This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa
File: q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa (raw, json)
Hash identifier: Pl1Sihq0IhD+j4loLfA0EEfieHdLpAeZa9t+mCB9z1c=
Subject key identifier: AB:40:ED:A6:CC:B9:92:4B:F4:9C:E2:95:4A:65:FB:11:C5:EE:2F:57
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019BFF4AD8DE6B3D31F6E17C5A5AA0F6C642
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa
Signing time: Tue 27 Jan 2026 11:50:53 +0000
ROA not before: Tue 27 Jan 2026 11:50:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55154
IP address blocks: 153.51.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:4a:d8:de:6b:3d:31:f6:e1:7c:5a:5a:a0:f6:c6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Jan 27 11:50:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab40eda6ccb9924bf49ce2954a65fb11c5ee2f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:f1:08:e6:30:42:6a:46:df:c5:9e:82:83:
0e:e7:c3:da:34:b6:d2:b0:7c:88:ac:da:36:5e:5d:
12:e8:33:36:85:72:a0:4b:71:da:ad:e6:93:dc:79:
58:f8:81:e5:f6:a5:fb:d2:c0:d5:8f:b0:5c:4d:57:
c2:2c:1e:3a:b4:4e:e8:ce:9d:96:e9:49:71:dc:03:
19:1f:82:e1:85:89:22:5f:06:fd:b4:cc:f7:03:29:
35:56:99:50:be:1b:c8:55:71:df:77:5e:02:75:d1:
09:4c:b5:c9:c7:ab:3a:e5:26:b6:0d:3d:86:41:69:
0c:0d:63:9f:46:60:ed:92:0a:fa:70:91:9a:36:ec:
b6:3f:dc:94:bb:fc:30:16:3e:3c:01:16:df:9d:d5:
20:4c:c2:3b:44:53:f9:52:40:71:b1:9c:e6:2d:09:
eb:20:e6:4d:00:64:1e:67:e8:74:92:0c:2e:1a:1a:
da:17:c9:93:ae:9e:3c:62:7a:ac:ec:c5:65:a2:b7:
70:35:75:ca:ec:6f:fc:a3:94:c1:df:94:9a:16:ed:
2c:5e:25:9b:c9:fd:88:d9:99:55:38:fb:54:d8:fb:
03:15:a1:46:29:2e:58:8c:e6:9c:d8:c0:96:aa:5b:
24:98:00:48:59:84:02:0c:52:4b:38:9e:4c:7c:ad:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:40:ED:A6:CC:B9:92:4B:F4:9C:E2:95:4A:65:FB:11:C5:EE:2F:57
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:b4:12:02:4c:10:ef:f9:8f:1d:dd:84:b2:5d:f5:68:a7:87:
80:d4:2a:4b:07:da:15:55:0a:0c:6b:94:c4:56:da:b2:76:01:
88:37:86:24:d6:58:ba:f0:a0:96:91:b6:e7:6c:ca:17:a3:b9:
6f:78:fd:b0:aa:97:83:7c:54:0e:f2:93:0a:19:90:8f:c1:65:
f2:11:2b:bb:a2:3f:53:62:0d:e2:2a:c2:51:e2:c6:cf:b8:4b:
56:20:37:67:7c:73:38:bb:f3:ad:5f:c4:d9:14:d6:b2:28:10:
2b:ad:e7:c0:ab:38:1b:2e:cb:ac:29:1f:2c:e8:55:d0:09:6c:
b5:db:5c:b9:a7:b6:6e:60:ce:02:c3:55:a0:81:9a:c5:50:51:
79:f9:50:cc:c1:eb:e9:a8:ce:d0:d2:ff:fc:d4:50:70:c5:08:
1a:bf:b9:36:fa:72:d4:5f:d9:54:87:0b:78:49:c2:8b:84:98:
6d:63:ee:f2:7b:dc:c0:4f:2b:87:1a:da:47:78:cc:38:e9:cd:
71:49:24:87:0f:b8:0f:b6:2b:2e:a0:01:42:7e:6d:ec:0a:5a:
36:2d:23:fa:50:19:f9:d2:46:65:36:39:cc:e8:4e:36:35:2f:
5c:55:d0:7a:a9:bf:35:d9:1b:91:53:2f:43:27:ab:5a:31:ca:
14:36:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 16:04:30 2026 by rpki-client