This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/QRLsURcBBVBV6BZtvErWvS3hqgA.roa
File: QRLsURcBBVBV6BZtvErWvS3hqgA.roa (raw, json)
Hash identifier: 4jhlbQzF52BvDX14xcBLNbpRs+50Em0ZMDO/yS0t+IM=
Subject key identifier: 41:12:EC:51:17:01:05:50:55:E8:16:6D:BC:4A:D6:BD:2D:E1:AA:00
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019B7F15928DDAF6BC6A2AC26ED051665DEA
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/QRLsURcBBVBV6BZtvErWvS3hqgA.roa
Signing time: Fri 02 Jan 2026 14:21:18 +0000
ROA not before: Fri 02 Jan 2026 14:21:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2860
IP address blocks: 95.100.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 07:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:92:8d:da:f6:bc:6a:2a:c2:6e:d0:51:66:5d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 14:21:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4112ec511701055055e8166dbc4ad6bd2de1aa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:6f:55:39:6f:fb:58:ac:81:bf:95:e2:66:
09:00:14:67:9a:ab:7e:19:ca:68:f0:75:45:38:b4:
ec:fd:eb:9c:b9:a3:9a:9f:d1:46:ac:f1:ca:fe:13:
b2:d5:91:64:c1:b9:ad:fc:d0:6f:54:47:0a:d9:26:
6a:7f:26:00:19:cf:11:56:c0:29:f5:01:41:c3:28:
84:60:20:41:16:bd:89:9b:c6:6f:31:08:a5:d6:b6:
44:7d:97:da:ca:51:06:55:63:c4:ae:00:6e:6b:dc:
9a:27:92:98:ab:68:c1:9c:10:ea:8e:ae:5f:0e:44:
92:35:0d:02:c3:ef:d3:5c:27:21:bb:e2:3c:83:1f:
3f:19:9e:c8:02:cd:5a:5a:05:0c:81:f2:e3:58:66:
cd:69:58:30:bc:91:a7:ed:1a:97:08:37:0c:06:00:
ef:20:5d:61:4a:8a:74:74:41:ab:55:31:b4:43:32:
93:44:b0:61:f9:31:d0:49:f8:10:24:b2:b2:54:66:
a8:09:e7:2f:f5:17:6c:6a:34:9f:14:7d:65:a5:b4:
9d:6e:65:ca:be:9e:b6:2d:fa:5a:6a:08:f5:6b:51:
39:64:69:3f:b9:ac:b2:53:9c:89:fe:cf:b9:7b:44:
f2:4c:14:9a:fe:18:44:9c:ea:c9:19:18:b0:cf:17:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:12:EC:51:17:01:05:50:55:E8:16:6D:BC:4A:D6:BD:2D:E1:AA:00
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/QRLsURcBBVBV6BZtvErWvS3hqgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.100.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:70:d4:4a:c0:8c:61:91:e4:0e:c2:bb:c2:42:f5:88:7b:ad:
03:bf:7e:fa:7e:b3:f7:d8:6e:82:dc:d2:7d:15:bf:3a:e7:c8:
70:40:b4:04:b3:e4:2f:f1:8c:d8:cc:26:73:0c:60:01:b3:31:
72:7e:bd:16:a2:54:30:d7:2e:a0:49:0f:be:f8:66:9c:b3:57:
7e:8c:e0:b7:ee:c5:c6:9a:06:2c:7b:5e:f0:10:f6:39:b7:43:
49:0c:fa:6b:50:d8:0e:24:fb:02:f4:e0:fd:b5:e3:da:7f:d6:
a0:41:f7:3e:65:f5:74:bd:b2:ee:f8:45:7d:ed:99:4d:de:2f:
b9:5e:40:3b:e2:93:a2:ea:81:b8:d9:a9:34:0a:e8:5e:8c:ef:
5c:3f:14:75:0e:d9:c8:08:36:7f:df:10:db:2c:99:b4:fc:b4:
47:94:f2:8c:fd:fc:a6:5d:18:8c:dc:3c:f1:f8:80:a2:53:ac:
f5:86:33:53:10:7f:6a:65:d1:b6:b9:49:dc:d0:57:bd:fd:7b:
ad:6b:8f:0d:47:97:8e:42:ca:bf:bb:28:ea:3c:68:f2:86:6e:
d5:ec:06:b2:49:c9:be:a8:00:3d:3e:fb:ad:cb:35:91:03:f8:
98:29:90:90:90:13:ab:6c:9a:c5:7c:09:77:ee:17:27:34:12:
85:dc:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:29:18 2026 by rpki-client