This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa
File: q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa (raw, json)
Hash identifier: 5NddS3/BBUDeFLP1Y+kRGrWDojjLVQKwhUhXEX37hoc=
Subject key identifier: AB:55:40:58:9B:69:FC:4C:75:DE:5C:63:62:BF:AE:26:36:63:B8:96
Certificate issuer: /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial: 019B76EB986FE4C51454F21345691B3F06DD
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa
Signing time: Thu 01 Jan 2026 00:18:30 +0000
ROA not before: Thu 01 Jan 2026 00:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203520
IP address blocks: 185.16.196.0/22 maxlen: 24
2a03:dfc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:98:6f:e4:c5:14:54:f2:13:45:69:1b:3f:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Validity
Not Before: Jan 1 00:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab5540589b69fc4c75de5c6362bfae263663b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:48:e7:ba:e3:cc:e4:44:65:f7:25:1a:db:
6f:62:6c:08:a1:2f:37:68:53:0c:65:12:b2:3f:e3:
f2:0a:08:49:19:81:3a:61:7c:40:18:07:61:b6:1f:
38:43:c2:4e:c6:68:ff:50:6f:4e:d9:c9:62:f6:b0:
89:45:3c:b8:de:fe:15:55:f3:33:33:df:bb:70:5e:
e4:61:dd:67:21:77:8f:55:b7:27:20:eb:ff:e7:28:
eb:87:0e:85:fc:60:d3:ce:e2:7c:75:28:69:96:ef:
d2:4b:fb:13:84:92:d5:d8:e9:18:57:35:12:66:10:
9c:15:a2:e3:b6:7b:62:76:f2:97:78:a0:44:55:56:
44:79:d5:4d:84:b3:c2:c6:9f:1c:cc:cf:db:cd:46:
d7:05:28:9f:f2:3c:a8:6a:92:28:ed:9a:3a:3a:c2:
90:48:5a:4c:a0:89:3e:84:07:15:be:f9:fe:16:34:
40:6a:aa:e4:7c:0c:c6:db:8b:90:a3:4b:b5:f7:ca:
5e:36:81:ce:0b:5a:1a:b6:76:ce:79:79:35:f7:ac:
ad:ec:15:bf:17:f1:ad:ca:b8:86:2d:46:a4:af:1e:
e4:a2:9d:ab:06:1c:59:56:4a:d7:91:9c:60:5f:a6:
72:b5:4d:d9:c7:ae:82:76:06:bb:51:cd:d2:1b:1e:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:40:58:9B:69:FC:4C:75:DE:5C:63:62:BF:AE:26:36:63:B8:96
X509v3 Authority Key Identifier:
keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.196.0/22
IPv6:
2a03:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:b3:f8:9a:7e:0d:a8:21:61:b5:b9:f3:2f:09:29:b1:5f:9e:
13:2d:19:1f:11:be:d8:d0:73:58:3a:e6:9a:81:fe:8e:5a:a8:
72:4e:7a:eb:01:59:07:20:28:83:f3:91:69:b0:47:55:52:9b:
54:c4:08:f1:c0:f9:68:b9:3a:50:be:14:41:74:4b:dd:08:e3:
23:4e:ca:94:f7:4c:2d:13:ba:eb:e2:c9:65:c9:1e:5e:1f:17:
89:b9:cf:62:f9:9a:09:97:71:e4:a7:52:92:92:6d:4e:4a:1e:
59:28:f4:92:8c:e9:be:3d:69:b3:d5:94:44:1b:0b:35:1e:2f:
ed:8e:96:e0:a2:fa:2c:8b:11:b7:de:d0:15:27:61:6f:8d:cc:
9d:9a:2c:14:fe:a0:a6:fe:be:46:33:38:2b:46:ff:de:70:1e:
55:5a:3d:ec:ca:b9:64:61:ef:3a:71:8a:b9:27:89:a6:8b:ab:
f1:fb:b8:f9:0e:c6:c8:97:82:ea:bc:fa:96:1c:fe:cf:9e:dd:
ab:20:9d:f0:b3:df:f0:2c:54:7f:17:89:ef:a2:d0:65:1d:01:
01:f8:43:9f:a0:69:89:34:8c:f1:a1:38:be:f0:a1:a9:7c:5c:
82:31:c1:39:2e:22:64:16:1c:da:a7:39:58:fd:7b:02:b5:a2:
16:77:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:58 2026 by rpki-client