This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa
File: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (raw, json)
Hash identifier: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=
Subject key identifier: AA:39:9D:A5:7E:63:0F:DB:C1:FA:CE:8C:86:BA:B9:B5:EC:94:04:EF
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019B7BA39E4CFF6ABD7E3D3D0CD60E1D6FDD
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa
Signing time: Thu 01 Jan 2026 22:17:58 +0000
ROA not before: Thu 01 Jan 2026 22:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204834
IP address blocks: 188.75.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:9e:4c:ff:6a:bd:7e:3d:3d:0c:d6:0e:1d:6f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 22:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa399da57e630fdbc1face8c86bab9b5ec9404ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:a8:fb:32:6c:e1:da:71:d1:26:7d:45:e5:
89:0f:72:59:19:85:a3:3f:01:22:39:fe:16:07:f3:
88:74:f0:dc:a7:66:43:b1:d0:b8:42:e4:92:c7:e9:
d7:d1:14:26:13:0f:b1:68:61:ce:94:ac:c6:f8:f5:
61:dd:f0:8b:2c:9b:f0:69:f7:91:29:8b:49:e1:16:
20:85:33:ad:d2:cf:11:e0:70:9a:94:f3:6b:a3:da:
e9:e1:87:b9:40:98:c7:30:c4:df:9a:3d:bf:48:5e:
80:6f:43:c1:8b:bd:e8:85:b3:3e:43:7c:1d:1d:6a:
d0:1c:5d:12:78:b4:85:3e:c1:c7:ed:07:3a:d3:b2:
f2:ec:4c:c6:5b:eb:45:73:e6:2d:dc:00:83:26:f2:
dd:06:35:38:80:97:0e:3b:5b:92:1a:f5:39:19:63:
42:85:06:b0:42:2c:dd:1f:36:d4:bc:ad:05:2a:e2:
b9:11:07:6c:7f:12:fb:a0:25:e4:2d:b7:13:f3:07:
84:58:c8:0b:fc:35:a0:4e:a8:3e:70:fc:10:1d:5d:
de:37:f8:ae:26:5c:13:3b:e7:7a:10:be:db:e9:7a:
2c:85:93:e6:5d:ea:64:5e:9f:fb:96:9b:9b:89:99:
46:62:8b:90:5f:93:b8:35:b6:63:b9:38:f0:40:0f:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:39:9D:A5:7E:63:0F:DB:C1:FA:CE:8C:86:BA:B9:B5:EC:94:04:EF
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.75.108.0/22
Signature Algorithm: sha256WithRSAEncryption
29:1e:06:91:70:30:7b:80:f5:ea:8d:51:77:67:dd:ab:19:2f:
b3:81:b5:10:9a:1a:57:20:98:18:7c:a5:7f:33:20:62:93:c9:
94:ae:3f:7f:6e:06:5e:b3:50:6c:5d:13:63:9b:bf:c0:cc:dd:
89:ba:1a:67:be:31:7e:f9:5b:e0:88:94:41:b7:46:24:86:ae:
dc:a4:01:bd:f5:3b:5d:97:bd:ef:da:6b:2e:83:98:a0:e4:4c:
47:ea:ce:1b:03:70:80:c1:d2:76:c7:de:28:e3:61:0f:c6:6a:
6e:1f:94:0a:16:cf:fa:14:e5:39:5b:1d:27:a7:3d:c9:1c:58:
e6:2e:39:2d:f7:ed:ff:5e:9d:a4:75:26:ec:fd:56:74:f5:19:
80:8e:9e:e0:08:d7:cd:35:8d:90:38:69:c3:b6:eb:86:2a:c0:
6d:a9:86:e6:cb:f7:d2:07:14:35:13:27:05:fc:05:7a:aa:42:
57:24:d4:a4:f5:db:2c:a2:53:4f:1d:dd:50:b9:41:a5:78:99:
86:0c:24:6f:72:00:d9:f1:b2:cf:b6:4d:30:16:fb:6d:74:87:
64:5b:06:94:4e:59:e8:7b:70:be:06:00:f9:0a:35:72:aa:60:
5b:de:69:a4:3c:b0:28:57:a4:75:28:f1:ac:3a:95:d8:d8:6a:
a0:d3:92:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o55M/2q9fj09DNYOHW/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTM5OWRhNTdlNjMwZmRiYzFmYWNlOGM4NmJhYjliNWVjOTQwNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBCo+zJs4dpx0SZ9ReWJD3JZGYWj
PwEiOf4WB/OIdPDcp2ZDsdC4QuSSx+nX0RQmEw+xaGHOlKzG+PVh3fCLLJvwafeR
KYtJ4RYghTOt0s8R4HCalPNro9rp4Ye5QJjHMMTfmj2/SF6Ab0PBi73ohbM+Q3wd
HWrQHF0SeLSFPsHH7Qc607Ly7EzGW+tFc+Yt3ACDJvLdBjU4gJcOO1uSGvU5GWNC
hQawQizdHzbUvK0FKuK5EQdsfxL7oCXkLbcT8weEWMgL/DWgTqg+cPwQHV3eN/iu
JlwTO+d6EL7b6XoshZPmXepkXp/7lpubiZlGYouQX5O4NbZjuTjwQA8kWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKo5naV+Yw/bwfrOjIa6ubXslATvMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvcWptZHBYNWpEOXZCLXM2TWhycTV0ZXlVQk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvEtsMA0G
CSqGSIb3DQEBCwUAA4IBAQApHgaRcDB7gPXqjVF3Z92rGS+zgbUQmhpXIJgYfKV/
MyBik8mUrj9/bgZes1BsXRNjm7/AzN2JuhpnvjF++VvgiJRBt0Ykhq7cpAG99Ttd
l73v2msug5ig5ExH6s4bA3CAwdJ2x94o42EPxmpuH5QKFs/6FOU5Wx0npz3JHFjm
Ljkt9+3/Xp2kdSbs/VZ09RmAjp7gCNfNNY2QOGnDtuuGKsBtqYbmy/fSBxQ1EycF
/AV6qkJXJNSk9dssolNPHd1QuUGleJmGDCRvcgDZ8bLPtk0wFvttdIdkWwaUTlno
e3C+BgD5CjVyqmBb3mmkPLAoV6R1KPGsOpXY2Gqg05LX
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:50:20 2026 by rpki-client