This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa
File: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (raw, json)
Hash identifier: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=
Subject key identifier: EA:01:C6:87:F5:61:BB:EE:F7:36:83:D4:74:94:67:A4:36:B9:28:1B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019B7A5B83FABFE556EB1B75A4064A9FBEFD
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa
Signing time: Thu 01 Jan 2026 16:19:36 +0000
ROA not before: Thu 01 Jan 2026 16:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211895
IP address blocks: 2a14:bc80:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:83:fa:bf:e5:56:eb:1b:75:a4:06:4a:9f:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Jan 1 16:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea01c687f561bbeef73683d4749467a436b9281b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:4e:75:25:37:7f:31:3f:78:9c:5c:5f:71:
ba:8c:5c:67:d0:34:18:5b:a3:35:31:ad:6f:ff:8d:
ea:fc:fe:7e:5c:07:f7:4d:85:fd:f4:bf:54:ff:fd:
93:06:24:98:3b:0c:e9:b1:33:e2:cf:45:d7:a9:73:
01:46:49:ad:36:6f:e9:55:fa:93:92:69:86:c7:da:
01:45:eb:ae:bc:4c:50:e2:32:6d:1d:d6:06:62:7b:
22:9a:59:c1:5e:c2:ef:ad:db:d3:b2:b2:0d:de:3f:
0a:6a:cd:f5:b2:78:ad:c2:21:df:4c:57:50:55:f0:
84:99:64:68:0b:d9:7d:81:ff:c8:96:07:31:7b:99:
4c:0f:79:ce:26:61:c3:25:ba:53:58:8f:9e:46:75:
2d:d4:e9:90:b3:d3:a7:43:69:b7:74:3a:3d:04:53:
6d:29:5c:6f:05:6a:0c:5a:9e:e3:c1:ff:d3:5c:71:
22:47:1b:8c:a1:ee:d7:9f:23:58:f6:85:97:4e:0e:
86:35:b7:1e:55:7f:24:8c:85:c5:de:c8:be:b6:c9:
cf:3d:0f:08:f2:9f:59:bf:c3:c4:7b:9e:be:b1:a5:
91:72:16:dc:43:35:a5:cb:86:cd:bc:c5:38:2d:27:
26:9d:ba:28:dc:e6:5a:86:ad:b3:c4:9b:63:25:c9:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:01:C6:87:F5:61:BB:EE:F7:36:83:D4:74:94:67:A4:36:B9:28:1B
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:bc80:102::/48
Signature Algorithm: sha256WithRSAEncryption
43:99:16:3e:66:4d:df:76:96:40:4d:b1:3e:b8:a3:a7:67:93:
41:4c:39:26:8d:40:1d:d7:73:f7:ff:c9:21:8d:2d:bd:3a:f2:
d8:bb:77:36:7f:80:65:fd:b0:6e:c0:69:18:8c:af:89:4d:b0:
38:23:9d:ed:00:70:4e:f5:e9:e4:fc:7f:89:0e:63:2f:8f:58:
43:ca:fa:92:51:53:46:ce:2f:53:5d:35:11:ef:d9:33:6f:20:
01:90:73:b0:c8:48:e6:09:18:35:84:10:1b:f3:61:dc:97:dd:
c3:bc:51:9e:09:d7:be:62:14:4b:6d:d3:e5:6d:10:fa:fe:5a:
56:f5:91:53:95:6a:86:2e:1c:1b:9d:ec:83:98:89:2f:c7:0f:
ed:5a:69:12:27:d5:8d:35:b9:73:d4:54:b1:52:eb:d0:c7:92:
05:b8:eb:c5:a3:5b:50:71:da:b2:c3:02:26:94:84:34:e0:5c:
58:f4:f0:cc:9d:82:a5:c7:46:d2:b1:93:b9:60:8e:12:2a:f0:
d0:27:29:bc:27:88:64:5b:98:a0:96:6d:3f:c8:80:fd:f3:92:
1e:25:51:1b:44:a2:63:d5:73:8f:23:d4:0b:32:f1:92:77:ea:
47:33:b6:08:87:0a:d0:e7:c0:7a:df:70:a6:91:f8:2d:08:c1:
47:3c:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:15 2026 by rpki-client