This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/6n6d9llm9d3W9sApdO7SnFRv0iI.roa
File: 6n6d9llm9d3W9sApdO7SnFRv0iI.roa (raw, json)
Hash identifier: 3aaBVDzL3bNaASVAu5LzBulC2B1ebcHezRnPmf8DCc8=
Subject key identifier: EA:7E:9D:F6:59:66:F5:DD:D6:F6:C0:29:74:EE:D2:9C:54:6F:D2:22
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B775907812AF60ABCB24144517D954946
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/6n6d9llm9d3W9sApdO7SnFRv0iI.roa
Signing time: Thu 01 Jan 2026 02:18:01 +0000
ROA not before: Thu 01 Jan 2026 02:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203828
IP address blocks: 85.31.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:07:81:2a:f6:0a:bc:b2:41:44:51:7d:95:49:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea7e9df65966f5ddd6f6c02974eed29c546fd222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:92:1e:67:7e:77:cd:1d:15:a1:69:f9:ab:
04:8d:38:e3:8a:47:20:05:83:a5:0c:be:2e:b3:95:
ec:c8:ce:60:ca:e2:fc:af:1f:e9:10:a0:12:93:af:
18:7e:4d:ae:c0:fd:ee:ce:fe:de:9b:4a:f0:4e:ce:
1f:ef:96:23:36:32:62:dd:29:23:13:74:e4:4e:1c:
65:d3:af:fa:eb:f8:50:0a:c6:ed:ca:75:0d:f3:7e:
9c:ec:19:09:04:71:ef:aa:21:d2:8b:15:2f:3c:5d:
3f:c7:ad:c4:c1:cc:fb:7c:e2:ed:87:4a:4b:33:19:
64:a9:75:15:7e:29:10:3f:a1:02:54:1d:fc:53:e0:
a9:20:24:10:ed:35:90:09:30:2a:59:35:5b:f7:47:
3f:1c:c4:54:b9:64:e7:44:33:f1:25:0d:7a:31:04:
8f:00:05:a0:34:ad:f7:00:84:94:ca:21:50:61:4a:
fc:5f:b3:03:78:e4:36:58:a3:74:71:ed:b8:7e:cd:
aa:52:b8:41:1e:ff:80:5f:3b:c1:83:9a:80:79:b3:
f4:56:1b:33:a8:49:8f:fa:c5:aa:9d:21:d3:76:8d:
fb:41:0d:85:b1:03:38:eb:97:2a:11:c3:9e:f6:e2:
96:f1:37:31:3b:5f:83:d2:91:fb:5c:04:e5:0c:73:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:9D:F6:59:66:F5:DD:D6:F6:C0:29:74:EE:D2:9C:54:6F:D2:22
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/6n6d9llm9d3W9sApdO7SnFRv0iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.248.0/23
Signature Algorithm: sha256WithRSAEncryption
66:d8:01:c3:32:a6:27:4e:b1:df:4c:2a:c3:76:dc:69:f4:f4:
91:a6:0e:67:5d:1a:8c:d2:d3:7b:3b:40:28:ec:fe:45:65:06:
28:1e:3c:a0:77:f4:88:05:ee:e6:b6:64:22:a2:84:6c:39:30:
e6:81:3f:4b:04:6e:b9:6a:34:bd:f5:6c:42:d4:29:b6:51:66:
e0:52:5a:02:b7:da:3a:52:ca:9f:2a:44:e9:b4:be:1e:f1:57:
1f:95:28:ea:af:f6:3c:f8:41:43:cd:e6:46:b7:01:b2:5b:97:
da:e5:0a:57:1b:ae:d5:da:ce:c6:82:28:e4:f7:a4:45:42:1e:
e7:2e:43:9a:74:19:50:15:c6:2f:75:80:a3:64:3d:6d:48:9a:
b9:8c:07:d6:cd:45:8b:80:05:51:7f:5c:c8:d7:b4:9d:ae:e0:
bf:65:2a:ec:89:c3:f7:3e:03:f8:aa:4d:ef:06:43:ad:a0:51:
af:67:54:b0:5e:12:78:bf:50:79:1d:4d:0e:1a:bb:f3:9f:86:
5c:cd:cf:98:9c:3a:af:7c:f3:67:fb:22:2f:83:81:b5:93:41:
2c:7c:82:73:ea:28:f9:e7:03:36:32:66:6a:ca:a4:87:5b:99:
f0:9c:17:91:94:00:5b:fc:e7:95:f2:77:e4:19:a3:4e:d9:e9:
59:3b:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:12 2026 by rpki-client