This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/pQ_VvmJi_vK46uORTXhpqL-B198.roa
File: pQ_VvmJi_vK46uORTXhpqL-B198.roa (raw, json)
Hash identifier: KC9QDFZ9WFqGGlhuOcrC365eclmSb/hyGcJArI8RcaE=
Subject key identifier: A5:0F:D5:BE:62:62:FE:F2:B8:EA:E3:91:4D:78:69:A8:BF:81:D7:DF
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 019B7F1548BCFFE18BCF9E01E3B4F98CC076
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/pQ_VvmJi_vK46uORTXhpqL-B198.roa
Signing time: Fri 02 Jan 2026 14:20:59 +0000
ROA not before: Fri 02 Jan 2026 14:20:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43422
IP address blocks: 159.101.244.0/22 maxlen: 22
159.101.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:48:bc:ff:e1:8b:cf:9e:01:e3:b4:f9:8c:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Jan 2 14:20:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a50fd5be6262fef2b8eae3914d7869a8bf81d7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:f3:44:eb:7f:4d:61:8a:14:a1:1d:49:d8:
22:78:26:b2:fb:e1:f2:10:33:dc:c6:9e:4b:4b:70:
5a:57:ec:40:cd:98:78:f8:9c:98:60:a7:b5:ec:55:
75:75:7f:a4:38:c1:5b:20:39:96:8b:62:17:f5:96:
d5:72:e6:71:6d:2f:39:f4:63:f3:8f:bc:fb:67:b8:
1e:a4:45:a9:5a:0e:05:97:a5:37:99:41:3c:43:86:
36:57:29:3a:3b:1b:ef:16:fa:52:80:61:20:19:32:
f9:1b:ab:46:cb:f3:14:13:e8:7b:c8:5a:f3:5f:d4:
41:89:10:d9:7f:bd:f1:ed:b5:d8:62:92:84:d9:27:
0a:60:d4:78:30:d1:50:13:97:5f:a8:88:75:90:d8:
93:48:a9:44:5e:3a:da:c5:07:1f:b8:47:49:40:14:
b2:53:c7:18:d8:72:19:be:69:1b:54:e8:bc:02:23:
4e:ed:14:4d:c5:ba:79:92:b6:5d:13:a6:16:45:28:
a2:d6:da:12:20:b6:fc:be:69:3a:4f:34:69:41:7e:
1f:94:93:d2:e5:76:93:95:81:00:67:d4:4a:34:b5:
fa:e7:bb:e5:af:73:1d:bb:02:c8:a4:38:4a:bc:ae:
26:5c:a7:5d:08:c7:10:61:4b:3d:e3:b2:0f:b7:1a:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:D5:BE:62:62:FE:F2:B8:EA:E3:91:4D:78:69:A8:BF:81:D7:DF
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/pQ_VvmJi_vK46uORTXhpqL-B198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.244.0-159.101.251.255
Signature Algorithm: sha256WithRSAEncryption
33:cb:1d:87:ca:34:10:9f:2a:9a:d6:57:32:c4:1f:4b:c4:01:
57:3d:42:c6:50:e6:50:e2:fd:ee:24:9c:a8:e5:c1:3d:dd:b1:
0c:0b:8a:67:fd:94:90:0a:3f:8d:59:b1:c4:98:9d:e3:dd:7e:
a6:8e:15:41:40:28:ce:5a:92:52:f8:b3:8c:63:f2:2c:6d:55:
af:dc:7e:37:8d:3b:67:43:66:ee:3d:a2:84:50:31:83:5b:34:
74:4e:0b:59:da:be:aa:37:a9:00:5e:3c:19:db:d0:1d:d4:54:
97:ed:22:52:92:4c:d1:37:35:43:bf:fa:88:e3:50:de:02:28:
e6:80:97:62:ad:65:b9:b3:bb:1c:43:ac:87:51:df:f1:fb:f4:
a3:1e:74:27:ef:d9:84:f2:3e:04:2e:5c:47:02:5a:1d:a5:ca:
93:34:71:01:b2:c0:8e:d6:af:8d:ab:ca:c0:ed:cc:93:e8:43:
cd:55:09:21:8c:9a:d2:a8:7d:1f:65:80:b9:8f:2a:89:19:cf:
04:36:84:88:e4:28:31:3d:23:06:74:a0:93:ce:df:47:0f:cd:
71:ef:1a:02:e8:f9:5d:4e:a9:67:3b:13:6d:18:97:56:1b:5b:
62:7f:c4:90:d9:d6:6b:b6:55:22:ab:10:25:8d:4f:b9:08:e6:
e4:b0:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:29 2026 by rpki-client