This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/qJMajQpY1RrdeIv3dNt0UZtc0Ws.roa
File: qJMajQpY1RrdeIv3dNt0UZtc0Ws.roa (raw, json)
Hash identifier: xPvcT7EUcmbpxxFoA5w+04TtfxdTTJmOd4iq0KhYG6s=
Subject key identifier: A8:93:1A:8D:0A:58:D5:1A:DD:78:8B:F7:74:DB:74:51:9B:5C:D1:6B
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 019BE215606DEC2597DCF279F8A75DE1E915
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/qJMajQpY1RrdeIv3dNt0UZtc0Ws.roa
Signing time: Wed 21 Jan 2026 19:43:30 +0000
ROA not before: Wed 21 Jan 2026 19:43:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 833
IP address blocks: 185.38.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e2:15:60:6d:ec:25:97:dc:f2:79:f8:a7:5d:e1:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jan 21 19:43:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8931a8d0a58d51add788bf774db74519b5cd16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:ee:c1:ad:ef:ec:e4:33:f3:9b:91:99:54:
8e:e5:66:f3:d7:66:92:e4:f5:de:24:66:e3:fd:27:
7b:0d:5a:ed:07:82:13:26:db:94:85:ad:a5:c2:5d:
e4:2e:cb:94:a8:c1:77:81:48:3c:6a:b3:71:b2:aa:
22:ab:00:ff:1f:c4:76:bd:43:6a:d1:d1:9f:11:3b:
0b:f3:9d:57:55:03:26:b7:4e:58:77:8a:a8:02:44:
fa:ab:38:78:56:9c:7d:9d:58:18:e2:0b:f3:d2:8f:
a9:25:59:c0:23:11:be:01:e0:4f:3d:78:ba:df:38:
8a:78:68:9e:8a:7f:9b:5f:83:a8:f6:23:0a:f0:e8:
c0:6f:fe:bd:bf:d5:16:59:99:3f:d5:bf:63:81:b1:
4a:80:66:3d:20:90:df:81:b2:3b:ae:06:7a:c2:4a:
63:3d:dc:7d:7e:19:0c:2b:c2:80:d4:79:7a:f3:3f:
82:42:0c:5f:59:04:59:58:b7:d3:9c:28:f2:ce:20:
85:57:a2:de:43:c2:cd:8c:8d:f7:0e:5a:b4:14:11:
f1:b9:18:8c:ed:6e:88:b0:e6:ba:a4:15:8b:5a:8b:
be:ad:62:f5:97:39:5d:b5:08:6d:d0:5b:f1:9d:e9:
63:33:dd:a7:ab:26:99:72:b7:f9:54:d7:31:4f:a7:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:93:1A:8D:0A:58:D5:1A:DD:78:8B:F7:74:DB:74:51:9B:5C:D1:6B
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/qJMajQpY1RrdeIv3dNt0UZtc0Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d1:d6:c1:d3:ae:da:f4:f4:98:38:e3:96:0d:90:60:02:55:
e2:70:a3:91:78:ca:19:ae:e3:2c:c3:31:2e:42:7c:43:66:83:
89:9d:6b:cd:76:e7:0c:ce:c8:98:18:d8:0f:cb:65:e4:6b:58:
ce:5d:c8:0e:b6:ca:e5:06:20:ab:9f:b8:ad:0a:58:35:49:b4:
53:6d:93:11:6d:a3:1d:c7:42:fa:b7:3e:07:53:89:4a:88:c9:
3d:54:3e:5a:38:4e:69:59:dd:4c:bc:11:8d:e6:5a:31:35:19:
9c:62:9d:75:bc:8e:e7:94:1e:c5:dc:8b:a6:a5:50:16:f3:62:
03:4c:52:fa:f9:62:0a:9a:0f:26:45:6c:50:0d:9c:e2:e2:0e:
9c:d0:13:c2:91:11:e9:61:00:b6:3b:2c:31:7c:4d:43:e2:b6:
27:6d:23:7e:84:09:a5:45:82:a7:8c:54:c5:df:25:fe:00:c8:
c5:59:5a:97:f8:64:e5:40:fb:dd:8b:b0:78:ac:b9:fe:2d:fc:
a5:d5:6a:22:ee:a2:65:76:ee:09:da:b9:4d:4a:76:04:10:97:
15:48:be:3a:b9:fd:cb:bb:7c:5a:77:88:df:22:18:0d:76:80:
60:36:34:3b:23:a8:3f:31:9f:74:96:ce:74:7c:ce:3c:97:8a:
05:a4:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:32 2026 by rpki-client