This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qe__KyezimuiXYFYFxZiTFdwmkU.roa
File: Qe__KyezimuiXYFYFxZiTFdwmkU.roa (raw, json)
Hash identifier: lqwe4jlQaUehwqmjgGPrMSuExZjhCCYZx87CGNaD+VA=
Subject key identifier: 41:EF:FF:2B:27:B3:8A:6B:A2:5D:81:58:17:16:62:4C:57:70:9A:45
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019B7F14BD8213C799DFD782A67035CA46C3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qe__KyezimuiXYFYFxZiTFdwmkU.roa
Signing time: Fri 02 Jan 2026 14:20:24 +0000
ROA not before: Fri 02 Jan 2026 14:20:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200950
IP address blocks: 194.231.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:bd:82:13:c7:99:df:d7:82:a6:70:35:ca:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 14:20:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41efff2b27b38a6ba25d81581716624c57709a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:cb:0b:3e:d6:ef:3d:c9:6b:c5:f3:8c:29:
93:c8:cf:d7:cb:06:6b:03:9e:2b:35:ab:4f:60:9d:
5a:1b:b4:d6:4d:9f:38:2c:4c:cc:23:f3:c8:ae:ec:
78:f8:1e:fd:d5:3d:3f:2a:99:9f:a9:81:8a:5d:32:
5d:46:20:c3:31:bc:24:fe:32:28:bf:7f:61:90:33:
4f:4f:bf:b6:87:55:11:8b:43:87:56:40:e7:73:d8:
8b:0c:4b:d5:ff:15:f1:d8:1c:61:eb:75:7c:d6:c2:
4b:8a:a2:e9:30:db:66:f3:a6:d4:8a:fe:a0:c7:1c:
9b:d9:67:6f:74:dd:54:9f:36:a3:84:95:f9:e8:2f:
72:54:47:d2:0b:2c:59:1d:00:66:aa:96:ad:0f:de:
47:92:24:76:92:77:07:34:46:71:1b:c2:4b:7b:f2:
d6:9e:1f:f3:d4:69:47:f3:9c:2f:3e:49:8a:93:4d:
11:33:b7:61:54:07:0e:36:1e:cd:a3:4c:47:9b:60:
41:a8:90:cf:84:8a:a3:a7:ad:71:3c:ec:7b:c6:11:
e8:90:e4:ea:60:01:d9:86:3e:01:25:d0:27:7f:2e:
f6:d9:c9:84:0f:17:07:48:ee:bf:5e:23:00:96:3f:
48:88:fd:1a:5d:e4:aa:25:24:1d:d4:b5:a5:b1:38:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EF:FF:2B:27:B3:8A:6B:A2:5D:81:58:17:16:62:4C:57:70:9A:45
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qe__KyezimuiXYFYFxZiTFdwmkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.218.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:a4:ae:c2:18:3e:25:58:c9:7c:46:a5:3e:d8:9f:52:68:1d:
ad:79:3f:e7:de:b4:a5:55:98:73:8f:da:24:e3:c5:fe:3e:41:
2f:31:74:7b:d1:89:fb:62:90:37:c1:8c:9c:55:9c:8f:04:e5:
86:aa:41:b8:26:4e:19:b3:70:7a:6a:31:08:d7:a6:dc:7e:fd:
6c:69:b8:41:aa:ef:75:82:c0:41:82:6c:0a:68:d0:b6:d2:47:
ed:c2:0c:6e:40:52:88:1b:9e:a7:30:3d:9b:e5:fc:9a:74:35:
81:3a:d8:62:4f:4e:12:03:b2:ea:e8:83:ee:7a:39:ff:a7:22:
fd:cb:60:5f:1d:cd:1c:a8:fc:8d:d1:d2:9b:1d:8b:bd:ae:f2:
d6:4e:b1:83:f0:6f:98:e4:0c:de:61:11:43:bc:78:31:81:23:
9a:0c:b6:83:d8:97:02:e5:a4:6d:3a:40:3b:13:e3:5f:a7:89:
3d:43:f1:e6:bb:a4:a3:aa:97:55:fb:c2:b4:8d:f1:9a:c6:3e:
79:f8:13:9b:50:9a:c1:d9:cd:4b:03:0c:ad:54:99:44:63:f5:
18:98:8f:dd:b9:1d:ee:80:72:a9:c9:2e:69:32:69:a8:55:cf:
47:bd:43:66:2e:69:4b:6c:8f:01:15:1f:1f:b2:87:66:2a:9a:
95:3e:22:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FL2CE8eZ39eCpnA1ykbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWVmZmYyYjI3YjM4YTZiYTI1ZDgxNTgxNzE2NjI0YzU3NzA5YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtijLCz7W7z3Ja8XzjCmTyM/XywZr
A54rNatPYJ1aG7TWTZ84LEzMI/PIrux4+B791T0/KpmfqYGKXTJdRiDDMbwk/jIo
v39hkDNPT7+2h1URi0OHVkDnc9iLDEvV/xXx2Bxh63V81sJLiqLpMNtm86bUiv6g
xxyb2WdvdN1UnzajhJX56C9yVEfSCyxZHQBmqpatD95HkiR2kncHNEZxG8JLe/LW
nh/z1GlH85wvPkmKk00RM7dhVAcONh7No0xHm2BBqJDPhIqjp61xPOx7xhHokOTq
YAHZhj4BJdAnfy722cmEDxcHSO6/XiMAlj9IiP0aXeSqJSQd1LWlsTiIuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHv/ysns4prol2BWBcWYkxXcJpFMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvUWVfX0t5ZXppbXVpWFlGWUZ4WmlURmR3bWtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwufaMA0G
CSqGSIb3DQEBCwUAA4IBAQC7pK7CGD4lWMl8RqU+2J9SaB2teT/n3rSlVZhzj9ok
48X+PkEvMXR70Yn7YpA3wYycVZyPBOWGqkG4Jk4Zs3B6ajEI16bcfv1sabhBqu91
gsBBgmwKaNC20kftwgxuQFKIG56nMD2b5fyadDWBOthiT04SA7Lq6IPuejn/pyL9
y2BfHc0cqPyN0dKbHYu9rvLWTrGD8G+Y5AzeYRFDvHgxgSOaDLaD2JcC5aRtOkA7
E+Nfp4k9Q/Hmu6SjqpdV+8K0jfGaxj55+BObUJrB2c1LAwytVJlEY/UYmI/duR3u
gHKpyS5pMmmoVc9HvUNmLmlLbI8BFR8fsodmKpqVPiJf
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:22 2026 by rpki-client