This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa
File: qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa (raw, json)
Hash identifier: K5SK7KsksSiQa/QO/NP+4NIGvbz4hbAkl2e3OiIRMxk=
Subject key identifier: AB:25:E3:51:DB:32:0F:C5:25:FD:E4:8F:6E:42:81:04:B9:1D:F9:06
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 019B7DC94096810810D6DB05CC6EA3612554
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa
Signing time: Fri 02 Jan 2026 08:18:19 +0000
ROA not before: Fri 02 Jan 2026 08:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199031
IP address blocks: 194.126.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:40:96:81:08:10:d6:db:05:cc:6e:a3:61:25:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Jan 2 08:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab25e351db320fc525fde48f6e428104b91df906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:10:33:4a:3b:81:26:df:fd:3f:04:df:bf:
f9:ad:2b:27:65:57:97:9d:2e:a0:17:02:1b:c5:2e:
c1:c4:b0:ac:77:dd:fd:3c:c2:db:86:5b:27:25:da:
e3:eb:ff:28:6e:8c:36:51:00:2c:83:0a:7c:58:7b:
12:07:a5:79:61:5f:97:b9:3d:8d:6e:28:59:fd:f6:
cd:bd:bd:4d:6e:9e:bc:4b:6f:6b:00:90:1e:30:52:
0e:aa:f8:03:62:9c:a2:58:66:c1:31:41:96:15:d3:
9b:ef:41:24:cb:a7:74:81:29:91:b3:7b:24:c5:90:
b7:aa:18:1a:fb:1e:a4:cb:92:7d:5b:fe:22:37:b6:
24:b3:46:a7:76:54:bd:a1:aa:39:e3:e6:47:9e:57:
b3:d8:9b:c3:d6:a0:93:f0:a1:9e:5a:d1:fe:76:a5:
4e:0c:2a:53:db:09:74:7c:e0:42:01:b1:a9:0a:81:
6a:4f:86:ca:1b:ee:40:12:af:39:e2:18:c0:ac:5c:
d2:cb:54:31:3e:fd:6d:93:eb:9e:df:3c:27:4f:e9:
6c:1e:79:7d:c0:5c:52:ff:e9:5e:37:66:ae:6d:83:
1a:51:29:47:cd:8f:d0:5f:9c:cc:39:71:cd:e5:22:
a2:f4:c2:9f:8a:84:8c:84:e1:a1:21:40:9b:30:3f:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:E3:51:DB:32:0F:C5:25:FD:E4:8F:6E:42:81:04:B9:1D:F9:06
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.199.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8f:65:44:9d:01:fa:57:d1:85:3b:ef:90:96:2f:4b:40:6e:
d4:15:a3:8f:2c:9b:14:87:27:c2:4f:a4:47:fe:cd:d1:67:2f:
3f:e3:1a:9d:d7:4b:ad:69:20:b7:73:2b:bb:44:1f:a7:fa:88:
10:4d:96:f8:c3:03:77:0e:38:b8:a2:71:ee:2e:4e:d1:ec:8a:
0a:13:13:0b:d8:bc:e3:b9:20:ea:cf:f9:65:b9:c6:82:73:7b:
35:a7:3a:90:6b:9f:d4:d2:0f:83:eb:1d:79:d8:be:76:ec:38:
34:c3:f4:87:5b:c8:77:e9:26:f3:e4:78:54:dc:a9:0c:32:e3:
d9:6f:16:c1:f9:08:90:20:a0:9d:91:40:d6:b7:9a:46:d9:fe:
e7:9a:27:4e:99:52:8a:df:98:ce:2b:9f:31:b8:eb:54:11:23:
a4:e5:a0:c6:ba:1d:a4:0b:3f:a9:a7:71:fc:a1:bf:b0:a8:c6:
ab:1b:74:15:a5:06:32:52:2b:c4:9b:95:b4:10:97:a3:c8:f5:
05:0f:1e:6a:cd:76:08:cd:ab:d2:90:36:98:ac:86:23:5d:06:
f4:f7:a1:55:e8:39:3c:d0:2f:b8:ad:77:5d:eb:ad:2b:37:a0:
67:ba:fb:3a:8d:8a:ea:a7:77:11:6b:a4:b9:bd:3a:61:d3:a0:
12:71:d4:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yUCWgQgQ1tsFzG6jYSVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MmMzM2FlZDhlZmIyNjlkMzc0NDgxM2QyOGM1MzYwOTJl
N2NmMzgwHhcNMjYwMTAyMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjI1ZTM1MWRiMzIwZmM1MjVmZGU0OGY2ZTQyODEwNGI5MWRmOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30YQM0o7gSbf/T8E37/5rSsnZVeX
nS6gFwIbxS7BxLCsd939PMLbhlsnJdrj6/8obow2UQAsgwp8WHsSB6V5YV+XuT2N
bihZ/fbNvb1Nbp68S29rAJAeMFIOqvgDYpyiWGbBMUGWFdOb70Eky6d0gSmRs3sk
xZC3qhga+x6ky5J9W/4iN7Yks0andlS9oao54+ZHnlez2JvD1qCT8KGeWtH+dqVO
DCpT2wl0fOBCAbGpCoFqT4bKG+5AEq854hjArFzSy1QxPv1tk+ue3zwnT+lsHnl9
wFxS/+leN2aubYMaUSlHzY/QX5zMOXHN5SKi9MKfioSMhOGhIUCbMD91uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsl41HbMg/FJf3kj25CgQS5HfkGMB8GA1UdIwQY
MBaAFJcsM67Y77Jp03RIE9KMU2CS5884MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2Qt
ZDI1MGU0NWIxNjIwLzEvcXlYalVkc3lEOFVsX2VTUGJrS0JCTGtkLVFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2QtZDI1MGU0NWIxNjIw
LzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7HMA0G
CSqGSIb3DQEBCwUAA4IBAQBFj2VEnQH6V9GFO++Qli9LQG7UFaOPLJsUhyfCT6RH
/s3RZy8/4xqd10utaSC3cyu7RB+n+ogQTZb4wwN3Dji4onHuLk7R7IoKExML2Lzj
uSDqz/llucaCc3s1pzqQa5/U0g+D6x152L527Dg0w/SHW8h36Sbz5HhU3KkMMuPZ
bxbB+QiQIKCdkUDWt5pG2f7nmidOmVKK35jOK58xuOtUESOk5aDGuh2kCz+pp3H8
ob+wqMarG3QVpQYyUivEm5W0EJejyPUFDx5qzXYIzavSkDaYrIYjXQb096FV6Dk8
0C+4rXdd660rN6Bnuvs6jYrqp3cRa6S5vTph06AScdS5
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:11 2026 by rpki-client