This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/0qb9sAGkBvYUU1loJseXlz25OJ8.roa
File: 0qb9sAGkBvYUU1loJseXlz25OJ8.roa (raw, json)
Hash identifier: m0/HWEMnf/XDbGuQAyqai3DBn5WtxpMTkpZaFwmohUU=
Subject key identifier: D2:A6:FD:B0:01:A4:06:F6:14:53:59:68:26:C7:97:97:3D:B9:38:9F
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019B791050C252CE08366A33A50F9CCB6B19
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/0qb9sAGkBvYUU1loJseXlz25OJ8.roa
Signing time: Thu 01 Jan 2026 10:17:50 +0000
ROA not before: Thu 01 Jan 2026 10:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196984
IP address blocks: 194.30.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:50:c2:52:ce:08:36:6a:33:a5:0f:9c:cb:6b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 10:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2a6fdb001a406f61453596826c797973db9389f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:31:fe:7e:91:7b:1f:67:72:31:be:02:d3:
5e:d8:9b:03:85:4b:9a:70:8a:7f:8b:16:f7:4a:63:
fd:3b:15:1c:90:9e:23:98:df:82:e5:98:e0:f7:5b:
27:ea:4e:5b:5b:11:6d:bd:f9:a0:f7:6f:b6:73:cf:
fb:1c:57:d3:af:d4:77:e1:d7:be:ca:7c:5d:f4:f5:
44:60:10:5c:bc:58:20:53:7f:53:4f:c5:b6:0b:e6:
d4:fc:90:1c:62:37:77:b7:af:e8:96:4e:15:93:09:
31:31:17:f5:76:ae:13:80:99:99:6f:47:df:df:36:
23:1f:aa:52:f1:80:04:85:72:bc:5b:37:13:3e:ed:
86:1f:f1:fd:ee:7c:f1:63:10:aa:61:6c:e4:30:3f:
94:8d:0d:6b:4d:b0:0b:e7:73:e4:b3:54:fd:78:be:
28:f7:25:87:69:cb:a6:b6:24:72:5e:c5:24:b5:66:
d4:d1:56:17:17:56:cc:6d:c1:44:9e:4c:68:15:7b:
c4:b7:b4:6b:db:a2:f4:27:e3:2d:02:71:5c:3b:9e:
5c:ea:32:51:8d:ac:79:64:c3:17:a2:53:ce:42:5c:
1b:9b:97:9d:a5:25:21:9a:f7:1d:13:93:59:d3:64:
dd:6a:9c:63:58:de:67:fa:e4:e9:0c:f7:43:64:3f:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:FD:B0:01:A4:06:F6:14:53:59:68:26:C7:97:97:3D:B9:38:9F
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/0qb9sAGkBvYUU1loJseXlz25OJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1c:a2:db:16:4d:60:97:0f:96:db:d1:db:13:d8:e7:45:4f:
0d:99:1a:ed:4d:32:37:32:1c:a6:31:8b:ed:35:f4:d1:31:ad:
f9:83:2f:80:b6:dc:e4:ff:1d:25:75:ba:e0:0f:97:ef:75:44:
cc:77:a9:c5:b8:73:bf:25:29:b0:44:09:03:03:a4:9f:0f:27:
da:d3:b5:f4:79:cc:66:4f:a9:a2:7c:b2:6f:0e:87:82:43:b8:
8a:c2:d4:0b:1c:f7:fa:99:45:88:25:8d:bd:c5:98:98:99:2b:
ac:be:3f:89:1c:f9:05:b9:85:54:89:7e:82:db:d2:97:84:29:
07:fb:dc:0c:ec:ad:2f:f7:ab:d3:c7:28:01:74:d8:e9:a0:4c:
32:41:30:bf:f6:e5:72:f2:5a:c6:02:9a:15:d9:8f:b7:7e:b0:
ef:12:2d:92:cc:ea:70:ea:12:c8:19:d7:49:58:9c:6e:57:5b:
e0:29:a4:04:04:98:9e:1e:83:e8:77:be:d4:cf:ef:5d:66:ab:
35:fc:7d:7f:f4:06:d0:95:89:65:5b:75:61:d9:df:b7:1a:ba:
26:dd:df:cc:5e:8a:d1:2b:4c:39:e4:93:35:4e:1c:2d:51:59:
f3:78:8e:46:84:f8:81:e2:53:33:8f:52:34:04:40:5a:fc:d3:
7d:f9:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:15:31 2026 by rpki-client