This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oLmSdGLMfCCgXXJ4F70DbToVCY.roa
File: 6oLmSdGLMfCCgXXJ4F70DbToVCY.roa (raw, json)
Hash identifier: vqz6XKv7v7NRGvZ8FgtQa20w2CCUd+QGgS3yNw2riO0=
Subject key identifier: EA:82:E6:49:D1:8B:31:F0:82:81:75:C9:E0:5E:F4:0D:B4:E8:54:26
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5D0F6B1538F697272FCD79C06B5FF8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oLmSdGLMfCCgXXJ4F70DbToVCY.roa
Signing time: Fri 02 Jan 2026 06:20:09 +0000
ROA not before: Fri 02 Jan 2026 06:20:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207740
IP address blocks: 2a0e:b107:198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:0f:6b:15:38:f6:97:27:2f:cd:79:c0:6b:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea82e649d18b31f0828175c9e05ef40db4e85426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3c:70:02:73:9b:d1:0f:82:4a:2a:89:54:0a:
0a:4b:4d:46:5d:cb:8f:19:5d:2e:69:81:f0:b5:33:
04:41:a5:2e:a0:48:15:ef:b0:eb:d5:fb:07:28:28:
86:18:a8:eb:e3:f9:0f:f7:41:e4:85:54:61:8e:84:
7e:6e:0c:44:55:da:c1:80:c1:d2:43:b4:c9:be:91:
3c:85:5f:1a:65:ae:3f:fd:f3:25:5d:7e:cd:54:ae:
16:b2:1a:97:71:eb:5c:ed:b9:d0:ab:1a:fa:2e:a6:
49:ea:41:58:72:52:5a:28:4c:d5:b4:7e:66:cb:de:
5f:a4:d4:a1:08:f8:24:27:93:b9:8f:1f:a4:ff:df:
42:64:e3:e6:af:df:6d:53:a2:16:d3:ba:26:0a:36:
d2:76:22:59:23:ff:50:2e:41:26:5b:f1:50:d4:4a:
3e:59:ae:98:b0:0f:92:71:9c:d5:4e:77:9a:30:5d:
9e:32:b3:93:4e:bb:bc:c3:f8:06:ff:22:4b:41:b6:
c5:e4:51:ed:83:bc:2a:43:af:55:5d:ae:cf:82:32:
50:37:09:f9:55:a6:80:2f:59:58:76:f2:7b:0f:c5:
78:d1:14:10:17:d4:81:da:07:cd:73:41:90:ef:4e:
25:16:d7:50:0b:b8:77:b6:b1:4e:09:ef:a4:f5:44:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:E6:49:D1:8B:31:F0:82:81:75:C9:E0:5E:F4:0D:B4:E8:54:26
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oLmSdGLMfCCgXXJ4F70DbToVCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:198::/48
Signature Algorithm: sha256WithRSAEncryption
36:a3:a6:1c:a0:ce:df:26:8a:7d:0b:5f:06:62:38:ab:1d:6c:
7c:eb:8f:75:e4:82:13:4a:76:a0:58:5f:42:3f:03:16:ea:e4:
16:fb:d4:fb:88:25:37:83:34:c3:68:8c:7c:6d:66:ef:9e:f3:
01:88:18:00:6d:d5:56:76:b0:0e:d4:4a:53:76:8e:cb:de:c0:
99:a4:55:17:21:c9:dc:e8:69:4a:4d:93:46:7e:35:ed:50:4b:
7a:75:d1:40:48:5c:63:ea:d0:59:93:6f:10:23:74:ea:57:d0:
17:a7:c5:90:b6:8d:90:49:4e:bd:2f:ef:5e:fa:a4:e9:0c:f1:
b9:d2:f1:a7:20:0a:48:52:b8:f5:63:67:13:39:14:d7:97:8f:
88:18:2c:8f:f4:b0:e7:75:e9:bf:f1:5b:2f:bc:e0:43:ef:8b:
e4:8b:f3:26:52:37:05:55:eb:4e:de:3f:99:8b:60:4c:8a:bd:
c2:91:ff:80:cd:57:4c:7e:54:9f:29:e6:ba:84:bc:22:f3:9e:
28:9f:41:e0:51:59:bf:11:2b:b7:51:0f:27:19:8f:84:af:4f:
13:0c:49:d8:de:87:b7:5e:01:c2:25:df:6a:ba:fd:94:ab:bb:
96:09:69:a5:d7:37:ff:0e:d4:11:79:01:1c:9a:64:aa:3e:80:
f3:81:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:57 2026 by rpki-client