This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uqJVQULxYFFFA5gySQFNCCoM4mQ.roa
File: uqJVQULxYFFFA5gySQFNCCoM4mQ.roa (raw, json)
Hash identifier: D2p+FrBUImg8Yd/4u77fupreCMlTi8cL3l8V1T27H5Q=
Subject key identifier: BA:A2:55:41:42:F1:60:51:45:03:98:32:49:01:4D:08:2A:0C:E2:64
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F84AC7BC3B35CEB52674C91E313A85E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uqJVQULxYFFFA5gySQFNCCoM4mQ.roa
Signing time: Fri 02 Jan 2026 16:22:39 +0000
ROA not before: Fri 02 Jan 2026 16:22:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44956
IP address blocks: 95.46.97.0/24 maxlen: 24
95.47.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:ac:7b:c3:b3:5c:eb:52:67:4c:91:e3:13:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:22:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baa2554142f160514503983249014d082a0ce264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:7b:25:bd:e2:4c:0d:5d:6c:73:65:6a:c6:
f4:0a:53:c4:b3:ec:f6:28:ef:41:19:80:bc:08:7d:
46:bd:22:05:6b:b7:59:87:5c:b6:32:ac:95:8f:4b:
f6:9b:ce:ec:13:23:5f:6f:f7:46:e9:55:06:a0:ab:
29:16:2e:f3:66:a2:04:43:cd:ed:a7:0f:01:94:7e:
6c:25:55:48:0c:44:9e:07:2f:f2:88:f8:8f:e6:9f:
ca:1d:41:c9:3a:5b:90:50:47:fa:99:1b:8a:9d:07:
cd:74:c0:ae:93:40:65:b3:b1:48:bd:c2:11:36:2c:
2b:5f:6d:ef:00:b4:bb:05:3d:60:f5:be:c1:85:55:
c5:74:c9:be:c6:d7:b0:94:a0:d1:07:c2:a1:a5:a4:
66:80:e3:01:f1:51:9f:d8:b8:af:f1:e5:9a:97:e2:
58:87:71:f6:26:b0:11:68:c7:7e:cb:ad:70:25:21:
ef:89:c7:a7:d9:92:fc:1f:c4:91:b6:fb:d3:3d:a1:
f2:de:4e:5e:e0:bc:aa:89:06:e1:dd:c6:0a:a0:25:
63:68:d5:5a:4c:96:74:9e:2d:66:e6:9a:c8:2e:e5:
f5:bc:76:5b:84:c3:70:81:f7:54:39:4b:89:64:82:
a9:13:65:13:a8:ab:d2:52:46:96:88:2b:77:22:29:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:55:41:42:F1:60:51:45:03:98:32:49:01:4D:08:2A:0C:E2:64
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uqJVQULxYFFFA5gySQFNCCoM4mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.97.0/24
95.47.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:54:52:51:73:ba:33:22:66:dc:5d:ef:43:bc:bd:07:82:24:
b3:7b:18:2b:40:7b:c7:da:db:57:31:36:bb:3e:84:28:18:e1:
33:f2:8c:f9:06:a2:39:bc:ef:fb:0c:34:83:e1:d8:04:01:0f:
f2:a5:72:34:82:49:05:97:6c:f3:2e:61:5f:2e:b4:c2:bd:b1:
25:7b:26:02:05:91:16:11:db:40:cc:fe:69:b7:1c:0a:23:27:
3d:36:9c:1d:15:48:fc:90:bd:ba:52:79:ad:24:c0:0e:cb:92:
09:9e:37:98:97:f5:31:4a:40:9e:f9:8e:db:28:64:25:7e:b9:
29:66:1c:68:c7:8a:e7:d8:1d:49:90:57:83:fa:fc:c9:82:c6:
22:a8:5f:7e:80:54:fc:01:08:4c:5b:b0:9d:32:c9:68:bd:c6:
2c:a8:00:67:09:01:cf:53:7f:f3:ad:45:29:1d:99:02:3c:e9:
51:08:36:09:8f:ba:73:ec:81:c0:96:94:d6:57:a5:49:01:f6:
d0:54:02:81:1e:a1:ef:be:7d:7e:b3:0f:52:51:ed:52:80:15:
5a:ce:35:a7:ec:12:75:89:90:fa:c4:a4:74:8b:d1:f0:9c:14:
98:b8:d6:a5:44:26:d4:01:13:1b:15:ab:47:4b:0f:9b:cd:1b:
bc:3e:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:02 2026 by rpki-client