This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Qcb6MBj1jVMY5YJV__nFQrA67wU.roa
File: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (raw, json)
Hash identifier: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=
Subject key identifier: 41:C6:FA:30:18:F5:8D:53:18:E5:82:55:FF:F9:C5:42:B0:3A:EF:05
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019B7BA41583981E8CF8139A0071F713A8E5
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Qcb6MBj1jVMY5YJV__nFQrA67wU.roa
Signing time: Thu 01 Jan 2026 22:18:29 +0000
ROA not before: Thu 01 Jan 2026 22:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48737
IP address blocks: 31.169.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:15:83:98:1e:8c:f8:13:9a:00:71:f7:13:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 22:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41c6fa3018f58d5318e58255fff9c542b03aef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:d6:f3:7d:e8:c0:cf:d4:12:fc:b5:2a:1e:
23:54:ed:75:21:b6:54:ea:db:a4:d2:71:64:21:51:
e5:a9:30:6c:2b:aa:e4:ea:a4:65:e5:95:52:75:ea:
67:19:1f:a6:43:37:d9:90:b4:22:9f:7c:1b:0b:c1:
c5:09:df:2f:fc:2d:c4:b4:a5:76:08:e4:64:5f:d6:
c2:bf:96:2b:e7:07:2f:45:ae:4f:84:eb:c3:3d:70:
b1:22:cb:ac:c1:d5:5b:8b:42:a2:17:22:27:22:0c:
fd:e1:11:84:c4:f7:7b:86:d5:18:cb:ef:d4:25:24:
73:06:95:f2:b1:db:e1:77:12:0b:be:d5:cb:12:4d:
d8:8d:87:2e:be:45:ce:03:a5:7c:40:31:a3:54:81:
ee:33:e0:73:11:60:d5:d3:32:6a:7b:2e:5f:f6:99:
0c:51:23:10:60:96:11:90:64:17:9d:34:79:59:a6:
31:4a:fe:00:d8:34:a7:cc:9a:7a:42:7d:fd:e4:08:
3b:ef:14:a1:b1:b1:79:9d:99:ea:32:2b:65:23:ef:
49:f4:fe:68:0a:34:6b:24:68:f8:6a:29:77:cb:6f:
c5:c7:6a:0f:e7:e4:dc:33:fb:40:1d:26:ac:71:23:
e1:58:79:66:11:14:c4:e2:cc:df:67:01:de:6a:3e:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:FA:30:18:F5:8D:53:18:E5:82:55:FF:F9:C5:42:B0:3A:EF:05
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Qcb6MBj1jVMY5YJV__nFQrA67wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.75.0/24
Signature Algorithm: sha256WithRSAEncryption
52:82:34:17:2b:91:74:f0:c5:49:f8:c6:23:d7:2d:e9:8c:38:
f8:cb:d1:d6:07:2e:2d:f8:09:f3:21:52:16:ff:72:67:8f:41:
9f:8f:3b:d2:79:c3:2b:90:7c:43:70:5a:c6:67:39:cc:52:d4:
b2:0d:1d:88:ab:b3:5b:28:9c:60:be:41:16:db:a0:07:86:0e:
69:15:01:8b:ee:5c:e0:57:2f:a9:b4:3c:dc:b8:b3:fa:27:23:
9b:e1:bb:90:42:61:31:8b:8e:99:9d:13:5d:cc:9a:98:65:d8:
ed:1e:8a:91:11:be:3d:57:3c:4f:8a:6e:78:1b:81:8c:44:fd:
12:bd:e2:78:96:77:5b:6e:ff:77:b6:24:2d:58:6c:56:0a:aa:
1b:cb:7c:75:52:ff:14:1a:5a:9b:a1:d2:de:72:f7:b9:64:49:
f3:f8:33:9e:03:5c:a0:84:e9:1f:7d:ef:2c:0d:b0:fa:8d:8b:
21:eb:9e:26:f2:e0:d7:b8:8b:88:14:f4:a7:2b:32:85:4c:f0:
dc:6d:c5:48:76:33:08:af:2a:90:75:1f:91:0d:db:18:ab:23:
4a:93:d3:64:0d:70:d0:ad:e0:a8:52:58:5e:ae:05:b2:68:98:
86:12:8e:8b:3a:05:75:4c:77:21:f4:2d:e4:79:e0:7e:75:4f:
f5:ce:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:28 2026 by rpki-client