This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-c2JXaLz47i_iznX2scMdNciBs.roa
File: 6-c2JXaLz47i_iznX2scMdNciBs.roa (raw, json)
Hash identifier: kPEED+hMNbrIf83Jn21e1R1kDQD3D3bZ2JFY4BY4nes=
Subject key identifier: EB:E7:36:25:76:8B:CF:8E:E2:FE:2C:E7:5F:6B:1C:31:D3:5C:88:1B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5D87831927E70025DE132B1B7AA43F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-c2JXaLz47i_iznX2scMdNciBs.roa
Signing time: Fri 02 Jan 2026 06:20:40 +0000
ROA not before: Fri 02 Jan 2026 06:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 45.12.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:87:83:19:27:e7:00:25:de:13:2b:1b:7a:a4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe73625768bcf8ee2fe2ce75f6b1c31d35c881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:33:a5:79:5c:f7:3f:06:73:30:87:fc:f7:
d1:a4:40:ae:e1:ef:76:96:d5:10:86:d2:bf:ba:c5:
ae:6b:3f:93:15:a9:a5:5e:76:91:c5:60:9f:37:09:
c0:bd:62:27:1c:5d:a9:ea:1e:84:85:04:18:eb:96:
35:ca:29:97:3a:b2:62:1f:fe:bc:e5:12:a4:a3:08:
0d:d8:44:5d:3a:c2:0c:23:b7:39:03:48:e4:34:b9:
85:88:01:ff:be:7f:0b:a5:00:b4:1c:f1:4d:63:70:
3a:d9:c0:a3:11:fe:aa:66:1d:91:de:4b:7b:0f:26:
cd:40:5d:e9:40:60:86:99:1a:9a:38:c0:5b:24:4c:
2b:a6:72:6d:e6:07:1c:8c:47:14:54:b6:a7:8c:55:
00:62:0f:16:96:38:47:6b:2a:1b:d8:22:42:8c:b2:
4b:f6:ce:cb:08:33:32:af:4d:97:33:4a:2d:c3:8f:
b8:bb:47:a4:40:64:a2:f5:5e:12:b8:c4:29:32:a3:
44:4c:22:9f:aa:07:80:8f:34:ff:79:56:36:ff:55:
39:e0:59:58:e7:55:fc:3c:f7:e6:6e:1a:18:c6:dc:
5b:e5:d5:57:59:ba:df:c0:4a:07:55:62:1d:36:c9:
ec:60:8b:d3:73:d0:78:ff:35:a9:3e:b1:43:91:1b:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E7:36:25:76:8B:CF:8E:E2:FE:2C:E7:5F:6B:1C:31:D3:5C:88:1B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-c2JXaLz47i_iznX2scMdNciBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.71.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:dd:db:17:f4:49:68:fe:a4:4f:7a:3a:50:d0:06:35:3e:2b:
f7:52:e7:62:0e:f8:9b:3b:99:b2:1c:a3:22:39:ac:c4:43:20:
12:c9:9a:b2:33:ac:be:1f:91:97:c9:d5:c6:aa:ee:e5:ab:40:
9d:d7:76:1e:33:80:06:2f:81:ff:97:83:69:76:3c:62:6f:c6:
9e:f8:13:38:9d:6d:50:50:aa:9a:8b:6f:af:2d:0e:88:91:95:
8e:57:d1:4d:c2:f6:73:97:49:ea:ff:8e:07:53:73:62:65:4d:
cb:73:38:3a:93:29:31:4d:a3:d4:c5:8d:30:5f:7f:b0:fe:e6:
0f:2f:56:66:5e:cd:a7:19:f8:1e:c6:26:5b:7c:01:06:3f:ab:
39:3c:b0:f6:20:f5:78:c5:1b:04:6a:af:00:ec:20:03:66:b7:
67:12:66:97:17:47:d5:5a:78:d3:98:1d:84:68:84:15:12:53:
50:d0:6a:73:2b:30:7c:1a:43:01:27:6c:c2:2c:00:b6:3d:1f:
03:6e:70:5e:b6:ff:07:dc:57:58:0d:e0:c5:3f:04:ac:22:f0:
f0:29:36:25:0f:d3:36:ee:a8:2d:0a:2b:e0:5a:64:be:7d:22:
61:b3:9c:d3:ed:86:5f:00:e6:6a:2d:4f:3e:e9:c3:c8:1a:db:
8c:36:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:29 2026 by rpki-client