This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/SLqudbuR-X_G17PVNpWnd2oSWUg.roa
File: SLqudbuR-X_G17PVNpWnd2oSWUg.roa (raw, json)
Hash identifier: D231831UXSiNe5nD27nyCz/MyBN0j+z0R+T49a0xy84=
Subject key identifier: 48:BA:AE:75:BB:91:F9:7F:C6:D7:B3:D5:36:95:A7:77:6A:12:59:48
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 019B7CECD16D6CB826F166C4898875E50F50
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/SLqudbuR-X_G17PVNpWnd2oSWUg.roa
Signing time: Fri 02 Jan 2026 04:17:33 +0000
ROA not before: Fri 02 Jan 2026 04:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 195.142.200.0/24 maxlen: 24
195.142.201.0/24 maxlen: 24
195.142.202.0/24 maxlen: 24
195.142.203.0/24 maxlen: 24
195.142.244.0/24 maxlen: 24
195.142.245.0/24 maxlen: 24
195.142.246.0/24 maxlen: 24
195.142.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:d1:6d:6c:b8:26:f1:66:c4:89:88:75:e5:0f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jan 2 04:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48baae75bb91f97fc6d7b3d53695a7776a125948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:d1:6a:ce:74:2c:40:ab:8b:0c:ad:1d:90:
13:ae:25:2f:38:44:9c:59:69:3c:0c:17:fd:eb:df:
40:6e:c9:5f:0a:e1:70:99:61:a4:1b:19:4e:4d:59:
8c:bb:b3:e5:dd:4a:41:2d:5a:dc:2a:37:70:8d:b6:
f8:6a:f3:e8:b3:b8:2d:e1:a5:5e:4f:3f:ba:94:64:
4b:3b:4c:50:4c:f6:d6:88:37:e6:c1:87:d1:cf:6a:
76:b7:49:22:a5:ff:0e:09:0f:df:e6:28:c0:9a:81:
cd:6e:89:d8:6b:d6:98:64:53:1a:da:40:6a:c5:30:
f4:57:16:7a:8d:bd:a2:f9:70:fe:72:d8:01:dd:ab:
cd:f6:95:9b:2f:f4:94:0e:bc:45:06:b2:7f:37:77:
8e:c1:46:af:91:1f:72:88:ca:23:b3:4f:0c:8c:7d:
65:2c:0e:b5:13:f0:ef:68:63:60:f6:4a:ce:3d:2d:
5a:b9:af:8e:35:70:fa:62:c2:fa:f9:72:a2:7d:0b:
36:83:95:1a:cb:a3:9a:1b:ad:d8:16:f5:94:8a:d1:
c5:5e:3e:8e:e6:b5:2c:35:45:68:e2:57:d8:ac:25:
fb:17:4d:fc:0a:7b:f5:dd:cc:9b:89:08:10:5e:bf:
c6:69:97:fd:70:7f:4e:85:98:f6:15:7e:a6:ec:7a:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BA:AE:75:BB:91:F9:7F:C6:D7:B3:D5:36:95:A7:77:6A:12:59:48
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/SLqudbuR-X_G17PVNpWnd2oSWUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.142.200.0/22
195.142.244.0/22
Signature Algorithm: sha256WithRSAEncryption
80:0e:77:64:4f:1b:2a:57:bd:26:a1:1c:df:a9:b8:3b:0d:53:
00:7e:ab:41:c5:05:9f:4a:78:d6:a7:12:66:49:1c:e7:2f:eb:
51:9c:28:50:ac:f2:67:0b:e3:d1:0f:f5:08:d7:cb:7e:c4:97:
1d:b7:f6:3f:5a:de:95:78:f2:9c:f3:90:82:8b:ef:78:3e:8f:
d7:fc:b8:18:e3:ba:6b:17:bf:68:be:b8:ea:fb:6b:61:41:1c:
cf:a8:17:d5:9d:4b:cc:67:4f:3b:18:32:c7:98:71:a1:45:1e:
a4:59:b5:f0:11:d8:4d:a1:eb:05:ad:e4:c7:69:a4:63:de:1a:
12:4e:d4:fc:72:46:00:f6:be:eb:28:a2:6e:3d:12:42:69:72:
f4:72:14:7f:8a:0f:02:4f:4c:cd:44:1f:54:5a:b0:b9:4e:28:
ff:a9:2b:7f:7d:d2:90:be:2a:11:cc:28:d0:18:c3:d8:d1:9b:
f9:cc:83:ae:81:6a:32:9c:f1:cb:20:9c:53:6a:6d:da:63:f0:
fa:3c:62:eb:3c:71:b4:53:4c:70:0b:92:e9:1a:f7:2a:0f:4c:
53:f1:b6:ad:aa:2b:9c:e7:59:b7:6c:28:32:05:1e:14:b2:59:
fa:86:71:a7:21:f2:8c:98:96:e4:99:69:cc:a7:9e:26:b9:9d:
68:ad:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:30:37 2026 by rpki-client