This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/qkfb5dgXrvL76Dgcof3UGGpLsV4.roa
File: qkfb5dgXrvL76Dgcof3UGGpLsV4.roa (raw, json)
Hash identifier: Kw++qitEj/WGMIrnlQb0PcDTMOh4VFy1to3tIAXAWJs=
Subject key identifier: AA:47:DB:E5:D8:17:AE:F2:FB:E8:38:1C:A1:FD:D4:18:6A:4B:B1:5E
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 019B7B354DF8739E2A8FED7E687C7188930C
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/qkfb5dgXrvL76Dgcof3UGGpLsV4.roa
Signing time: Thu 01 Jan 2026 20:17:29 +0000
ROA not before: Thu 01 Jan 2026 20:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57067
IP address blocks: 176.62.144.0/21 maxlen: 21
176.62.144.0/24 maxlen: 24
176.62.145.0/24 maxlen: 24
176.62.146.0/24 maxlen: 24
176.62.147.0/24 maxlen: 24
176.62.148.0/24 maxlen: 24
176.62.149.0/24 maxlen: 24
176.62.150.0/24 maxlen: 24
176.62.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:4d:f8:73:9e:2a:8f:ed:7e:68:7c:71:88:93:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Jan 1 20:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa47dbe5d817aef2fbe8381ca1fdd4186a4bb15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:85:c1:99:52:d9:96:bd:e7:8e:86:24:0e:
87:c3:55:68:3b:e4:aa:6d:79:4b:c6:bc:30:ab:b9:
11:8c:4c:53:16:d4:b9:73:ab:fe:09:8b:8f:95:d8:
07:ef:18:cb:d2:54:0e:bf:c8:a0:0e:e4:6d:57:a7:
94:ed:b7:e3:d4:b7:51:7a:80:a2:45:3c:86:0c:57:
15:7e:7f:26:c3:9e:c8:6e:41:f5:38:ac:6a:a7:d7:
00:9d:de:4d:49:15:62:ca:80:a4:d4:71:bc:a9:3e:
5e:8d:2a:11:2a:b7:24:e9:76:49:b8:a4:d1:bc:09:
c3:9b:bf:e2:98:db:a3:8d:5a:7f:c6:f6:48:65:5c:
b0:01:0a:e0:ae:49:1e:d9:e8:c1:b4:3e:f0:3b:6b:
e8:38:56:8e:80:04:07:c0:65:7b:31:ed:42:70:85:
e2:16:bb:7b:c0:35:7f:c7:f0:fb:a3:63:d5:9f:78:
06:03:f9:d6:e4:e2:1e:81:54:d4:55:a5:ab:03:3f:
13:a5:8f:f1:d3:3f:33:44:42:71:05:da:0e:d2:10:
44:cb:37:19:4e:32:82:fb:af:fe:1d:d3:91:75:98:
16:9b:e7:a7:e1:3d:2a:fe:76:6f:a1:6c:f5:dc:8b:
bd:f4:12:78:87:e5:5f:02:35:93:49:f6:29:7d:26:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:47:DB:E5:D8:17:AE:F2:FB:E8:38:1C:A1:FD:D4:18:6A:4B:B1:5E
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/qkfb5dgXrvL76Dgcof3UGGpLsV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.144.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:e6:e2:b9:67:43:47:76:ac:e4:08:94:23:08:1f:03:64:80:
e8:a8:34:6f:41:37:29:cf:fc:50:50:cc:30:61:4a:08:8b:3b:
c7:54:3a:71:61:3e:37:bb:2d:f3:3d:7c:71:e8:78:dc:99:21:
a0:aa:83:04:90:09:16:32:ed:1a:61:c7:61:4d:16:92:ce:14:
0e:b3:d9:98:89:66:18:67:9e:80:37:3b:05:85:20:9c:93:49:
29:75:c7:8a:8a:69:79:e0:cb:1e:a5:f0:f1:62:2a:59:44:db:
5c:96:7e:fa:87:0c:b2:f7:eb:65:57:62:e2:75:d9:49:e6:d5:
43:ac:97:15:1c:63:13:27:ba:4d:82:24:1b:59:b4:d8:15:f4:
f5:be:2f:4f:8e:40:5c:2c:41:31:3e:a9:4e:76:8b:9e:4c:0d:
39:7a:3c:36:ad:ad:f1:23:b6:a3:c5:14:20:c7:ec:cd:65:e8:
82:e3:43:56:1a:1f:76:66:f2:a4:94:72:73:2b:fc:15:b8:4f:
14:75:31:9b:5a:3b:77:f2:8b:2b:f5:45:9e:5d:c7:a2:14:91:
c7:a3:b8:c9:fb:5d:04:27:38:03:e5:aa:2e:0d:04:6e:27:a1:
4a:05:52:77:6f:5f:13:47:8c:e0:c2:57:55:e2:9b:76:09:51:
b2:fe:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:08 2026 by rpki-client