This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/dqQcATTiVDcYhuyOfiuaEN-dzH0.roa
File: dqQcATTiVDcYhuyOfiuaEN-dzH0.roa (raw, json)
Hash identifier: vdWyxZWoqaf18qoRAgHeLHy8Ubdk/kl3p3xQIpz4Who=
Subject key identifier: 76:A4:1C:01:34:E2:54:37:18:86:EC:8E:7E:2B:9A:10:DF:9D:CC:7D
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 019B7BA4DB517255140D174069E8A733ACA2
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/dqQcATTiVDcYhuyOfiuaEN-dzH0.roa
Signing time: Thu 01 Jan 2026 22:19:20 +0000
ROA not before: Thu 01 Jan 2026 22:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202495
IP address blocks: 193.148.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:db:51:72:55:14:0d:17:40:69:e8:a7:33:ac:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 22:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76a41c0134e254371886ec8e7e2b9a10df9dcc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:b7:45:62:12:db:d6:51:64:97:eb:1f:35:
5e:cd:2b:45:62:13:cc:6b:7f:a0:57:ea:78:dc:69:
17:0a:65:4d:d3:b6:69:57:34:ff:42:bc:6a:27:65:
4c:a7:2d:be:13:b0:e3:37:8f:0d:e7:c1:dd:e5:fb:
09:b5:22:c1:28:98:e4:04:1a:77:7f:dd:38:86:ef:
47:ab:8e:5f:15:8e:8e:17:47:79:ab:b3:a2:ee:6f:
e8:c9:28:85:d0:79:a9:07:4d:1d:22:3e:72:73:e1:
81:39:07:c2:6e:61:ad:30:bd:9b:bd:a1:2e:ff:72:
f1:a5:c0:8c:dc:5f:4c:89:df:5c:31:e3:b6:4f:9f:
82:ea:ed:ca:52:30:31:6d:5a:d8:3e:f1:bb:e6:3d:
fe:f6:dc:82:ff:3c:5e:5e:c4:57:6d:15:73:91:86:
e4:f4:f3:4d:cb:b5:94:60:70:40:3c:90:f5:09:b6:
68:c1:59:8d:82:49:33:35:3c:99:1b:02:9f:ca:3a:
94:97:4d:2c:50:65:70:a7:75:25:a5:f3:38:90:4f:
67:9c:3a:a5:cd:3c:15:78:6b:f7:d5:e4:53:f8:2a:
09:8f:f1:04:af:c3:11:38:4a:99:d9:c9:6c:ee:e1:
89:bf:63:ff:28:31:46:fc:81:fa:0a:be:1c:75:ee:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:1C:01:34:E2:54:37:18:86:EC:8E:7E:2B:9A:10:DF:9D:CC:7D
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/dqQcATTiVDcYhuyOfiuaEN-dzH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.8.0/24
Signature Algorithm: sha256WithRSAEncryption
60:40:0b:36:94:d2:88:c0:7d:61:d1:b5:62:d3:07:e4:92:35:
8e:6d:c1:1b:cc:9c:8e:37:4f:f4:1a:ee:f5:d7:65:47:87:ef:
8a:6f:f9:6b:01:b6:17:1a:86:40:1d:13:44:51:1a:11:88:f4:
91:32:34:8e:b0:d3:ed:88:54:07:23:ba:1d:67:f0:64:a0:34:
8c:b8:d7:74:9a:f6:68:44:73:7b:7e:db:47:1c:b1:f8:bb:79:
9f:9a:33:12:d4:ee:5f:0e:7f:eb:7a:86:65:20:ee:44:70:1b:
8f:3f:c8:20:84:39:12:90:94:a8:68:f6:bd:22:bb:7c:90:28:
e2:e8:33:45:56:36:7d:41:45:c7:13:a6:28:67:f0:40:1c:5c:
05:bf:8f:ce:47:19:03:8e:94:67:82:a4:42:77:06:33:79:b3:
2c:f1:c6:75:8c:e9:6c:6e:41:ae:cb:fe:bd:d8:fb:d1:65:9e:
da:23:27:3a:28:dd:93:3c:82:13:44:bd:10:35:44:8e:8b:a0:
e5:a5:29:98:f9:75:6c:69:1b:5b:60:10:34:03:ed:93:69:89:
05:7f:d1:37:cb:32:02:96:2a:a7:1f:d3:8f:a2:d2:cf:4c:ea:
ab:ee:e5:d5:d5:ba:57:31:ef:25:77:10:31:a1:23:44:01:85:
03:3b:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:13 2026 by rpki-client