This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/qJisxySAK6JZnHxaLd7ISixX4yM.roa
File: qJisxySAK6JZnHxaLd7ISixX4yM.roa (raw, json)
Hash identifier: u1m9TjS/Ff2I0wOcnKRahicR9oJA1vO1pMUM0rujL7U=
Subject key identifier: A8:98:AC:C7:24:80:2B:A2:59:9C:7C:5A:2D:DE:C8:4A:2C:57:E3:23
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019B7C801E9AF15540508E20DBDA30539BE9
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/qJisxySAK6JZnHxaLd7ISixX4yM.roa
Signing time: Fri 02 Jan 2026 02:18:49 +0000
ROA not before: Fri 02 Jan 2026 02:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47150
IP address blocks: 90.84.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:1e:9a:f1:55:40:50:8e:20:db:da:30:53:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 2 02:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a898acc724802ba2599c7c5a2ddec84a2c57e323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:d3:c6:e4:5d:f6:fc:2a:43:96:32:d1:ca:
f3:c1:90:b2:33:79:10:16:c8:66:a0:97:8f:8e:c1:
a8:a0:0f:84:65:7e:b9:c5:5f:de:94:2e:0f:f1:18:
80:22:dc:bc:f4:df:48:4e:f5:ee:16:f8:4a:55:52:
ac:94:a1:16:74:df:c7:9c:da:0a:68:b3:b2:c3:9b:
35:48:61:d1:71:f2:24:6d:f0:e1:f4:c5:d2:d1:28:
6b:d5:d6:3f:f1:c7:41:00:e2:ee:5c:de:41:ed:56:
52:6a:40:3a:fc:fc:35:ec:dc:95:8e:28:59:4a:8b:
e1:0a:02:26:1a:ec:8f:50:4b:f1:d2:f1:62:9d:ec:
09:dc:5a:34:c6:71:89:c7:cc:bd:af:27:4c:3d:49:
e6:4d:94:92:8c:2c:29:19:69:4a:c8:f9:23:df:7b:
76:6b:62:34:79:9e:0e:9a:2f:24:f5:9a:7a:11:86:
1b:58:39:37:cc:4b:11:95:63:b5:b0:cb:1a:e6:c5:
92:26:2d:95:04:1f:fd:b2:95:5f:3a:42:d2:b1:71:
1a:4b:3a:e7:e2:9a:6b:d4:91:3d:9d:e4:dc:45:5a:
d2:b7:b9:42:75:0c:fd:66:ad:c4:8d:ae:45:4c:2c:
f1:62:8f:48:a8:ca:e6:da:92:49:21:e7:3a:9f:10:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:AC:C7:24:80:2B:A2:59:9C:7C:5A:2D:DE:C8:4A:2C:57:E3:23
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/qJisxySAK6JZnHxaLd7ISixX4yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.12.0/23
Signature Algorithm: sha256WithRSAEncryption
98:6d:bc:8d:74:3a:bd:ed:16:59:52:6c:7a:43:98:c9:11:8e:
36:22:44:f7:4c:91:e1:03:25:58:f2:0b:50:f3:e8:83:27:9a:
35:7a:2a:01:27:27:2d:1b:bd:ef:d2:19:e0:40:c9:33:54:cb:
0a:f6:e4:8d:78:90:d2:aa:0e:c4:51:b3:be:a8:e7:a6:6b:ba:
46:13:bb:48:5b:5d:84:4b:bd:7e:42:19:f8:fa:fc:0a:19:0b:
49:89:77:53:13:a3:73:36:53:03:b9:83:51:69:76:92:06:4f:
18:89:a2:2b:cb:ca:31:79:04:65:ef:5d:ed:0e:67:57:31:d8:
5f:e6:be:3b:a2:42:58:a1:a5:aa:d0:d8:19:ed:dc:4a:ec:bd:
e8:6c:db:05:f2:d6:67:27:dc:ee:fc:b6:02:21:5f:db:a9:b2:
f8:ea:bd:2d:92:19:81:ff:29:d8:fa:c0:7e:c8:f5:ad:a8:02:
e9:98:50:bd:f6:19:46:66:40:bc:6b:7b:eb:8b:c9:78:54:f2:
f0:f7:6d:d0:d9:0c:78:5a:c8:34:14:75:34:be:cf:75:ac:10:
5e:86:89:b8:e1:e6:47:ba:51:ce:49:7e:4f:cd:75:19:4f:c4:
dc:42:f9:3d:e0:7d:c8:08:ca:72:a4:49:18:ba:8c:79:87:02:
37:8e:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:02:06 2026 by rpki-client