This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_D-6a4JHI_qYxk2hPkusnRKUx8s.roa
File: _D-6a4JHI_qYxk2hPkusnRKUx8s.roa (raw, json)
Hash identifier: uec6xHW0NWvrfGF7hIIR6uoVwXtmNg67KD+boRJ3x2w=
Subject key identifier: FC:3F:BA:6B:82:47:23:FA:98:C6:4D:A1:3E:4B:AC:9D:12:94:C7:CB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019B46EFF8C3C6852AAB234792DF4F8B0BBB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_D-6a4JHI_qYxk2hPkusnRKUx8s.roa
Signing time: Mon 22 Dec 2025 16:41:30 +0000
ROA not before: Mon 22 Dec 2025 16:41:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57848
IP address blocks: 2a0e:46c2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:46:ef:f8:c3:c6:85:2a:ab:23:47:92:df:4f:8b:0b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 22 16:41:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc3fba6b824723fa98c64da13e4bac9d1294c7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6b:62:4f:a6:f9:58:f7:a3:01:91:60:3e:85:
e2:79:96:7a:da:9a:a6:9f:6f:47:86:ac:8e:26:1e:
22:44:29:0e:54:e2:5a:3c:5b:87:eb:c9:3e:24:4c:
40:ab:85:3d:ad:1a:aa:9b:71:cd:6b:d8:59:5e:42:
04:79:3f:a0:29:4c:ba:18:98:00:c5:cf:52:1f:1f:
5f:1c:34:fe:05:32:4f:14:cb:a1:6c:50:cd:79:d2:
ea:c5:44:23:f0:9d:9c:f4:68:55:ee:e4:3e:20:f7:
31:21:3e:ef:6b:90:37:41:c9:cf:69:14:09:0d:06:
0d:f1:d0:4c:7b:aa:39:37:6e:1d:a2:77:a0:21:3a:
d5:be:8b:a2:53:73:e9:9c:08:3f:de:6a:d9:21:2b:
9a:3e:2e:b0:ac:02:1e:3a:7c:e5:52:68:81:dd:46:
9b:09:c5:00:46:0c:aa:04:d1:e0:a9:35:1e:56:7d:
8f:ec:bf:83:9f:1f:23:65:29:fa:a6:49:23:a3:0e:
74:47:cc:9a:81:b0:22:a3:a7:7c:ba:36:09:a9:35:
08:cd:65:03:62:bb:1e:2e:82:86:ee:21:b4:34:40:
08:cd:16:b9:b6:21:a8:a4:75:5e:f4:73:56:10:dd:
58:60:f9:f5:c2:f6:91:8b:17:f4:3d:b2:68:d2:ca:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:BA:6B:82:47:23:FA:98:C6:4D:A1:3E:4B:AC:9D:12:94:C7:CB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_D-6a4JHI_qYxk2hPkusnRKUx8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c2::/32
Signature Algorithm: sha256WithRSAEncryption
8d:14:cf:45:8f:5a:80:25:89:20:e4:c6:5d:1d:0e:17:53:8e:
17:fb:25:40:30:01:5e:5c:27:01:d2:ad:63:7d:8e:5d:9d:af:
3f:dd:7a:b6:9d:11:fc:82:fc:29:4a:f4:6c:02:65:7f:c7:f3:
f5:9e:0a:24:4d:60:88:8c:c0:bd:5f:84:67:59:dc:18:5e:ab:
62:9c:b7:e5:16:08:ab:a7:02:5a:30:e3:43:63:7c:8b:3a:c0:
0a:fd:03:55:8b:25:ff:2a:64:e3:8f:00:18:7d:39:05:db:ad:
64:2e:ef:09:28:13:47:8b:39:c0:60:48:0b:54:eb:67:95:38:
0f:a0:17:04:7f:87:56:71:79:41:6c:aa:eb:e4:2d:9c:f0:7c:
91:8b:ea:ca:20:9d:bf:72:2b:2b:f5:25:45:01:f3:ff:f8:3a:
64:e3:6d:46:46:1e:d7:8f:b8:94:48:72:35:c2:86:1e:d7:72:
d3:b7:a3:a8:45:c8:df:72:df:d9:e7:62:6f:ea:cc:6c:56:4b:
48:f2:c8:73:30:bb:b7:92:5c:18:e7:26:5a:2b:3a:63:4e:58:
e7:8c:63:82:b2:8b:80:50:9f:84:41:38:f1:b9:2e:98:69:0e:
d7:45:b3:67:6c:15:b8:a2:50:92:b0:75:6e:11:7a:3c:57:f5:
fd:34:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 00:40:35 2025 by rpki-client