This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qnNsQbduLBTF86levewBBDYABJM.roa
File: qnNsQbduLBTF86levewBBDYABJM.roa (raw, json)
Hash identifier: GunW2CncNZUMvaDwt2AZmXed9P3t3iPjjr/J+Z3WjkQ=
Subject key identifier: AA:73:6C:41:B7:6E:2C:14:C5:F3:A9:5E:BD:EC:01:04:36:00:04:93
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019B7BA5467622553C8F8646FD8784674FD9
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qnNsQbduLBTF86levewBBDYABJM.roa
Signing time: Thu 01 Jan 2026 22:19:47 +0000
ROA not before: Thu 01 Jan 2026 22:19:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201384
IP address blocks: 46.10.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:46:76:22:55:3c:8f:86:46:fd:87:84:67:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 22:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa736c41b76e2c14c5f3a95ebdec010436000493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:2e:02:88:06:ab:08:5d:ed:ab:e5:b7:d0:
cb:00:3b:55:d3:b1:cc:db:02:d7:ec:67:02:f6:d1:
17:17:e9:0c:dd:c2:9b:be:84:51:45:e7:ed:f7:03:
79:ce:73:c3:1c:ef:69:fe:35:ab:fe:25:e6:48:90:
08:a8:16:18:ce:a4:b3:df:1f:fe:19:39:f2:cd:0c:
23:d0:d7:04:af:68:46:c7:ce:7b:06:d7:c0:96:ef:
64:6e:86:60:e8:8a:8f:18:a1:f9:12:56:dd:fa:b5:
4d:da:4c:bd:8a:b8:1a:46:1e:9b:2d:7d:26:4d:77:
8b:d4:6e:f9:4d:0d:58:c1:d8:2a:a7:c7:2f:7c:fc:
47:ee:10:0f:27:20:6f:e5:ec:f9:c8:e8:70:52:c4:
bc:51:1e:73:42:bd:29:af:b4:9a:df:5a:8a:e1:b4:
2e:bc:33:48:b1:e9:eb:61:41:21:bc:5d:50:8a:96:
aa:de:fb:d6:68:4b:b9:74:a0:da:67:11:18:a9:56:
4c:fd:3f:b2:68:6f:92:79:3a:39:c3:ab:86:eb:72:
2b:38:0f:81:33:e2:df:a0:7c:79:a0:c3:d3:4d:cd:
37:ce:42:06:6f:1f:cb:0f:ad:87:93:d9:27:b5:b3:
df:06:18:8e:12:0e:92:4b:7c:b6:04:86:9b:71:d0:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:6C:41:B7:6E:2C:14:C5:F3:A9:5E:BD:EC:01:04:36:00:04:93
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qnNsQbduLBTF86levewBBDYABJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a1:42:44:8a:4f:17:5d:56:9b:7f:7a:ba:54:82:48:e0:4b:
47:29:e8:ac:27:38:53:c8:8f:57:53:4f:65:cf:bf:fe:c9:fb:
f0:1d:47:23:70:59:b4:e5:0e:d7:e2:2e:71:91:4b:fa:d7:85:
e2:39:dd:f3:1e:d0:7e:54:ef:de:e0:ec:de:72:f0:d2:82:12:
06:8c:ab:41:8f:32:04:49:7f:18:fe:73:c0:0f:f3:97:c4:bb:
f8:2c:15:49:37:83:09:34:64:02:da:c3:77:5f:3d:a0:d7:4d:
d9:09:47:2a:87:b3:10:4d:44:ab:5e:5c:05:01:ab:c0:45:28:
97:15:0d:b1:34:83:3f:5b:94:00:9b:b9:55:26:72:2e:b8:fc:
e4:8f:d7:00:47:58:f1:fa:00:a7:55:89:27:e2:3f:0f:3a:18:
8c:90:73:7e:d2:07:10:d1:de:07:35:6f:b7:ca:3b:4f:06:62:
e7:c7:a0:0d:94:76:10:e4:c4:a8:b0:11:fb:79:7b:5d:d9:54:
7d:8b:97:bd:9b:74:11:f8:62:5f:c4:ed:ef:d2:21:2a:75:c7:
96:0c:e7:c7:5a:3e:42:fd:4b:a2:a8:ac:7d:8c:19:e6:57:f3:
5f:96:22:cb:08:e7:ed:24:d4:d5:2f:76:fd:23:3a:43:02:b3:
2b:82:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:43:23 2026 by rpki-client