This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/6TK55uf4E7Q4i5YH-VAZAMARA00.roa
File: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (raw, json)
Hash identifier: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=
Subject key identifier: E9:32:B9:E6:E7:F8:13:B4:38:8B:96:07:F9:50:19:00:C0:11:03:4D
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 019B76EB1E35CD017E689CC44A352ADDE718
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/6TK55uf4E7Q4i5YH-VAZAMARA00.roa
Signing time: Thu 01 Jan 2026 00:17:58 +0000
ROA not before: Thu 01 Jan 2026 00:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137268
IP address blocks: 194.35.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:1e:35:cd:01:7e:68:9c:c4:4a:35:2a:dd:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: Jan 1 00:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e932b9e6e7f813b4388b9607f9501900c011034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:3a:54:4a:c3:26:14:24:18:5e:24:e4:dd:
0c:6a:38:9d:37:d6:7d:ae:14:bd:97:0e:4e:2f:26:
ae:43:b8:97:bb:45:06:ad:00:4f:0e:cb:7e:a0:b1:
56:0a:2d:38:df:d7:74:d6:5e:67:3e:5e:5d:15:80:
a9:2a:67:16:5c:8a:4b:06:f0:bb:81:dd:e0:c3:f1:
43:73:af:4a:57:f6:2e:f2:06:58:e2:a2:93:a5:a4:
6f:c5:c8:da:15:7a:0d:31:eb:98:75:11:9d:3b:4e:
33:55:d8:92:24:cf:15:23:de:11:77:33:8b:75:ef:
2d:e7:fa:77:c2:aa:f8:e2:38:cb:f3:fc:3f:c7:60:
0f:40:7c:1a:8e:82:b5:9d:bc:5e:ed:8b:b0:d7:f5:
09:5e:51:6d:68:f7:08:0a:16:5b:c2:53:61:55:d7:
3b:c0:96:83:6e:a6:ef:22:93:27:97:dc:e8:ee:14:
93:85:f2:1d:00:d4:68:75:53:78:95:15:10:2f:22:
74:69:5d:e7:78:cd:2f:1d:d3:28:9f:81:aa:6e:49:
65:2b:a6:a8:94:b1:2f:07:8a:d1:83:cc:b7:79:b7:
39:02:92:c4:0a:6a:2e:50:79:58:a2:00:49:2c:66:
c9:69:ed:56:2a:e2:77:6b:91:98:7f:65:ff:59:4f:
f2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:B9:E6:E7:F8:13:B4:38:8B:96:07:F9:50:19:00:C0:11:03:4D
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/6TK55uf4E7Q4i5YH-VAZAMARA00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.6.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7a:92:6b:9a:fc:01:5d:25:6b:e4:58:0d:f2:0f:41:c0:61:
04:78:8a:4b:c5:c7:e2:73:c7:b3:58:06:4c:90:26:10:a9:d8:
af:51:91:0b:a5:28:38:5a:b2:e8:f6:f3:18:73:48:3f:b9:de:
c8:db:fe:42:4f:3d:09:f6:e1:01:e0:81:df:07:10:1f:e0:8c:
fc:e0:e5:3c:d3:bb:20:ae:e0:b5:34:3e:b1:1e:f0:25:07:63:
e1:4f:d2:49:e0:96:1a:93:5a:a6:3c:5d:d7:ac:82:b5:f0:45:
c8:83:fd:0e:32:53:5a:26:54:b0:6d:49:ea:f3:b3:2e:ef:ea:
01:21:c7:aa:d0:6c:0e:ee:65:00:93:b9:14:02:0e:8d:14:ee:
62:76:30:2a:fc:c2:4f:16:2e:1d:4d:be:6b:71:e8:e4:89:9c:
00:ce:fd:e8:e1:41:68:d1:54:41:47:80:55:b8:70:87:e1:97:
f7:77:66:53:f3:ea:96:1e:f4:74:84:63:c5:59:90:94:02:42:
f5:2c:b8:70:24:8f:53:0a:b8:2f:6b:88:f4:c8:a7:e9:3b:32:
51:36:6c:63:32:55:67:b1:42:01:7f:a7:4c:2b:9a:f1:9d:71:
0f:7c:35:68:87:b5:fd:e7:3e:d9:9f:8a:89:5c:84:6a:a6:3b:
7d:5a:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:46 2026 by rpki-client