This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/6En_09KtbtmeJT2TzRof4DMGjCY.roa
File: 6En_09KtbtmeJT2TzRof4DMGjCY.roa (raw, json)
Hash identifier: R9xJJ7v+61ln4c5qa6Q6jPAX17DxVoycETo4sK8XSmw=
Subject key identifier: E8:49:FF:D3:D2:AD:6E:D9:9E:25:3D:93:CD:1A:1F:E0:33:06:8C:26
Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac
Certificate serial: 019B7EA4C83A361F69D21F58EC3F9FDDB87E
Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/6En_09KtbtmeJT2TzRof4DMGjCY.roa
Signing time: Fri 02 Jan 2026 12:18:06 +0000
ROA not before: Fri 02 Jan 2026 12:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 224
IP address blocks: 78.91.0.0/16 maxlen: 16
193.156.0.0/15 maxlen: 15
2001:700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:c8:3a:36:1f:69:d2:1f:58:ec:3f:9f:dd:b8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac
Validity
Not Before: Jan 2 12:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e849ffd3d2ad6ed99e253d93cd1a1fe033068c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:80:ac:6f:1a:16:02:0c:a3:85:bf:ff:06:
1d:a7:a5:19:c4:eb:36:49:f4:a4:2f:53:a6:13:cb:
fe:c8:73:93:87:c6:29:1f:98:4a:e6:b4:95:3e:81:
60:cb:b1:8b:ab:3b:f1:28:25:1a:f3:7f:c7:73:d4:
88:70:b5:a0:2b:f4:5c:1a:0e:89:50:58:a6:18:f9:
e0:de:b0:5e:65:74:9b:e2:1d:5e:2d:27:dc:43:15:
df:97:96:76:07:da:1b:f7:75:48:01:02:cc:80:62:
16:7c:df:81:54:29:4f:8d:db:84:e8:bd:27:b0:0b:
85:f6:0e:3e:39:16:28:7a:9f:1c:00:2e:a1:74:6f:
e9:e8:eb:5d:f2:be:0c:8a:2b:19:c0:69:99:32:d1:
50:bd:9d:f7:d5:08:09:7c:3c:ed:d5:5a:9a:42:79:
87:51:7f:6b:41:fc:2c:30:cf:d4:4b:1e:85:c1:68:
a4:5e:70:95:1b:c5:02:dd:89:cc:8f:5e:15:18:bd:
b9:bc:f9:f9:55:8f:15:c3:75:9e:06:d4:cd:37:0f:
c7:92:63:ca:63:c0:44:cf:32:01:96:bb:ff:0d:c5:
93:f1:70:49:e6:b6:db:3b:21:90:2f:c5:66:e2:36:
62:a8:bc:6d:f1:71:76:d9:07:59:02:5d:58:41:3e:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:49:FF:D3:D2:AD:6E:D9:9E:25:3D:93:CD:1A:1F:E0:33:06:8C:26
X509v3 Authority Key Identifier:
keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/6En_09KtbtmeJT2TzRof4DMGjCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.91.0.0/16
193.156.0.0/15
IPv6:
2001:700::/32
Signature Algorithm: sha256WithRSAEncryption
75:c5:bf:4f:5e:54:39:43:16:d3:05:0b:bd:c2:e9:5b:73:47:
36:67:1f:2d:c7:79:cb:ed:20:6a:d5:1e:68:fe:aa:64:51:1c:
42:f1:66:7a:2c:89:28:d4:3b:07:ff:d1:4e:1a:74:dd:7b:ec:
82:61:c7:3e:e9:dd:a7:41:08:b1:80:65:23:b9:09:28:e2:64:
23:e6:29:fe:4b:a1:51:34:9b:fc:b9:ec:d9:de:01:fd:38:43:
0e:96:b3:92:a4:d4:d5:b3:8b:8a:52:92:80:69:cf:d6:9b:79:
d6:42:d6:f8:0b:94:a6:cb:a3:18:b8:24:c9:25:b2:83:03:78:
21:26:7f:0b:9d:ec:ca:df:33:03:75:bf:5f:5c:df:20:c4:39:
25:1b:d3:f3:03:a3:50:bc:a1:af:8a:9a:75:c7:67:17:8b:e9:
85:48:8c:e4:67:3f:9f:a6:b1:4e:b6:2e:96:33:1e:06:65:33:
0a:30:04:8a:f3:48:5d:1a:79:cc:29:6e:b7:3a:5f:cd:22:03:
6a:cf:e4:aa:5b:60:ec:13:fc:3c:0d:fe:85:09:bc:bd:99:f5:
59:c9:87:80:12:78:fb:96:67:04:ac:80:f4:79:ce:f0:c7:1a:
09:2b:b3:c6:eb:91:c9:56:d3:6e:db:00:f6:c8:08:9f:c8:e5:
bc:ea:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:06:00 2026 by rpki-client