This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qqwEnGZUyynAorkXwQDx6d6Vxrc.roa
File: qqwEnGZUyynAorkXwQDx6d6Vxrc.roa (raw, json)
Hash identifier: WcKFmnKPQagwNG8qqv71gsbJ1M1R3T53sup5shYZUY4=
Subject key identifier: AA:AC:04:9C:66:54:CB:29:C0:A2:B9:17:C1:00:F1:E9:DE:95:C6:B7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019B78349C0FFE236A50C55076FC369A0080
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qqwEnGZUyynAorkXwQDx6d6Vxrc.roa
Signing time: Thu 01 Jan 2026 06:17:52 +0000
ROA not before: Thu 01 Jan 2026 06:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215052
IP address blocks: 194.103.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:9c:0f:fe:23:6a:50:c5:50:76:fc:36:9a:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 06:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaac049c6654cb29c0a2b917c100f1e9de95c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:02:95:a9:a6:ad:dc:9f:ab:96:d1:81:91:
1d:a7:4c:63:3a:63:fc:ab:2d:5c:3e:39:d6:f9:d7:
43:18:4d:6d:5b:fa:37:34:8f:4a:64:39:8b:4b:da:
4a:e4:3d:d1:19:6d:d8:35:ae:11:aa:c0:69:33:95:
3b:ac:b9:e0:7e:21:1a:25:ae:6d:6e:77:5e:09:33:
9b:6d:cd:bf:dd:52:45:96:74:cf:be:44:6c:8d:a0:
e2:73:0b:dd:a7:74:72:ee:a3:39:d1:36:28:4c:33:
72:8f:33:e7:ed:ff:1e:17:4b:1b:53:ff:0b:d8:56:
40:7a:91:05:71:3d:2a:7a:d0:31:ef:8c:f5:23:cd:
07:2e:26:9a:8e:40:e5:bd:72:db:0b:2c:46:35:6e:
a5:69:25:34:03:75:92:7e:8e:26:73:ee:9b:b9:71:
10:14:54:42:d1:35:57:25:28:5f:26:3e:c9:f8:f3:
78:64:7d:bd:06:b3:e4:2e:33:32:78:35:00:c2:90:
76:76:3f:5b:a1:99:c4:fc:61:ff:0e:e4:63:83:2b:
63:fa:b2:db:27:ea:08:f2:13:2e:8d:c0:12:dc:15:
49:5a:6b:9c:3d:c8:7a:de:37:00:5b:d9:ff:95:ee:
c2:0c:82:d1:a5:81:da:02:fd:b0:22:a6:6d:5b:6d:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:04:9C:66:54:CB:29:C0:A2:B9:17:C1:00:F1:E9:DE:95:C6:B7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qqwEnGZUyynAorkXwQDx6d6Vxrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:94:f5:bb:f1:8d:8c:95:18:cc:f5:c8:64:a4:b0:67:fe:58:
d4:4f:d4:40:09:27:1c:7a:fa:48:7b:6c:6b:49:3c:d3:18:d8:
96:e3:a4:8d:dc:e3:38:18:09:48:70:19:cd:6d:b9:5b:e1:e6:
a5:62:a8:f5:2a:1f:ef:9c:6e:35:bc:f0:c6:a6:42:43:27:7c:
2d:9e:69:2e:fa:27:76:83:7d:d8:27:48:00:0e:de:d1:08:de:
e2:e5:7d:38:51:4f:89:8a:d3:ba:94:39:b3:73:fd:f5:e6:2c:
0b:8e:31:b7:67:48:5b:2f:55:5e:97:b1:42:d2:5f:0c:04:fd:
a6:45:b1:7b:7b:52:fb:31:94:1d:7f:9f:a4:b7:ce:0f:d0:d1:
8c:66:43:8a:ba:47:42:82:f9:ba:a0:7c:f1:7f:33:58:e6:3f:
bd:46:77:10:49:6f:b1:1e:fb:42:78:7e:08:52:c1:69:34:9d:
b0:61:5a:ba:b1:af:e4:9e:32:f2:de:a3:45:8e:51:33:6e:73:
ca:a4:b4:81:58:f7:31:33:59:4f:c8:aa:ba:9e:38:27:cf:a0:
33:cf:b0:0f:13:8a:e5:df:c7:1b:12:4f:19:2f:b3:50:84:6a:
80:e6:d4:bd:54:18:4c:67:88:ba:ca:2e:5f:9f:38:15:2c:5d:
85:50:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:54 2026 by rpki-client