This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa
File: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (raw, json)
Hash identifier: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=
Subject key identifier: AB:CF:84:C3:47:57:A2:1D:05:9F:97:6B:37:CB:1B:2E:45:E5:11:39
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019B7C80BB3BDEAE1A40EC62B05FD9F78BD1
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa
Signing time: Fri 02 Jan 2026 02:19:29 +0000
ROA not before: Fri 02 Jan 2026 02:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 193.47.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:bb:3b:de:ae:1a:40:ec:62:b0:5f:d9:f7:8b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jan 2 02:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abcf84c34757a21d059f976b37cb1b2e45e51139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:3b:4c:b9:66:81:8d:64:14:cd:e9:0a:01:
1c:7f:14:f7:f3:44:db:37:19:a7:4a:92:b8:42:47:
0e:39:bf:69:78:ad:e8:bc:a7:bd:43:74:c6:93:a6:
cc:5d:76:be:49:98:e1:dc:fc:89:70:5e:b1:0d:39:
9a:91:a7:81:19:f3:d2:c1:59:fe:ac:99:64:67:b8:
6e:a3:2e:da:a7:3a:79:93:fc:61:97:25:19:22:d6:
c3:fc:5d:2b:a4:cb:2f:c0:36:5a:6d:11:8a:49:6b:
48:4e:6b:bf:57:e1:6f:cd:3c:3b:d4:1f:cc:90:c1:
4b:6e:ce:cd:77:90:ed:29:e4:50:ca:5c:57:32:3c:
9a:b0:57:c0:90:dd:32:92:34:56:98:66:d6:14:45:
36:98:ea:e5:30:f4:ab:77:c5:99:ab:b4:c7:f8:34:
4f:2b:a4:cd:b1:c6:dc:79:3c:a8:ba:e2:7c:cd:20:
6e:9b:12:ba:4e:3c:a6:b1:2f:f3:61:9b:db:d7:60:
c4:16:f1:62:f5:c7:e9:af:a2:af:05:8c:56:5d:6d:
02:99:b2:56:30:f2:da:6d:c1:96:7e:ac:5a:a3:77:
97:25:2b:7e:4d:e9:ed:c6:58:73:fc:7a:c6:07:7a:
19:e9:51:94:9d:ae:53:a7:79:bb:a0:70:2c:88:b7:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:84:C3:47:57:A2:1D:05:9F:97:6B:37:CB:1B:2E:45:E5:11:39
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.0.0/24
Signature Algorithm: sha256WithRSAEncryption
61:06:b8:42:fc:65:5e:50:d2:2b:00:01:2f:ca:d3:32:ef:f5:
4a:83:9e:d7:cb:4c:7e:54:a6:ed:65:c7:22:2a:7b:90:3d:bb:
55:39:82:d4:bc:c5:c2:86:16:cd:01:81:3d:70:52:7a:89:31:
88:11:6d:51:29:21:0d:72:2a:9e:db:4f:bf:b4:63:2c:71:39:
b3:c6:ed:3f:ab:b8:37:9e:a1:66:86:22:c1:04:1c:95:6d:92:
be:c2:0c:86:50:2a:48:46:0c:3b:d0:7e:27:ba:7e:8c:0f:13:
74:40:5a:58:85:90:0c:f2:1c:70:3a:72:9f:7e:2a:d9:c8:3d:
c5:45:98:02:84:65:a1:e8:2d:68:70:8c:eb:53:35:57:68:5c:
95:1c:87:20:7d:09:f1:62:ef:cb:f4:64:0f:83:0f:c6:c6:9c:
86:cd:3e:d1:0d:fd:f1:30:9b:ac:1a:8a:0d:ca:91:3b:2a:45:
6d:f9:52:c6:35:1d:87:95:39:9c:72:32:ff:58:f1:4c:a8:04:
28:15:25:ce:05:09:b8:56:04:21:0e:78:9a:05:4f:14:17:48:
ff:41:cb:0c:0d:e7:6a:81:69:66:90:a7:25:ee:4c:fe:e7:1a:
56:c7:d2:1f:49:c3:b9:9b:f3:48:c6:64:30:76:6d:bd:63:b8:
38:9f:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:47:03 2026 by rpki-client