This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa
File: 5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa (raw, json)
Hash identifier: uDkJZLcHqBgj1LakSJJ7gsoFR9aK94n0OpJdt1tDHJU=
Subject key identifier: E6:A4:04:74:C0:5C:22:DE:57:14:51:51:08:3F:06:C5:22:B6:F5:93
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 019B7AC7EC67E554FBB63DF11D8B66D001F0
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa
Signing time: Thu 01 Jan 2026 18:18:01 +0000
ROA not before: Thu 01 Jan 2026 18:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42184
IP address blocks: 194.49.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:ec:67:e5:54:fb:b6:3d:f1:1d:8b:66:d0:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Jan 1 18:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6a40474c05c22de57145151083f06c522b6f593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:e2:7d:2f:01:21:9d:0a:69:5e:de:70:ea:
cc:82:70:19:50:72:84:b9:d0:85:14:ae:15:e8:02:
17:10:54:11:84:39:e2:78:a4:27:65:1b:b0:15:e7:
a8:6e:8d:2a:80:d4:58:14:45:1d:42:4c:95:8f:e0:
43:b4:3e:85:4c:c1:b2:f8:65:45:73:83:08:58:f0:
2a:f9:9a:0c:b9:81:6c:20:08:46:8f:b2:c8:8a:70:
32:e8:9d:3d:44:be:1f:b8:84:f4:cd:07:b7:b6:af:
18:3a:24:0c:e7:b8:c5:4b:f5:4c:45:23:61:94:b1:
1e:5b:61:01:9f:df:c6:70:54:44:65:d2:6e:8e:4e:
a9:01:3f:80:04:38:af:f9:78:54:02:54:97:90:3e:
40:0a:3a:08:b5:0a:4d:58:a4:96:2b:2e:5d:e0:5d:
88:46:00:93:a9:bc:60:61:4b:93:63:c0:57:42:f0:
2b:8d:5c:a1:3f:f0:3b:81:13:42:01:34:37:37:cb:
63:9a:d9:23:52:40:13:5e:8c:6d:d9:cf:1e:60:73:
ec:0d:f2:7f:da:6d:67:71:14:e8:8b:da:a8:82:d8:
45:dc:29:f7:64:b6:cc:8e:0c:c4:21:48:44:eb:44:
ee:31:10:cb:36:95:ee:84:33:57:33:8f:73:3f:d4:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:04:74:C0:5C:22:DE:57:14:51:51:08:3F:06:C5:22:B6:F5:93
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4d:0f:fe:f5:e3:18:bb:9e:00:66:ee:3a:5e:ba:b5:93:7a:
23:11:fc:95:c8:60:98:58:b7:42:c4:e6:a4:4a:cf:96:9f:8e:
f3:82:c3:46:b3:fb:2e:98:6a:2c:c9:2c:94:70:1a:43:b1:49:
d3:21:14:ee:e3:42:c9:fc:c9:8e:61:ef:0f:5f:e4:7b:cd:77:
2f:66:fa:7f:75:21:10:73:d0:e5:93:a9:e1:85:ae:0b:24:ee:
0a:ab:27:d9:d9:7c:95:19:74:ee:07:e9:5f:e0:a6:54:0e:8a:
f5:e3:3b:c3:d1:0b:62:de:96:f0:9f:0c:a2:c0:4e:e4:4b:9f:
7d:8c:f5:7f:16:1f:be:a4:be:2f:5a:75:0e:60:3a:7c:13:4e:
58:de:80:a7:d1:24:c7:18:12:1e:5c:fb:0f:d8:a1:88:ec:74:
d9:e8:71:ed:81:12:77:ac:91:99:39:bc:c8:3b:54:4a:77:f6:
0e:05:43:c8:ef:d1:c6:bd:44:d2:e6:90:e1:e9:da:98:fe:6f:
c1:d9:c2:dc:ca:ab:c8:32:84:7b:a1:b0:73:29:b8:d0:18:6e:
f2:a7:2f:f9:4c:41:21:7c:0a:34:c5:0b:fd:96:d6:af:e2:c6:
2a:2b:11:4e:61:36:0b:bf:29:6d:1a:13:5d:f0:1e:e7:d4:85:
16:87:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 07:54:29 2026 by rpki-client