This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qg1swg6GgwaDcP5Y6flBD_xD-oc.roa
File: qg1swg6GgwaDcP5Y6flBD_xD-oc.roa (raw, json)
Hash identifier: 6EZ8yz4pLpv5/Nb1v6JfBJ6hb6IZGN5B51VwiFJJYpQ=
Subject key identifier: AA:0D:6C:C2:0E:86:83:06:83:70:FE:58:E9:F9:41:0F:FC:43:FA:87
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019B7AC790466EACCE88FECF306E8638A8D2
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qg1swg6GgwaDcP5Y6flBD_xD-oc.roa
Signing time: Thu 01 Jan 2026 18:17:37 +0000
ROA not before: Thu 01 Jan 2026 18:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47440
IP address blocks: 87.247.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:90:46:6e:ac:ce:88:fe:cf:30:6e:86:38:a8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 18:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa0d6cc20e8683068370fe58e9f9410ffc43fa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f5:25:f1:f3:eb:76:98:61:1e:55:1f:f1:80:
ad:5a:2c:ab:9a:be:3e:47:85:6e:6d:cc:66:ef:f1:
50:65:5d:ad:2b:93:e8:16:40:fc:07:8f:f5:07:16:
1d:53:e7:c2:97:f4:5c:4e:8e:1e:e8:12:12:fe:1e:
46:ff:a3:9f:e7:fe:62:33:99:1a:00:a4:32:39:14:
fc:e5:6c:79:da:a0:6e:19:c2:33:a3:32:b5:ee:d4:
fb:b1:e6:70:62:cc:cd:30:4c:b0:fb:7f:c6:e0:ab:
7b:5d:28:39:a2:ad:2d:88:62:14:3e:39:b8:29:c9:
4a:d1:78:52:88:2c:62:c2:cf:0f:e7:d8:81:66:88:
05:2f:a6:83:c5:f9:07:ec:b2:22:e9:58:00:04:91:
7c:cf:a9:5d:3f:4e:b9:fc:73:8b:f7:d9:73:00:91:
86:d8:df:26:3a:df:35:5a:0b:bb:af:80:9c:4b:b0:
6b:2d:4e:8e:8e:48:2a:5e:33:d3:99:e5:f4:7a:a3:
7e:d9:fc:65:88:9a:3a:89:8d:a9:36:9f:27:78:ca:
6c:a5:a6:28:98:74:42:be:1f:8e:c5:fe:22:c6:40:
43:88:36:a3:f2:74:4c:3a:ba:d2:ef:ce:e9:12:bf:
df:0b:47:ac:9d:20:9e:e7:04:7e:6c:d4:ef:1a:e0:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:6C:C2:0E:86:83:06:83:70:FE:58:E9:F9:41:0F:FC:43:FA:87
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qg1swg6GgwaDcP5Y6flBD_xD-oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:91:9f:7d:84:54:dc:56:fa:a7:10:7b:48:17:33:dc:6c:d4:
25:9c:60:9e:02:74:20:1f:7b:b0:60:0c:da:b9:cd:1e:2f:ed:
18:c5:75:58:94:65:cb:c6:f5:94:c2:40:28:87:a1:61:c3:6d:
4f:42:eb:6a:8a:34:6f:25:bd:ce:f6:ff:f3:75:e8:85:55:9a:
2e:bf:3d:b1:e0:6c:3b:51:fa:a9:9b:93:97:83:a6:51:13:1d:
2f:f8:f1:a0:64:34:d2:01:67:c8:51:34:c9:a7:9a:f6:1f:be:
0d:24:2b:3b:c0:28:8d:f4:ca:96:df:e9:0e:af:26:50:be:29:
4c:72:bb:48:d5:fd:28:29:a8:41:20:2d:9c:d1:87:2b:8c:a0:
75:7d:24:b4:d3:3e:4d:5f:cb:1b:2f:9e:1b:cd:05:8c:ce:12:
e3:f6:23:df:b5:26:b3:06:94:ed:9c:6d:c7:0a:a8:d4:63:1e:
e2:f4:bb:a2:61:d3:ca:6f:2c:7b:62:c6:43:9e:99:2f:00:da:
89:bc:fb:4f:48:5c:b0:55:94:31:93:90:ea:b9:f8:4b:8c:86:
22:1c:99:1c:e4:5f:bc:39:49:19:d7:d5:3f:51:9f:4a:31:1f:
c6:2d:6a:55:e0:f8:64:34:04:57:38:54:b4:65:f7:01:82:f0:
35:9a:91:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x5BGbqzOiP7PMG6GOKjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTBkNmNjMjBlODY4MzA2ODM3MGZlNThlOWY5NDEwZmZjNDNmYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vUl8fPrdphhHlUf8YCtWiyrmr4+
R4Vubcxm7/FQZV2tK5PoFkD8B4/1BxYdU+fCl/RcTo4e6BIS/h5G/6Of5/5iM5ka
AKQyORT85Wx52qBuGcIzozK17tT7seZwYszNMEyw+3/G4Kt7XSg5oq0tiGIUPjm4
KclK0XhSiCxiws8P59iBZogFL6aDxfkH7LIi6VgABJF8z6ldP065/HOL99lzAJGG
2N8mOt81Wgu7r4CcS7BrLU6OjkgqXjPTmeX0eqN+2fxliJo6iY2pNp8neMpspaYo
mHRCvh+Oxf4ixkBDiDaj8nRMOrrS787pEr/fC0esnSCe5wR+bNTvGuDhvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoNbMIOhoMGg3D+WOn5QQ/8Q/qHMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvcWcxc3dnNkdnd2FEY1A1WTZmbEJEX3hELW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/eeMA0G
CSqGSIb3DQEBCwUAA4IBAQC3kZ99hFTcVvqnEHtIFzPcbNQlnGCeAnQgH3uwYAza
uc0eL+0YxXVYlGXLxvWUwkAoh6Fhw21PQutqijRvJb3O9v/zdeiFVZouvz2x4Gw7
Ufqpm5OXg6ZREx0v+PGgZDTSAWfIUTTJp5r2H74NJCs7wCiN9MqW3+kOryZQvilM
crtI1f0oKahBIC2c0YcrjKB1fSS00z5NX8sbL54bzQWMzhLj9iPftSazBpTtnG3H
CqjUYx7i9LuiYdPKbyx7YsZDnpkvANqJvPtPSFywVZQxk5DqufhLjIYiHJkc5F+8
OUkZ19U/UZ9KMR/GLWpV4PhkNARXOFS0ZfcBgvA1mpEp
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:37:39 2026 by rpki-client