This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/QHMJ6q0wq4_fZJJIZvFP81FKk48.roa
File: QHMJ6q0wq4_fZJJIZvFP81FKk48.roa (raw, json)
Hash identifier: f3trAL2IqUAU12dUD7R9RG4xG2VfoibnYgOAP7y/SEI=
Subject key identifier: 40:73:09:EA:AD:30:AB:8F:DF:64:92:48:66:F1:4F:F3:51:4A:93:8F
Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial: 019B7834DF5569A55A984739CF8A02C3A03A
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/QHMJ6q0wq4_fZJJIZvFP81FKk48.roa
Signing time: Thu 01 Jan 2026 06:18:09 +0000
ROA not before: Thu 01 Jan 2026 06:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43196
IP address blocks: 91.194.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:df:55:69:a5:5a:98:47:39:cf:8a:02:c3:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Validity
Not Before: Jan 1 06:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=407309eaad30ab8fdf64924866f14ff3514a938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:7a:07:36:32:7d:08:e4:7f:f8:de:e1:7e:
01:73:e2:8c:ce:24:9f:1c:91:60:d8:01:c0:3d:01:
d1:6f:e3:e3:4a:1f:51:75:d9:be:92:32:7c:30:c0:
37:94:5d:4c:44:77:58:fa:b0:a3:2d:64:ee:21:dd:
e3:5b:31:55:20:52:6c:02:67:84:1a:de:01:4f:c0:
76:ef:f8:8d:af:1d:84:83:6a:f5:63:7f:93:ec:59:
37:c8:c8:69:d0:e6:71:27:c2:4d:14:c8:f0:28:4d:
ae:6e:75:c1:00:8a:89:08:02:12:f6:fd:74:20:75:
1f:27:96:ea:6e:36:a7:ef:f0:a2:ce:60:f8:37:67:
7d:f3:30:43:38:be:aa:5c:25:88:32:59:55:c0:3e:
7b:49:8c:47:c8:4f:1b:62:c0:f2:a0:18:64:9d:7b:
09:e7:19:fb:f1:f9:d9:6c:0b:76:10:49:7e:e2:00:
92:a2:39:8b:6d:ae:66:41:ef:cb:dd:19:2c:6f:a2:
ed:61:7e:60:be:64:bb:03:70:e8:c7:0c:65:c9:71:
a6:99:6c:5a:15:13:ae:4f:d8:c2:88:34:23:75:87:
b0:a1:fa:33:3f:0c:04:32:48:5b:37:f4:62:db:9c:
3d:ae:3e:94:de:bd:d7:73:9b:74:57:4e:8d:36:4a:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:09:EA:AD:30:AB:8F:DF:64:92:48:66:F1:4F:F3:51:4A:93:8F
X509v3 Authority Key Identifier:
keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/QHMJ6q0wq4_fZJJIZvFP81FKk48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:a6:ea:89:2d:ac:06:ca:f1:2c:9c:ec:ea:d7:e4:00:a1:7a:
e4:6e:f7:20:12:ff:af:54:25:dd:53:03:2d:f9:c3:df:11:e1:
bb:9d:7e:0d:84:6a:91:08:3b:f4:33:e8:50:b4:77:00:3d:cc:
22:ae:3a:8d:b3:63:a3:7e:45:e0:87:49:a7:08:43:36:1d:ba:
dc:3a:34:6c:7a:62:be:b9:09:1c:f2:28:65:b8:db:aa:cb:7b:
e0:1a:62:14:7c:61:54:fd:8d:0f:f1:28:a6:7f:ac:e3:08:17:
af:c4:72:c1:09:2a:3a:89:62:f7:31:c9:c8:84:29:16:f0:55:
13:c1:01:54:20:7e:f7:a9:01:e1:62:09:e8:b8:25:83:e7:ae:
a8:eb:7c:3e:d4:10:b8:bd:0d:c6:fa:49:91:b3:36:18:83:9d:
c5:12:87:36:1e:70:d4:0c:20:0c:3f:cc:aa:ae:c7:7c:69:68:
22:48:c5:fa:ca:b5:04:01:02:a9:6b:3e:39:48:69:af:7f:a5:
6d:01:18:7a:78:47:4b:ac:57:c9:f1:7e:37:60:e2:96:7a:29:
a2:46:d0:2e:0e:9a:c8:fe:89:7b:a0:a8:c9:ff:63:d7:1d:35:
21:39:40:1a:d9:16:37:40:52:1f:e7:1a:57:bb:91:b8:62:ab:
bd:5a:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:17 2026 by rpki-client