This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/QaR40Du4QHojtPoMdpOj--q01WU.roa
File: QaR40Du4QHojtPoMdpOj--q01WU.roa (raw, json)
Hash identifier: eIGnLm0U97IrEJBoUThT3XNpPhCvMXo7GasLn6DQpoQ=
Subject key identifier: 41:A4:78:D0:3B:B8:40:7A:23:B4:FA:0C:76:93:A3:FB:EA:B4:D5:65
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019B76EB0B029D927CFD44198A3C843D4812
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/QaR40Du4QHojtPoMdpOj--q01WU.roa
Signing time: Thu 01 Jan 2026 00:17:53 +0000
ROA not before: Thu 01 Jan 2026 00:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12510
IP address blocks: 155.56.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:0b:02:9d:92:7c:fd:44:19:8a:3c:84:3d:48:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 1 00:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41a478d03bb8407a23b4fa0c7693a3fbeab4d565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:d7:c5:cb:0a:5a:69:9b:3a:15:2c:b9:ad:
84:74:9b:1a:25:01:f2:bf:1c:0c:22:d1:0a:a9:a7:
97:e9:f8:17:34:45:21:c0:f1:88:66:ea:83:9e:95:
6a:74:fc:b2:54:ce:91:95:42:fd:86:56:9d:9d:6a:
e2:1c:89:a6:6f:cb:1a:96:d4:68:60:f8:54:9f:1d:
f9:45:26:73:97:50:47:53:47:28:dd:7f:21:7c:d9:
a5:e5:6d:8b:37:f6:2f:00:9d:70:25:92:54:65:19:
14:3c:07:c0:64:c1:4d:fb:10:5d:19:49:88:32:07:
05:fe:24:38:47:3c:a3:0b:e3:cc:8c:11:13:a8:27:
c4:4c:0f:0f:94:e7:de:eb:b7:38:d8:3f:29:66:62:
c6:8e:ca:2c:d2:c2:b4:54:1a:2a:5d:01:b6:96:75:
7b:ec:98:dc:da:a9:23:83:81:0d:50:1c:03:d9:06:
2b:23:80:59:b8:1c:75:19:8a:06:75:6a:7f:cf:63:
b5:25:7b:ba:6b:9a:04:35:12:ac:c1:52:e2:b1:52:
b1:dd:5a:df:cf:2e:f7:23:59:fa:ea:f8:98:fa:e8:
c7:c6:38:f5:9f:ec:26:f3:c6:d0:e3:f5:41:dc:a1:
e3:47:06:20:d7:1a:1a:bf:ed:fd:a7:4b:d7:70:ed:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:78:D0:3B:B8:40:7A:23:B4:FA:0C:76:93:A3:FB:EA:B4:D5:65
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/QaR40Du4QHojtPoMdpOj--q01WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.56.192.0/18
Signature Algorithm: sha256WithRSAEncryption
08:4c:72:05:e2:5a:95:be:b5:46:ca:20:b3:49:e3:45:fe:9a:
8f:37:6b:19:13:99:c5:00:3c:cf:c2:d6:9e:24:bf:40:b3:40:
84:b2:1f:e4:5b:e0:c9:65:60:62:67:15:10:b8:9b:b1:8b:21:
8d:28:74:6f:8c:d2:e1:02:34:9e:47:20:38:b9:8b:c8:3e:38:
87:36:5f:35:0d:f1:9a:2f:b1:1e:ed:3e:f6:a7:0e:61:e1:d9:
f4:60:fe:5c:7b:09:bc:46:1f:9f:da:a0:3a:07:35:2a:53:c3:
b9:53:ac:34:36:63:78:2b:bf:59:87:c1:a8:ee:ed:64:43:ed:
77:db:b5:4c:d7:e3:0a:1a:26:f9:48:86:78:9f:13:73:80:04:
22:3f:09:4e:a1:40:28:72:65:1e:78:eb:98:61:47:80:3f:03:
e1:91:c4:0a:8e:53:4b:74:f3:d7:72:e6:53:e3:9d:61:d0:f4:
45:e9:ba:2f:86:76:7c:8c:59:2e:68:ad:5f:f7:4b:97:4b:cd:
ce:5a:26:7c:bc:1b:34:dd:0e:3a:95:3d:ab:f6:f8:f4:26:96:
5e:3c:b7:a8:c7:61:b3:8a:48:9f:af:89:2e:79:45:25:3e:08:
f9:1f:06:aa:ee:f7:f5:b6:cd:5e:bb:c0:5d:aa:3d:96:df:4e:
9e:a2:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:22:58 2026 by rpki-client