This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa
File: qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa (raw, json)
Hash identifier: sFTYpyONZM4849OiQuWMraeanFpbFNLi3ztibzARdQc=
Subject key identifier: A8:50:76:10:94:FE:75:10:C7:02:3F:D3:4E:76:5E:08:76:7D:19:CC
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 019B76EB7E112DC97F55304F3D01587E9B5C
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa
Signing time: Thu 01 Jan 2026 00:18:23 +0000
ROA not before: Thu 01 Jan 2026 00:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203213
IP address blocks: 185.142.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:7e:11:2d:c9:7f:55:30:4f:3d:01:58:7e:9b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 00:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a850761094fe7510c7023fd34e765e08767d19cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:85:12:65:92:34:41:e0:f7:15:31:06:ef:
d4:8f:b7:35:3d:19:47:05:74:f4:22:7b:89:38:ed:
fc:54:45:af:64:f6:c5:02:c1:86:06:6f:e4:0c:93:
39:f8:20:ba:79:26:37:5e:95:4a:2d:a9:2d:e7:40:
a0:11:b1:33:f6:6a:d5:eb:f0:70:73:20:e8:ee:49:
2e:69:e3:c9:dc:b3:34:76:ec:a5:6a:88:29:4e:2a:
bc:90:8b:ed:ea:9c:fc:38:0b:d1:28:df:c6:40:6d:
f8:68:d2:6a:f5:8f:f6:70:02:13:d9:56:52:be:a0:
d5:7c:09:a9:fc:f1:7f:6d:e0:9e:0b:a2:d6:7f:f1:
10:5d:7f:74:64:b1:6b:9b:7e:9f:28:1e:9d:97:78:
c4:a4:b8:0b:8a:81:f5:75:42:c5:e1:1c:83:78:7a:
63:60:5d:f1:09:d6:cb:a3:cc:24:f2:a5:f0:89:fe:
ca:75:f0:f0:f0:da:22:4c:ba:c2:0d:f8:ea:f3:8c:
e7:12:52:43:7d:bf:24:7a:31:f3:14:aa:f9:7c:69:
90:0a:9c:e4:e9:22:da:48:76:9d:b0:af:c8:3e:8c:
19:61:03:ec:98:9d:35:6c:8e:d1:21:b4:4a:de:2e:
e2:64:9f:00:51:77:bc:32:5f:80:01:86:22:40:c7:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:50:76:10:94:FE:75:10:C7:02:3F:D3:4E:76:5E:08:76:7D:19:CC
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.80.0/22
Signature Algorithm: sha256WithRSAEncryption
73:a2:9f:93:f8:98:d1:51:06:57:61:1e:8b:06:f4:63:3b:0b:
6d:d5:11:60:c5:69:8f:2d:e4:a7:91:c3:c5:f5:a6:39:ac:21:
a5:67:09:4c:d3:1f:ac:c0:2a:fe:a1:28:d1:ee:39:7d:88:c3:
34:59:35:ad:23:ec:28:11:c5:5e:1a:19:db:a4:be:2b:52:6b:
d5:43:81:23:0b:1c:28:60:3f:b6:91:80:65:a5:38:9c:37:74:
6d:51:51:59:bc:62:2c:12:bd:be:4b:f9:2a:69:83:0e:04:83:
6f:a0:e4:bb:27:c0:17:8f:49:c9:a3:b7:39:7b:43:1f:c3:46:
a9:09:40:4e:35:db:ad:cc:9d:9a:78:1d:ac:dd:11:9d:42:cc:
71:d6:ed:ee:8d:43:b8:e2:77:f8:d6:c1:62:52:d9:cb:5a:b2:
97:ed:e6:10:b2:4c:80:d4:65:b6:6c:9f:8e:c7:81:f7:75:a8:
ef:40:2a:5f:ee:8f:21:2b:04:b9:4a:9c:14:a2:02:d6:a1:b2:
e2:21:eb:fe:cd:8c:ae:ba:e6:ec:1e:bf:aa:9b:af:f9:75:4c:
50:da:5a:06:37:24:af:27:48:59:2e:7c:27:a6:d5:63:96:e8:
c0:67:d5:bb:03:76:c0:b9:f8:b6:7d:35:11:db:53:10:b9:ac:
4a:0c:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:41:46 2026 by rpki-client