This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n-6-GLMta5BCgKxCT-dXiVfeSgM.roa
File: n-6-GLMta5BCgKxCT-dXiVfeSgM.roa (raw, json)
Hash identifier: 38gC/4a9QHLmVW3BjvSC4eVc0n+OhgJJRTnHiaKdQjA=
Subject key identifier: 9F:EE:BE:18:B3:2D:6B:90:42:80:AC:42:4F:E7:57:89:57:DE:4A:03
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019BC0C33CC214379E1D4BFDB7F5989FDBFA
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n-6-GLMta5BCgKxCT-dXiVfeSgM.roa
Signing time: Thu 15 Jan 2026 08:26:19 +0000
ROA not before: Thu 15 Jan 2026 08:26:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 46.229.144.0/20 maxlen: 20
77.79.192.0/18 maxlen: 18
77.79.200.0/24 maxlen: 24
77.79.206.0/24 maxlen: 24
77.79.210.0/24 maxlen: 24
77.79.215.0/24 maxlen: 24
77.79.221.0/24 maxlen: 24
85.232.224.0/19 maxlen: 19
85.232.254.0/24 maxlen: 24
194.145.228.0/24 maxlen: 24
195.167.144.0/20 maxlen: 20
195.167.150.0/24 maxlen: 24
195.167.155.0/24 maxlen: 24
195.167.158.0/24 maxlen: 24
206.252.224.0/19 maxlen: 19
206.252.250.0/24 maxlen: 24
212.91.4.0/22 maxlen: 22
212.91.10.0/24 maxlen: 24
212.91.11.0/24 maxlen: 24
212.91.12.0/24 maxlen: 24
212.91.13.0/24 maxlen: 24
212.91.14.0/24 maxlen: 24
212.91.16.0/20 maxlen: 20
212.91.28.0/24 maxlen: 24
213.189.32.0/19 maxlen: 19
213.189.32.0/24 maxlen: 24
213.189.42.0/24 maxlen: 24
213.189.50.0/24 maxlen: 24
217.17.32.0/20 maxlen: 20
217.149.240.0/20 maxlen: 20
2001:1a68::/32 maxlen: 32
2001:1a68:0:13::/64 maxlen: 64
2001:1a68:0:1d::/64 maxlen: 64
2001:1a68:0:21::/64 maxlen: 64
2001:1a68:18::/48 maxlen: 48
2001:1a68:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c0:c3:3c:c2:14:37:9e:1d:4b:fd:b7:f5:98:9f:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 15 08:26:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9feebe18b32d6b904280ac424fe7578957de4a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:2e:85:70:94:fa:09:d2:59:3d:a2:0d:5a:
de:f4:18:aa:bc:60:65:1a:35:c0:29:73:06:23:cd:
34:9f:87:14:99:05:61:c1:55:d9:14:17:23:a4:6d:
b9:80:80:f5:0e:87:12:89:4b:4e:d5:90:4a:ed:10:
99:f5:f6:fe:f2:43:8e:d0:56:dc:29:bc:88:e3:24:
16:4a:14:43:79:14:a6:44:f5:02:f6:bb:47:7c:89:
e4:5c:fa:bc:02:b6:c2:ba:41:a3:10:36:7c:a6:98:
aa:31:16:de:d7:99:b8:8d:c3:90:61:94:f0:3f:27:
0c:57:01:89:5c:68:7f:9c:e5:6b:b5:ea:99:ca:e2:
98:d5:ff:01:db:cf:0d:8f:89:2d:f4:88:ed:f4:07:
f2:7c:8a:dc:fa:07:35:84:ce:69:62:86:13:08:a4:
e9:eb:55:8f:2a:b0:87:42:f3:b7:fb:ca:c0:2f:0f:
cb:b9:3b:74:25:96:a6:e7:82:d6:57:c9:a4:d4:ce:
86:bb:da:06:cf:fc:4e:61:4b:a5:28:12:b9:b2:38:
48:7d:e4:7f:12:b8:2e:e8:cb:3d:09:c4:1c:70:4b:
e6:10:fb:3e:92:9b:39:e6:1f:01:43:41:8e:0e:47:
50:f0:46:40:a4:be:6f:7e:21:63:64:d9:e2:b4:b4:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EE:BE:18:B3:2D:6B:90:42:80:AC:42:4F:E7:57:89:57:DE:4A:03
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n-6-GLMta5BCgKxCT-dXiVfeSgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.144.0/20
77.79.192.0/18
85.232.224.0/19
194.145.228.0/24
195.167.144.0/20
206.252.224.0/19
212.91.4.0/22
212.91.10.0-212.91.14.255
212.91.16.0/20
213.189.32.0/19
217.17.32.0/20
217.149.240.0/20
IPv6:
2001:1a68::/32
Signature Algorithm: sha256WithRSAEncryption
06:7d:bd:7b:59:30:a8:e7:38:49:0e:01:b1:b4:87:91:2d:80:
a7:6b:36:63:49:20:40:95:76:83:cd:3d:bd:39:5a:58:2a:a6:
f3:cd:be:5c:bc:dc:be:b0:48:d0:cf:92:03:10:e6:45:50:98:
aa:17:77:67:44:ae:db:3f:06:10:9e:83:81:ec:a3:32:4b:a8:
3e:61:99:a6:a1:54:a5:4f:49:9f:e2:e4:95:4b:99:c9:dc:6d:
43:34:22:34:84:2d:98:37:d2:c1:1f:f0:4e:6d:35:84:30:2f:
1a:90:e4:e1:35:a7:94:ec:ac:89:ee:b0:37:50:0c:dd:87:22:
c8:df:d7:2f:f0:44:21:a2:db:b8:55:b0:1c:56:ff:e1:e2:9d:
58:5a:db:5b:65:4f:6b:bc:ea:df:e7:a8:40:4b:0d:4a:b3:71:
73:f8:b6:8c:f0:53:21:08:5b:e3:af:3b:4d:ce:e3:58:28:1a:
69:c6:30:10:ca:d9:e1:4a:10:9a:c5:17:07:b9:ed:2f:22:39:
17:98:3f:50:b9:bd:91:44:9d:b4:af:75:0c:54:54:ab:8c:a0:
fb:43:0d:fb:4f:3d:eb:6b:f9:c9:af:a9:91:0e:1d:8f:ab:40:
ed:d1:d4:78:0a:78:cc:26:39:38:83:65:b7:ee:17:1e:0e:07:
6b:ff:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:03 2026 by rpki-client