This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa
File: qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa (raw, json)
Hash identifier: h1N79r6IwikpSxLGbvCodpvdgy0jF1MGCYu94qAhjf4=
Subject key identifier: A8:9E:A9:73:81:50:20:E1:AB:29:B9:54:AE:6C:EA:A4:A8:58:D5:6F
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019B77C6FAB90EE32FFB6B4E9DD533CC401C
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa
Signing time: Thu 01 Jan 2026 04:18:07 +0000
ROA not before: Thu 01 Jan 2026 04:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265827
IP address blocks: 95.164.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:fa:b9:0e:e3:2f:fb:6b:4e:9d:d5:33:cc:40:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jan 1 04:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a89ea973815020e1ab29b954ae6ceaa4a858d56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:29:46:b6:a7:56:3c:32:e5:09:b1:ed:97:
a4:05:2e:be:e0:c8:e0:b5:71:4c:8a:db:f7:ca:af:
42:45:8c:f0:08:ff:84:ef:8d:c3:c9:9b:ca:a8:dc:
20:2b:34:57:2e:bb:ef:10:d8:fc:c0:a9:1c:4c:1a:
24:4d:a5:1f:99:f4:a9:8a:ca:82:bb:b1:ec:20:c1:
a4:ba:52:00:3f:a6:28:18:a6:69:40:cf:d0:42:88:
05:2f:e9:e6:8f:ff:4a:43:f7:9a:93:19:37:cf:91:
fe:91:0a:6f:13:22:ee:07:4d:57:66:22:e2:a6:bf:
4e:d6:fb:3d:4d:ae:ca:fa:4b:ce:a9:84:58:75:fa:
32:80:4b:ad:cd:d1:be:4a:c3:5b:14:79:fd:73:74:
dc:55:e5:3b:5e:6c:61:a6:bf:63:fc:3d:06:f0:27:
4d:f9:12:46:32:04:b0:26:86:9f:ea:33:81:55:f0:
5b:95:46:30:60:fd:a2:94:dc:48:7a:74:35:95:b4:
d8:41:87:7b:e7:d7:9d:da:7f:11:20:82:9d:0c:31:
e7:25:df:cb:e6:2d:bd:71:55:d6:76:94:b3:cd:63:
42:93:3f:f9:28:96:3d:9f:1e:5e:5d:aa:d6:20:08:
e3:4a:c7:e3:31:2b:7b:57:8a:71:fb:2a:61:b1:27:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:A9:73:81:50:20:E1:AB:29:B9:54:AE:6C:EA:A4:A8:58:D5:6F
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.162.0/24
Signature Algorithm: sha256WithRSAEncryption
02:45:3e:13:3e:30:0c:93:52:45:02:8e:68:73:91:b7:a4:c1:
ab:6c:6d:83:bb:b8:b4:52:d7:f6:31:d7:80:02:cc:eb:99:a4:
19:b8:4a:4b:71:5d:ba:16:2e:51:66:c3:7a:6f:ba:e4:09:92:
0a:16:33:f0:0c:11:8a:fa:31:3f:af:9d:dc:43:fa:ea:8f:ec:
44:27:8b:3f:6d:26:7a:ae:8d:02:6b:09:1d:41:56:b5:16:0e:
3f:fe:5b:26:97:07:00:6d:f1:05:b0:eb:52:15:94:ae:d5:a8:
c2:00:4c:73:c1:97:3c:31:ad:c0:4e:d1:f6:00:1c:2f:57:2f:
b1:dc:e4:3d:f4:bc:74:0b:f8:b9:1e:8f:3e:2a:e4:a4:cc:60:
a8:9c:9e:a2:76:8d:50:4e:2c:2c:52:41:8d:c2:c5:a6:a2:23:
0f:a0:24:98:65:bc:a6:53:ee:14:87:1d:7a:8d:b5:fb:a3:46:
cb:49:cd:2c:44:86:34:d6:0f:f8:ed:3a:aa:a9:cb:ed:d3:33:
95:3e:c6:e0:38:c4:53:8a:c7:26:bf:46:e8:59:17:ad:1e:5b:
d5:ec:ec:f7:da:7d:36:7b:b1:66:45:5c:fe:7c:9f:47:6e:83:
0b:01:1e:89:ce:c9:30:27:6d:58:90:ef:32:90:d4:7b:2d:c2:
a8:93:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:45:50 2026 by rpki-client