:04:9e:9d:de:88:54:da:9d:16:
29:49:d8:f8:93:15:73:14:03:b7:f8:1b:bf:99:ee:fe:f9:52:
9b:8a:66:cd:31:07:07:e1:3a:2d:c4:4e:2d:05:76:1f:63:a6:
91:c7:2c:0c:39:d3:e7:7a:cb:2b:2b:08:09:c7:e4:23:19:df:
c8:ad:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:42:23 2026 by rpki-client