This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/coqQltyEL6s_AV_ScSxVWwobaYM.roa
File: coqQltyEL6s_AV_ScSxVWwobaYM.roa (raw, json)
Hash identifier: 1OsXtHor/Ia/1YUpRgS+ibS0BUNIKccOCNCjONnFINc=
Subject key identifier: 72:8A:90:96:DC:84:2F:AB:3F:01:5F:D2:71:2C:55:5B:0A:1B:69:83
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 019B7AC9008E8B0E2AB087A23D543A9E9009
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/coqQltyEL6s_AV_ScSxVWwobaYM.roa
Signing time: Thu 01 Jan 2026 18:19:11 +0000
ROA not before: Thu 01 Jan 2026 18:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141760
IP address blocks: 141.113.128.0/21 maxlen: 21
141.113.136.0/21 maxlen: 21
141.113.192.0/21 maxlen: 21
2a03:9e43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:00:8e:8b:0e:2a:b0:87:a2:3d:54:3a:9e:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Jan 1 18:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=728a9096dc842fab3f015fd2712c555b0a1b6983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:df:9b:8f:74:14:28:2d:d9:95:2d:89:fa:
84:e5:c1:2c:ca:f1:92:73:02:cf:71:7c:d8:70:90:
32:9d:75:83:a3:5a:c1:e3:22:fa:95:19:ab:9b:23:
37:f8:1f:6d:24:85:9e:17:4a:d2:93:3a:77:a7:cb:
27:cf:0d:85:d7:75:da:ab:0f:93:03:7a:45:fc:9e:
9a:42:27:76:31:6c:be:a3:df:e1:c7:d4:a4:08:87:
c0:30:00:1b:3c:d3:d2:c3:d6:9e:7f:da:be:00:81:
c7:14:13:65:3a:d3:2a:50:2e:f2:07:bc:79:97:e0:
d8:b1:41:6c:ec:1d:18:24:6b:4a:d0:90:97:1c:80:
56:9b:b6:b9:d2:db:87:c7:a7:84:4b:5a:75:c8:a0:
40:46:d7:2b:46:39:c6:cf:83:44:7b:5c:7f:6a:4c:
65:4a:c3:a3:a2:48:2b:05:f7:a0:b1:b5:69:17:d5:
44:e8:cb:ca:b6:8c:2f:2a:8d:93:ee:91:19:b2:32:
c6:c7:49:ee:f7:32:00:66:18:9a:10:83:36:51:45:
a4:7e:85:e5:45:32:e1:b9:ba:16:45:6e:a8:40:f6:
aa:14:74:04:fa:ac:f7:3e:4d:43:43:62:ce:91:f7:
db:41:aa:5f:4c:cc:a6:bc:e2:f8:7d:9e:62:70:c2:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:90:96:DC:84:2F:AB:3F:01:5F:D2:71:2C:55:5B:0A:1B:69:83
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/coqQltyEL6s_AV_ScSxVWwobaYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.128.0/20
141.113.192.0/21
IPv6:
2a03:9e43::/32
Signature Algorithm: sha256WithRSAEncryption
07:b6:55:c7:d4:b5:df:5b:df:1b:ac:55:7e:08:33:38:4a:52:
5e:57:69:5d:47:4c:e7:fe:c4:a6:6d:78:33:a8:8b:59:27:cc:
f6:de:89:42:86:6e:2f:de:3e:86:8e:64:8e:53:1a:44:55:04:
9f:1a:b6:ac:a7:13:2e:80:03:39:63:fa:d5:c1:ba:6e:d6:d8:
68:27:c4:67:b0:e9:5b:e7:69:eb:97:22:a6:87:53:89:8e:0a:
8f:cf:1c:c1:12:0d:fa:c5:da:56:53:02:b5:0a:0f:3b:12:51:
1d:3e:0e:28:c5:26:aa:f9:9d:1f:7f:84:2c:b5:aa:a3:4d:d5:
bb:76:82:07:ca:b6:71:71:91:92:dc:23:f7:dc:46:47:42:b5:
76:f3:c5:19:3d:76:6e:31:16:8b:3d:01:6e:d5:70:4f:63:7c:
fa:74:19:1b:fd:6e:1e:49:18:c9:2c:2e:14:ab:b7:a7:ed:b0:
19:c4:a7:7a:ac:f7:99:5f:6d:79:b3:56:d8:77:f6:29:2f:e5:
11:6d:d0:3d:45:d3:c0:fd:08:85:86:b8:ac:fb:b1:e2:4a:86:
b3:b9:70:5e:13:26:00:f5:94:32:e6:df:c5:f3:4f:88:70:87:
7d:37:7c:0b:53:8d:fb:39:35:b7:62:fe:6a:54:ae:d6:28:f2:
4a:d1:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 01:33:27 2026 by rpki-client