This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/0qhRZLS2JZVVx8nTC26n0U7SDh4.roa
File: 0qhRZLS2JZVVx8nTC26n0U7SDh4.roa (raw, json)
Hash identifier: jAbPTgDQxiaTLgkx31iLl4EowXyC47bVxOPn9G7oGww=
Subject key identifier: D2:A8:51:64:B4:B6:25:95:55:C7:C9:D3:0B:6E:A7:D1:4E:D2:0E:1E
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019C31F47FBE88EEDECA1F6ED1D6194E7CCC
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/0qhRZLS2JZVVx8nTC26n0U7SDh4.roa
Signing time: Fri 06 Feb 2026 07:57:12 +0000
ROA not before: Fri 06 Feb 2026 07:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 188.125.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:f4:7f:be:88:ee:de:ca:1f:6e:d1:d6:19:4e:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Feb 6 07:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2a85164b4b6259555c7c9d30b6ea7d14ed20e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:40:27:8e:be:f7:9e:c0:b4:2e:73:cd:9b:
fd:64:27:a2:46:a6:b4:72:0c:0e:2c:49:db:a8:d2:
ac:25:df:da:7a:1c:ad:b1:bc:e4:c0:69:66:dc:50:
b4:d6:e3:4a:81:f9:b1:b1:a1:b0:4f:83:40:2b:73:
a8:d2:74:2b:0b:05:5e:32:cb:73:4a:55:0a:2e:96:
54:61:22:07:80:2b:34:14:fe:3a:4a:89:03:67:ff:
9f:8c:58:95:a8:0b:a7:d8:53:a5:50:b5:f8:98:6c:
cb:26:84:6a:00:59:bf:1a:9b:be:d5:fe:07:e8:3b:
27:f5:36:cf:19:0d:3d:72:79:dd:e7:1a:fc:5c:5a:
9c:fb:ba:73:3e:13:bd:a0:de:c9:dd:34:a8:ca:a9:
4b:e8:06:5e:67:35:1c:96:39:41:20:a8:f0:8d:71:
e7:66:51:b5:e6:cb:bd:ad:be:c9:03:47:f5:89:6e:
c6:7a:5b:d8:d9:c4:61:ad:6f:e5:01:06:1e:a6:48:
ba:37:67:85:95:8b:96:2d:4d:93:1a:f1:ea:66:c4:
46:23:04:23:05:1d:85:2b:82:a6:be:4b:cb:7e:36:
bc:86:2d:45:9c:53:31:0a:c5:a3:f5:6a:4b:89:8a:
cc:c7:97:84:ec:25:53:f7:df:92:bd:2b:1f:0c:7d:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:51:64:B4:B6:25:95:55:C7:C9:D3:0B:6E:A7:D1:4E:D2:0E:1E
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/0qhRZLS2JZVVx8nTC26n0U7SDh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.166.0/24
Signature Algorithm: sha256WithRSAEncryption
32:92:d1:8e:e0:10:91:46:ad:5c:66:c2:63:99:9d:a5:a2:81:
43:3f:81:bd:14:da:29:d5:e6:34:76:a2:b7:8b:41:32:38:7b:
60:4a:b7:5f:06:d7:65:31:bb:c1:e6:36:0d:93:c1:6b:d0:1b:
0b:51:24:18:99:f4:62:00:41:b1:c9:a5:a3:c3:50:42:9b:20:
e7:00:77:7b:b1:09:97:4c:0e:1f:f8:65:09:96:b3:af:da:9a:
97:aa:11:0f:da:67:ea:44:50:c2:9e:35:b9:c1:57:87:39:30:
60:74:dd:6f:67:8c:41:f5:8c:e3:81:3f:2c:bb:93:6a:ef:b5:
1e:91:b6:b4:db:ce:1b:5a:aa:f8:bf:b1:cb:d8:8e:ce:a2:21:
5a:c5:9f:36:4f:9c:ae:29:a2:f4:cf:0a:7d:dd:48:4f:c4:2a:
f1:b0:22:36:0a:fc:b8:d8:d5:9a:2d:84:3f:86:ac:1b:24:b4:
17:ae:48:1a:5c:01:e8:e7:48:ff:a7:a2:f6:b0:2e:5f:59:4c:
65:94:7b:81:9c:67:00:54:34:a0:51:34:39:41:28:5f:3d:ce:
cc:b4:2a:09:47:37:50:0a:c3:b2:2a:ef:e3:6d:fb:79:3c:32:
f2:4d:b8:d0:ab:32:07:aa:fd:ce:9f:43:62:37:d6:a0:ed:52:
19:24:9d:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwx9H++iO7eyh9u0dYZTnzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw
YTdkZGIwHhcNMjYwMjA2MDc1NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmE4NTE2NGI0YjYyNTk1NTVjN2M5ZDMwYjZlYTdkMTRlZDIwZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49xAJ46+957AtC5zzZv9ZCeiRqa0
cgwOLEnbqNKsJd/aehytsbzkwGlm3FC01uNKgfmxsaGwT4NAK3Oo0nQrCwVeMstz
SlUKLpZUYSIHgCs0FP46SokDZ/+fjFiVqAun2FOlULX4mGzLJoRqAFm/Gpu+1f4H
6Dsn9TbPGQ09cnnd5xr8XFqc+7pzPhO9oN7J3TSoyqlL6AZeZzUcljlBIKjwjXHn
ZlG15su9rb7JA0f1iW7GelvY2cRhrW/lAQYepki6N2eFlYuWLU2TGvHqZsRGIwQj
BR2FK4KmvkvLfja8hi1FnFMxCsWj9WpLiYrMx5eE7CVT99+SvSsfDH0WCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNKoUWS0tiWVVcfJ0wtup9FO0g4eMB8GA1UdIwQY
MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt
MDRhYzE3ODgxYWE5LzEvMHFoUlpMUzJKWlZWeDhuVEMyNm4wVTdTRGg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5
LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvH2mMA0G
CSqGSIb3DQEBCwUAA4IBAQAyktGO4BCRRq1cZsJjmZ2looFDP4G9FNop1eY0dqK3
i0EyOHtgSrdfBtdlMbvB5jYNk8Fr0BsLUSQYmfRiAEGxyaWjw1BCmyDnAHd7sQmX
TA4f+GUJlrOv2pqXqhEP2mfqRFDCnjW5wVeHOTBgdN1vZ4xB9YzjgT8su5Nq77Ue
kba0284bWqr4v7HL2I7OoiFaxZ82T5yuKaL0zwp93UhPxCrxsCI2Cvy42NWaLYQ/
hqwbJLQXrkgaXAHo50j/p6L2sC5fWUxllHuBnGcAVDSgUTQ5QShfPc7MtCoJRzdQ
CsOyKu/jbft5PDLyTbjQqzIHqv3On0NiN9ag7VIZJJ1J
-----END CERTIFICATE-----
Generated at Tue Feb 10 10:14:38 2026 by rpki-client