This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/6nEB7u7VDBwJvvErhhk_sp8HgHM.roa
File: 6nEB7u7VDBwJvvErhhk_sp8HgHM.roa (raw, json)
Hash identifier: SyBKloheaGBrGvFtFMvv0iZL+4Dv+JFkW0KebHTTw6E=
Subject key identifier: EA:71:01:EE:EE:D5:0C:1C:09:BE:F1:2B:86:19:3F:B2:9F:07:80:73
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019B783452E41B6AC7820EA8D27246FC49F6
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/6nEB7u7VDBwJvvErhhk_sp8HgHM.roa
Signing time: Thu 01 Jan 2026 06:17:33 +0000
ROA not before: Thu 01 Jan 2026 06:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200865
IP address blocks: 212.126.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:52:e4:1b:6a:c7:82:0e:a8:d2:72:46:fc:49:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 06:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea7101eeeed50c1c09bef12b86193fb29f078073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:3c:07:1a:ba:9e:05:ad:b7:48:12:48:24:
3c:69:5b:27:40:eb:50:04:8f:a4:71:23:e3:73:28:
a5:0d:b0:ae:c6:94:f6:f6:2d:1c:07:a9:eb:a6:7f:
23:76:01:05:19:12:45:db:42:1c:35:42:7b:1d:94:
aa:c3:af:66:cb:1f:a0:28:b9:42:3f:8e:00:91:6c:
3a:98:a3:b8:b6:bd:f8:63:a2:30:8c:78:ed:42:fd:
e5:ca:32:5d:0b:c6:39:1e:f7:d1:20:47:51:ea:3f:
73:53:5b:c7:1d:e6:16:a2:e7:44:6d:af:e6:55:3d:
6e:0f:65:06:1c:0b:78:7e:15:08:fd:a0:7c:ed:e7:
4e:40:8b:f4:c7:ac:6f:08:e2:d6:9e:6f:61:51:18:
5b:25:2b:13:0e:c3:0b:5b:56:f3:02:13:8f:95:61:
50:7f:4e:cf:93:9e:c0:16:d6:38:43:c6:f0:53:c9:
a5:c5:df:64:69:81:6d:ae:2a:45:d0:16:57:eb:b4:
1d:f1:68:90:6b:2c:2e:04:c9:78:cd:be:c8:a9:6d:
3e:81:2f:63:28:87:4b:c6:46:84:de:a0:3d:a3:04:
c7:86:85:65:70:2d:57:96:02:b6:f1:66:19:e9:73:
44:03:87:eb:6f:f2:9e:c4:00:fc:32:1f:55:37:e1:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:01:EE:EE:D5:0C:1C:09:BE:F1:2B:86:19:3F:B2:9F:07:80:73
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/6nEB7u7VDBwJvvErhhk_sp8HgHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.100.0/24
Signature Algorithm: sha256WithRSAEncryption
01:97:70:7b:d8:7f:70:d6:73:75:d8:db:66:dd:ea:a5:f2:86:
36:29:12:6e:bf:be:10:c2:1a:35:64:18:26:88:2f:34:d1:9a:
b7:aa:3e:2f:ea:1f:2c:29:d1:a0:ae:84:fd:56:b0:e3:39:10:
bd:44:69:8b:ab:90:be:fe:99:f4:2b:76:1b:3e:a5:8f:84:25:
c3:72:02:1e:cc:f8:9d:00:af:92:07:97:76:88:ff:3d:08:67:
24:2f:fd:7d:9a:0c:ba:76:09:f6:f8:d9:be:90:84:c1:96:ea:
ed:93:89:7f:1a:a0:b9:51:24:17:69:21:9b:86:43:a1:65:21:
81:09:54:09:93:b7:15:8d:22:8e:3b:53:d7:00:1b:29:2c:62:
40:b9:26:2c:e4:56:f2:30:b4:86:98:81:f0:79:ce:9d:e9:02:
32:d0:d2:bf:49:e3:a9:d9:ec:b1:a9:c8:49:99:64:a2:a8:98:
23:71:2b:fd:4e:a6:c4:cd:50:4e:81:5a:cb:fd:2e:32:7f:01:
7c:96:69:85:c4:75:f5:df:5a:ff:9e:ed:29:d1:4d:40:9d:24:
92:24:45:60:6b:61:7b:63:e8:c5:3c:35:41:d9:cc:57:e1:fd:
5e:ab:2b:f1:ff:e3:6a:36:87:56:40:9a:f5:99:72:86:57:21:
32:2c:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:40 2026 by rpki-client