This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa
File: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (raw, json)
Hash identifier: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=
Subject key identifier: E8:4A:78:24:1E:A3:A1:29:04:D8:76:1A:10:86:F5:2C:5B:19:6E:06
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019B79ED5A7B74D04B164F78524B27AABEC2
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa
Signing time: Thu 01 Jan 2026 14:19:16 +0000
ROA not before: Thu 01 Jan 2026 14:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41887
IP address blocks: 62.204.64.0/19 maxlen: 24
62.204.64.0/20 maxlen: 24
62.204.64.0/24 maxlen: 24
62.204.65.0/24 maxlen: 24
62.204.66.0/24 maxlen: 24
62.204.67.0/24 maxlen: 24
62.204.80.0/20 maxlen: 20
62.204.92.0/22 maxlen: 22
62.204.92.0/23 maxlen: 24
62.204.94.0/23 maxlen: 24
94.228.128.0/20 maxlen: 24
94.228.129.181/32 maxlen: 32
94.228.133.226/32 maxlen: 32
178.22.80.0/21 maxlen: 24
185.63.164.0/22 maxlen: 24
195.144.2.0/24 maxlen: 24
2a00:d00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Jan 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:5a:7b:74:d0:4b:16:4f:78:52:4b:27:aa:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Jan 1 14:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e84a78241ea3a12904d8761a1086f52c5b196e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:f1:a4:ac:10:65:df:92:03:fe:48:2b:9f:
3a:49:3e:2d:e5:42:dc:1d:e7:b3:0d:60:52:84:c2:
72:9d:fd:5c:cf:b9:b1:68:b2:68:be:dd:87:a9:fb:
3f:eb:93:3e:00:15:1c:00:b0:6e:df:24:0d:ef:9b:
98:14:15:29:f3:ee:71:f8:38:cb:1c:35:fa:0c:67:
29:46:bf:1c:41:60:13:10:8e:bb:1d:8c:c9:f1:38:
81:34:9d:42:65:24:7c:62:d8:53:84:08:d5:c7:d2:
57:bd:96:bd:b8:b5:25:34:b7:4c:3a:81:0f:54:f3:
7b:06:26:42:cb:fd:9b:85:33:f8:46:49:83:8e:12:
94:26:3b:17:67:60:fb:09:07:a0:6c:95:0a:4d:e0:
b8:9b:ea:e5:16:64:13:6c:a4:d8:3e:3d:56:60:65:
19:d3:12:56:c0:c1:c3:fa:81:71:32:cf:83:c5:7f:
40:84:e0:f4:8e:b9:c7:cd:80:00:15:bd:76:f1:c5:
81:57:01:25:2c:c4:9d:36:0e:51:dd:ca:9e:50:77:
7f:d2:41:13:31:47:8c:cb:ed:8f:cb:07:7e:28:2c:
89:06:6f:01:3d:e4:63:b4:36:f1:d3:21:1c:12:e5:
54:81:86:fe:75:8d:72:7c:c4:e6:3b:81:ed:d8:5d:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:78:24:1E:A3:A1:29:04:D8:76:1A:10:86:F5:2C:5B:19:6E:06
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.64.0/19
94.228.128.0/20
178.22.80.0/21
185.63.164.0/22
195.144.2.0/24
IPv6:
2a00:d00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:38:e7:9c:75:68:f4:47:e7:2d:bb:f4:cf:74:d7:12:0d:9a:
73:65:11:d9:2d:ab:eb:b0:04:c2:37:5d:08:46:e5:29:db:4e:
bd:d3:36:e1:13:96:b5:52:fa:d8:8a:a1:88:59:11:37:c2:61:
8d:f9:f5:2b:bd:fb:46:86:43:a4:4d:0a:98:5b:6c:13:42:cc:
7a:29:2c:2a:9f:43:0b:57:95:d1:5e:8b:fe:43:75:01:c7:e4:
55:6a:11:24:56:c4:36:ae:51:74:76:3f:2d:ec:ea:c8:9d:ae:
52:ac:47:81:f9:81:bc:b3:86:bc:a1:12:06:2a:d6:f8:7c:b5:
8d:62:57:b4:59:1a:05:93:39:63:70:c7:4b:9e:09:9c:9f:47:
6c:59:1f:51:d5:c3:16:22:02:bc:38:3e:52:6f:e3:34:75:65:
50:8e:58:ac:9f:59:3d:8f:3a:83:83:e9:83:7f:dd:d1:0b:50:
db:42:66:a4:79:1c:af:14:61:8b:7f:eb:07:f2:88:1e:0b:86:
da:18:46:f5:61:fd:d3:52:cd:a0:4e:30:a1:d5:ca:23:91:2b:
fa:7d:a6:d6:df:07:da:2f:94:97:32:77:b4:81:70:75:b4:57:
73:fc:f3:db:3f:bb:79:e9:19:18:0b:63:bc:3b:40:db:e6:86:
6a:22:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:18:11 2026 by rpki-client