This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/tq5QKqbMMTaUnj8tOh43h-aM2MA.roa
File: tq5QKqbMMTaUnj8tOh43h-aM2MA.roa (raw, json)
Hash identifier: Kr/dZ1o0wiqZMbEqoVrPXCiIdUPvP+Mdp3n01wZE5Kc=
Subject key identifier: B6:AE:50:2A:A6:CC:31:36:94:9E:3F:2D:3A:1E:37:87:E6:8C:D8:C0
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 019B7EA6F0666A499858D9586FF48BD91A7B
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/tq5QKqbMMTaUnj8tOh43h-aM2MA.roa
Signing time: Fri 02 Jan 2026 12:20:28 +0000
ROA not before: Fri 02 Jan 2026 12:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49102
IP address blocks: 93.159.128.0/18 maxlen: 18
2a00:1578::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:f0:66:6a:49:98:58:d9:58:6f:f4:8b:d9:1a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 2 12:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6ae502aa6cc3136949e3f2d3a1e3787e68cd8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:37:2e:a8:07:b1:3c:13:c8:da:56:b2:2e:
86:2c:83:18:2a:94:40:b0:54:3e:a7:b8:5b:89:7e:
e5:fe:dd:5e:4d:0f:8e:93:f2:23:9d:34:69:9f:c0:
3f:6c:1f:ea:05:87:80:2a:a4:65:d6:08:ec:fb:5c:
fd:93:69:5c:81:3c:e9:1d:6a:15:40:8a:12:88:03:
24:5a:2f:cb:71:ee:0a:12:25:ae:7c:c1:c8:1f:ab:
26:15:ae:a7:da:cf:f2:e1:16:dd:4e:f6:3a:8a:a5:
74:df:48:bc:24:26:83:5f:11:1b:5e:99:6c:9b:39:
dc:d1:1c:88:3a:92:5d:c9:21:61:6e:c0:a1:f4:79:
af:b6:59:2c:93:2c:d3:9a:8f:89:6f:4e:83:bc:89:
d0:9a:17:00:7a:4c:a3:0a:c8:49:5e:5b:19:32:84:
5b:94:f3:d9:8d:f2:31:fc:2f:da:77:1a:fe:18:c4:
0b:b5:1b:6c:57:01:0c:29:13:18:b1:67:ec:37:b3:
6c:c4:6d:8d:2d:47:b5:14:b4:ee:99:52:55:37:b8:
78:30:25:81:ad:11:12:4e:2a:56:6b:f0:7b:cf:f1:
ea:81:d6:c5:65:95:9b:96:2f:ad:fd:be:3f:35:00:
e8:c4:e3:be:92:55:be:cd:29:e8:3d:a7:68:41:67:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:50:2A:A6:CC:31:36:94:9E:3F:2D:3A:1E:37:87:E6:8C:D8:C0
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/tq5QKqbMMTaUnj8tOh43h-aM2MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.128.0/18
IPv6:
2a00:1578::/29
Signature Algorithm: sha256WithRSAEncryption
b3:ac:18:a7:02:a5:54:71:df:a5:cc:f2:fd:19:d0:91:aa:ab:
80:de:ee:c5:6a:3d:95:b8:79:22:68:c3:e1:ed:34:69:b8:21:
c3:3a:2c:15:ce:bc:4e:8c:82:1d:21:da:25:aa:05:cc:2d:41:
da:7d:dd:b1:4a:aa:89:2c:f3:c5:34:77:de:ce:c1:e7:b7:e6:
be:21:20:78:c6:1e:3b:04:a2:ac:b8:8a:df:39:a6:fa:da:66:
5d:21:b2:ca:78:3a:f9:f3:7e:f3:15:6e:12:c8:bd:18:ae:2a:
6a:cd:a4:3c:50:f5:54:a3:49:b4:0f:ff:9e:0e:58:a3:52:97:
1f:43:b0:25:78:e1:ea:b3:11:42:9e:4d:e7:52:e0:d6:a8:ae:
21:5d:d1:03:be:8e:8e:6e:10:da:cc:d9:ec:b5:46:3b:65:be:
11:90:06:5a:f0:3f:a2:d8:bc:f1:99:f1:b4:fc:6b:c9:65:75:
ad:53:85:bc:58:c5:80:38:0e:40:28:5a:32:a3:1f:79:bf:99:
75:e0:00:70:cd:ec:7a:59:8d:19:21:4a:8a:3b:a3:b2:85:99:
c4:77:0a:55:26:b4:38:e1:b9:e3:58:0a:01:10:c1:26:a9:39:
09:b7:b9:10:97:56:a2:83:1e:5b:42:f2:45:6e:7b:28:2d:ed:
20:f1:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:21:18 2026 by rpki-client