This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/qJPr5FWDClx-5QPYN1YF97DQrSk.roa
File: qJPr5FWDClx-5QPYN1YF97DQrSk.roa (raw, json)
Hash identifier: KvT5oKXk2KycBv8riPWP86JI847k87GD38dyIt4mKbo=
Subject key identifier: A8:93:EB:E4:55:83:0A:5C:7E:E5:03:D8:37:56:05:F7:B0:D0:AD:29
Certificate issuer: /CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Certificate serial: 019B7F15BEEDBF616D8B59B5AEBE97847DA9
Authority key identifier: B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/qJPr5FWDClx-5QPYN1YF97DQrSk.roa
Signing time: Fri 02 Jan 2026 14:21:29 +0000
ROA not before: Fri 02 Jan 2026 14:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58199
IP address blocks: 193.8.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:be:ed:bf:61:6d:8b:59:b5:ae:be:97:84:7d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Validity
Not Before: Jan 2 14:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a893ebe455830a5c7ee503d8375605f7b0d0ad29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:0f:d2:a2:98:fb:60:e4:22:a4:36:13:52:
13:3f:6d:1a:c2:c6:04:7b:3d:ae:da:1d:fc:e5:0b:
6f:e1:d6:f8:f2:bf:e0:ce:b8:89:08:cd:c1:41:25:
64:47:24:70:49:b3:34:3e:14:5e:ac:86:54:ca:66:
b6:55:55:21:6d:18:ba:ef:e6:bc:17:17:03:b9:52:
24:07:42:6b:41:96:a4:f0:4a:f5:f3:d6:69:0f:48:
2d:1f:f4:0a:1a:07:1c:08:5f:50:8f:1a:f0:cb:78:
45:52:a9:54:e2:99:a2:21:9f:a0:d1:20:78:c7:81:
65:87:39:99:e9:79:27:7a:f0:f7:8c:7c:28:21:56:
0e:2d:43:46:80:dd:85:40:61:40:f5:a4:69:5a:46:
f2:31:c8:6e:5a:d6:02:02:35:56:65:44:23:2a:71:
45:97:5d:bc:b1:c7:38:85:e1:19:b2:49:3f:e4:bb:
75:ad:1f:96:71:03:7b:f7:90:c5:16:73:8f:d6:04:
3b:57:1f:08:ea:09:b8:c7:74:7e:5a:44:b5:9f:93:
b0:f7:4a:07:28:eb:c7:da:bb:dc:f5:b4:c3:4f:50:
42:3e:dd:34:dc:61:98:b2:8e:89:fc:d3:b6:52:13:
af:f2:7b:da:50:ac:71:6d:6c:d8:df:82:75:cd:88:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:93:EB:E4:55:83:0A:5C:7E:E5:03:D8:37:56:05:F7:B0:D0:AD:29
X509v3 Authority Key Identifier:
keyid:B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/qJPr5FWDClx-5QPYN1YF97DQrSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.46.0/23
Signature Algorithm: sha256WithRSAEncryption
51:68:c7:dc:29:08:c9:ad:89:f9:90:32:5f:d6:02:60:fb:b8:
78:00:cb:e5:4c:c6:ae:a2:a9:bc:22:a6:39:32:3b:0b:23:cb:
59:2e:f8:22:d5:de:ac:e3:0f:6b:6d:af:33:a7:ed:f0:4c:ea:
cd:2b:06:75:1a:5e:39:04:13:c5:02:bf:d9:8e:9c:90:f6:e5:
27:f6:bb:6c:c0:da:bc:4e:f5:1c:bb:e6:cc:9e:0e:19:df:a6:
65:19:63:45:8a:37:33:2e:0c:e6:a0:84:eb:f4:d6:e3:97:41:
03:68:21:6b:88:07:01:f7:d0:1a:44:d2:44:01:5e:67:ea:35:
ab:26:a6:c1:61:52:4c:9a:38:ad:9b:c1:16:ec:dd:24:44:ca:
75:02:81:2a:4c:38:36:e4:d6:60:3f:cb:26:6b:c8:48:a2:fc:
e0:a9:22:73:20:64:dd:e0:d3:23:ac:ba:bf:e0:3f:2a:a9:a8:
f2:31:c8:b1:9e:7d:e7:ec:44:18:73:b2:cc:14:4f:f8:54:48:
3d:38:c0:b8:d9:9e:e1:b0:bc:32:ef:f4:26:88:65:7a:19:d6:
9d:e0:e7:13:a4:7c:fc:88:cb:6d:b5:ab:ca:8f:97:15:02:08:
15:a4:ad:5d:b9:14:fe:1e:2c:2c:74:b6:24:81:38:44:84:ca:
69:34:48:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/Fb7tv2Fti1m1rr6XhH2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODE1NjgxODY0MmRjOGYwNGU0MGY4Njc3NTY4ZDY2M2Nj
ZjRiMWIwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODkzZWJlNDU1ODMwYTVjN2VlNTAzZDgzNzU2MDVmN2IwZDBhZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKUP0qKY+2DkIqQ2E1ITP20awsYE
ez2u2h385Qtv4db48r/gzriJCM3BQSVkRyRwSbM0PhRerIZUyma2VVUhbRi67+a8
FxcDuVIkB0JrQZak8Er189ZpD0gtH/QKGgccCF9Qjxrwy3hFUqlU4pmiIZ+g0SB4
x4FlhzmZ6XknevD3jHwoIVYOLUNGgN2FQGFA9aRpWkbyMchuWtYCAjVWZUQjKnFF
l128scc4heEZskk/5Lt1rR+WcQN795DFFnOP1gQ7Vx8I6gm4x3R+WkS1n5Ow90oH
KOvH2rvc9bTDT1BCPt003GGYso6J/NO2UhOv8nvaUKxxbWzY34J1zYgPQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiT6+RVgwpcfuUD2DdWBfew0K0pMB8GA1UdIwQY
MBaAFLGBVoGGQtyPBOQPhndWjWY8z0sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lGV2dZWkMzSThFNUEtR2QxYU5aanpQU3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NjY1MzItYjA3Ny00ODg5LTlmZTYt
NjU3NmM2ZDlhYTY5LzEvcUpQcjVGV0RDbHgtNVFQWU4xWUY5N0RRclNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81NjY1MzItYjA3Ny00ODg5LTlmZTYtNjU3NmM2ZDlhYTY5
LzEvc1lGV2dZWkMzSThFNUEtR2QxYU5aanpQU3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQguMA0G
CSqGSIb3DQEBCwUAA4IBAQBRaMfcKQjJrYn5kDJf1gJg+7h4AMvlTMauoqm8IqY5
MjsLI8tZLvgi1d6s4w9rba8zp+3wTOrNKwZ1Gl45BBPFAr/ZjpyQ9uUn9rtswNq8
TvUcu+bMng4Z36ZlGWNFijczLgzmoITr9Nbjl0EDaCFriAcB99AaRNJEAV5n6jWr
JqbBYVJMmjitm8EW7N0kRMp1AoEqTDg25NZgP8sma8hIovzgqSJzIGTd4NMjrLq/
4D8qqajyMcixnn3n7EQYc7LMFE/4VEg9OMC42Z7hsLwy7/QmiGV6Gdad4OcTpHz8
iMtttavKj5cVAggVpK1duRT+HiwsdLYkgThEhMppNEgO
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:13 2026 by rpki-client