This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Q5KjtFuA4b13GYFReAXac6ikxMM.roa
File: Q5KjtFuA4b13GYFReAXac6ikxMM.roa (raw, json)
Hash identifier: C9lFOLqvB3UVVYIvZafTYRaPsoOOXhpw7/LoWS9f3HY=
Subject key identifier: 43:92:A3:B4:5B:80:E1:BD:77:19:81:51:78:05:DA:73:A8:A4:C4:C3
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019B7E388A21C19DFA81F3AE47F80CCA1D75
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Q5KjtFuA4b13GYFReAXac6ikxMM.roa
Signing time: Fri 02 Jan 2026 10:19:53 +0000
ROA not before: Fri 02 Jan 2026 10:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200422
IP address blocks: 94.155.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:8a:21:c1:9d:fa:81:f3:ae:47:f8:0c:ca:1d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 10:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4392a3b45b80e1bd771981517805da73a8a4c4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:07:4f:02:65:15:1e:14:27:0b:e8:f9:ab:
e8:0a:fd:48:bc:05:37:0b:f0:c2:91:68:83:2c:b0:
c8:5e:26:d9:69:80:8c:07:8a:59:89:21:34:94:0a:
3e:92:f2:97:75:63:7e:bc:7b:cd:a8:4d:27:33:5f:
ff:86:af:96:5d:06:f4:9c:ac:3a:b5:e4:74:8f:e7:
97:9b:d4:d9:40:ce:06:0e:38:c5:ed:83:8b:0b:e6:
50:c3:02:b9:e4:da:9a:87:75:fd:1c:11:b4:1c:6d:
bf:13:e9:f8:e2:d4:fe:49:e8:4c:16:5f:1c:ae:31:
cd:f0:3a:6b:a6:03:b1:e7:54:f6:ea:66:10:fc:52:
92:29:6a:ec:c4:87:77:26:46:46:f4:41:12:02:94:
be:00:57:30:6d:96:4c:74:36:36:b1:91:d3:59:9a:
0b:ff:1e:32:c2:e1:c3:20:09:22:48:37:94:aa:95:
bd:01:60:e3:c5:2c:6c:1e:62:9e:29:d4:c1:22:f0:
ea:4f:a4:59:f1:25:c9:46:e8:77:9f:d2:25:23:ae:
61:f2:8a:f6:4c:3f:2b:33:af:85:3e:32:e9:aa:cd:
68:3f:17:d6:cb:fe:87:82:2b:e1:4a:32:e9:ef:c1:
fd:02:56:5f:8a:f9:0d:fe:29:55:be:5f:75:d7:17:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:A3:B4:5B:80:E1:BD:77:19:81:51:78:05:DA:73:A8:A4:C4:C3
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Q5KjtFuA4b13GYFReAXac6ikxMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
30:62:69:60:db:fe:18:8c:93:b9:7a:ea:fd:3e:82:32:94:a2:
a2:63:f4:e7:01:70:9a:6b:81:71:2b:44:ff:17:86:3b:66:55:
31:44:b1:53:0b:16:e7:48:e8:25:2f:b4:64:b3:1c:7b:7d:2c:
8c:2e:89:4e:78:0a:24:d9:ca:2a:6d:73:b6:e3:b6:6e:18:55:
a8:84:aa:de:79:c7:31:f1:65:6a:ce:85:da:2d:71:28:13:13:
95:6a:87:b6:50:52:1d:3f:d8:8e:0c:68:32:24:f6:13:de:43:
48:09:d8:16:43:8d:77:a5:30:9a:e3:2d:39:ed:a8:3c:3c:fe:
47:a8:4c:48:29:fe:05:c7:2b:39:62:50:65:f5:f7:ef:54:d0:
df:85:1f:28:29:89:9e:85:46:b8:9c:78:a1:bd:e5:d5:e3:32:
97:e7:18:69:7a:11:5e:19:a6:92:8a:85:5e:d4:f6:4a:99:d5:
e3:b0:dd:af:25:6d:c9:ce:78:02:f0:9b:a7:7f:cb:a3:15:f6:
62:d7:d4:06:c5:f4:f5:dd:3e:e1:82:cc:be:5b:7d:9e:9a:31:
10:d1:89:dd:26:a3:60:6c:59:b9:bb:3a:9e:73:74:ad:a1:aa:
77:1c:62:37:53:6b:1f:9f:5b:4b:38:df:a0:6e:85:9e:a4:f8:
6a:0e:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:54 2026 by rpki-client