This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa
File: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (raw, json)
Hash identifier: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=
Subject key identifier: AA:C7:BF:0A:37:80:85:9E:66:AC:96:9A:7A:A4:1B:5D:DC:F0:AB:A7
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 019B7A5B8FEE6B68E0B9C757095E765732AC
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa
Signing time: Thu 01 Jan 2026 16:19:39 +0000
ROA not before: Thu 01 Jan 2026 16:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198785
IP address blocks: 141.138.12.0/24 maxlen: 24
141.138.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:8f:ee:6b:68:e0:b9:c7:57:09:5e:76:57:32:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 16:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aac7bf0a3780859e66ac969a7aa41b5ddcf0aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:8e:93:eb:00:0c:f0:40:be:50:f7:68:7d:
20:3c:02:0b:8c:f6:78:90:bd:42:1a:f8:0c:ab:13:
6a:42:60:7c:ab:62:c3:62:aa:0e:45:80:fe:90:90:
67:29:33:ae:85:81:31:29:fa:ef:a3:7b:4f:69:69:
9f:15:b7:3d:f0:53:1d:0f:0e:2b:1f:65:c0:53:d3:
71:61:62:c8:d2:a3:a4:6c:6f:91:92:5c:83:6f:82:
29:e3:f0:d9:4e:43:11:5c:3c:aa:29:8b:27:82:9e:
d8:3e:05:29:f4:d4:b4:87:94:a4:02:39:b5:be:69:
84:a9:5f:bf:ee:07:a5:40:dc:b1:85:c7:8b:7e:5d:
a7:d2:2b:1c:f0:dc:b4:6c:a5:b4:19:ff:61:8a:c6:
56:12:e7:69:28:d8:93:bf:6d:91:ca:4f:41:a8:2d:
f8:20:73:21:eb:bf:94:ed:9e:9f:ce:fc:c9:04:8c:
55:5d:0e:30:30:7f:16:42:5b:95:a2:72:9d:05:3e:
6f:58:cb:6a:a8:79:0f:94:de:71:85:8e:7e:78:48:
fa:6c:6a:d8:3e:ed:3b:65:5f:db:81:90:76:ae:f7:
82:ac:4d:85:70:b0:d5:17:9a:e0:dc:d2:c5:d4:c5:
e7:5f:88:ba:5b:28:5c:af:14:c6:be:6e:3b:78:c1:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:BF:0A:37:80:85:9E:66:AC:96:9A:7A:A4:1B:5D:DC:F0:AB:A7
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.12.0/24
141.138.14.0/24
Signature Algorithm: sha256WithRSAEncryption
01:04:79:bd:87:bf:6b:d9:50:6f:c5:f5:8b:9d:f8:98:24:c6:
d2:5d:ce:fd:41:2c:dd:4b:4d:c1:fa:38:8d:0d:68:42:9d:3c:
dc:1f:13:de:3e:b8:51:77:a0:06:1e:3d:5b:a3:4b:45:0c:be:
4c:d6:8f:05:8f:9b:49:6c:5b:ac:12:5e:72:24:3f:5f:37:c9:
d1:ac:97:6a:6c:c5:85:00:72:fd:23:3d:bf:64:71:b0:c8:f0:
7e:81:a7:de:98:18:7b:7a:96:ac:20:ec:88:08:ba:64:d9:5b:
b6:39:f8:3f:e6:9b:2f:d4:71:fa:b6:4f:6b:6b:02:4e:37:a7:
33:7b:fc:6f:8e:8d:46:e9:2a:e1:60:36:a3:44:4b:27:1d:86:
12:fa:c4:75:bd:ee:15:31:cf:97:14:2f:1c:b6:91:1e:60:99:
82:ce:39:60:87:2b:f0:a6:40:cb:22:85:58:41:7c:c2:54:38:
6d:cb:1b:9a:04:60:0b:95:8a:2f:06:0f:48:05:a6:3b:09:b1:
29:4d:5d:2a:0e:eb:ae:d2:6b:93:08:5a:95:1a:de:cd:c1:96:
ba:33:65:7f:2e:2a:1a:29:86:fa:fc:28:1e:80:6a:af:a3:78:
34:c9:f7:09:25:e1:ad:71:2c:e8:f4:e1:34:92:37:8c:df:f1:
bb:c6:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:39:02 2026 by rpki-client