This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/qiZqn4t44rqOklzg05vu8ezVPj8.roa
File: qiZqn4t44rqOklzg05vu8ezVPj8.roa (raw, json)
Hash identifier: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=
Subject key identifier: AA:26:6A:9F:8B:78:E2:BA:8E:92:5C:E0:D3:9B:EE:F1:EC:D5:3E:3F
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019BDB2AEB5352C01B8EA326A00C750AF1C7
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/qiZqn4t44rqOklzg05vu8ezVPj8.roa
Signing time: Tue 20 Jan 2026 11:29:41 +0000
ROA not before: Tue 20 Jan 2026 11:29:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209899
IP address blocks: 45.65.96.0/22 maxlen: 24
185.136.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:db:2a:eb:53:52:c0:1b:8e:a3:26:a0:0c:75:0a:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Jan 20 11:29:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa266a9f8b78e2ba8e925ce0d39beef1ecd53e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:9f:a5:e1:80:8f:bd:38:86:07:75:d3:c8:
58:31:50:6b:8a:fd:98:1f:6f:5e:c4:55:f8:66:e1:
86:d0:45:2f:2a:0b:32:77:e6:20:6c:f1:a7:72:ac:
c2:e0:d4:30:5c:fd:d3:bf:b3:58:95:be:f4:94:be:
cb:d2:e5:5c:71:f1:ec:27:d3:1f:ff:5f:31:05:97:
c8:47:18:33:04:b4:0c:00:44:15:9b:ea:69:38:84:
4b:fe:f1:ef:cc:6d:04:59:bb:3b:4b:43:64:92:54:
e2:d7:25:2f:7f:f3:60:f0:e5:76:11:ea:2a:bc:ec:
f8:12:92:52:78:04:86:0f:53:cc:b6:58:1f:e6:e6:
ae:bf:87:c7:e4:34:d5:05:0d:30:01:8c:fe:b4:14:
0c:a5:05:3c:c6:a6:ba:ea:c5:83:a0:93:14:cf:b9:
f7:7d:1a:6f:4f:26:8a:e1:25:63:8a:24:15:93:f7:
27:5d:60:ff:75:8e:c9:d1:83:2b:12:d6:1b:c8:14:
0b:0c:40:f3:27:fb:58:71:ac:ab:18:eb:c6:6c:bb:
a2:03:a5:02:27:ad:b6:a0:8b:e9:1e:6b:d8:03:74:
02:b4:ed:a2:24:84:e8:88:67:a8:9c:f5:08:e1:53:
2a:81:71:88:ab:b4:1d:67:c0:b0:b1:0f:8a:c8:e8:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:6A:9F:8B:78:E2:BA:8E:92:5C:E0:D3:9B:EE:F1:EC:D5:3E:3F
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/qiZqn4t44rqOklzg05vu8ezVPj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.96.0/22
185.136.244.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d0:cd:49:d2:0f:cd:19:db:67:d8:4b:c8:84:fb:be:47:f9:
b6:cf:18:f2:56:09:d5:48:7b:4f:a3:45:00:3e:30:3a:7f:ae:
0c:5c:1b:bb:dd:d4:e7:62:f2:b7:42:ef:3b:17:a7:5c:1a:65:
85:a3:d2:cb:47:28:86:78:16:92:3c:6a:ed:03:fd:f6:1f:79:
ab:58:b6:f0:f8:bd:b3:69:bc:50:d3:78:36:4b:c8:88:08:3e:
de:49:ad:f6:e4:99:60:7f:3f:49:a6:01:f0:e7:38:a4:57:f2:
ca:7b:4b:ce:2c:9a:51:71:32:b0:2f:ca:1c:9d:1f:5a:1c:5d:
a7:2b:f1:ac:fd:0e:7d:e8:2e:f4:18:63:4f:71:0c:13:bb:2c:
ab:57:26:3d:f2:25:64:19:3c:01:01:d0:89:9e:66:f7:62:35:
29:94:2b:d5:bc:77:7a:75:51:ba:3e:cf:1d:30:be:69:bf:41:
a6:b3:0b:b4:51:91:ce:5f:de:93:68:f8:78:a6:77:34:fb:09:
71:40:70:74:d9:26:46:81:3b:5e:22:74:5b:f8:ee:b9:b4:5c:
c9:32:3d:2f:1a:19:72:59:57:7a:ab:93:47:f5:b7:d5:8d:e5:
4d:33:15:13:50:be:98:af:48:d2:0b:24:fc:ff:29:66:cb:de:
a0:f0:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:51 2026 by rpki-client