This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/6mvUdK2sJwETz4cqi4djiQKdMUQ.roa
File: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (raw, json)
Hash identifier: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=
Subject key identifier: EA:6B:D4:74:AD:AC:27:01:13:CF:87:2A:8B:87:63:89:02:9D:31:44
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 019B79110216B779525AB5FE8C7751A616A7
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/6mvUdK2sJwETz4cqi4djiQKdMUQ.roa
Signing time: Thu 01 Jan 2026 10:18:36 +0000
ROA not before: Thu 01 Jan 2026 10:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200964
IP address blocks: 77.221.36.0/24 maxlen: 24
77.221.37.0/24 maxlen: 24
77.221.38.0/24 maxlen: 24
77.221.39.0/24 maxlen: 24
77.221.40.0/24 maxlen: 24
77.221.41.0/24 maxlen: 24
77.221.42.0/24 maxlen: 24
77.221.50.0/24 maxlen: 24
2a10:4941:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:02:16:b7:79:52:5a:b5:fe:8c:77:51:a6:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 10:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea6bd474adac270113cf872a8b876389029d3144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:94:36:71:8f:fa:69:51:a9:2b:55:01:d6:
06:c7:03:6a:c6:49:79:8e:21:be:5a:b6:7e:1d:58:
e3:7e:c2:4a:a9:fd:72:f7:af:1f:86:c2:73:01:e0:
2d:9f:40:cf:51:94:64:87:1d:eb:8c:44:11:86:98:
26:03:5d:96:25:fa:00:5b:cf:e8:6a:89:3c:d3:ae:
43:8c:fd:d3:bc:b7:69:d4:5a:07:03:87:5a:36:5f:
d9:53:57:ba:f0:08:9d:32:5b:d8:e3:b8:63:78:02:
3b:24:6e:b5:b0:35:8b:4e:ef:cf:93:03:a1:de:d3:
c4:0c:6d:45:96:12:24:fc:68:0c:07:e4:35:cf:19:
42:53:74:84:3f:3f:93:a7:ad:7b:02:b4:f5:55:d6:
cb:91:eb:1c:d9:9b:1b:87:a1:8a:c6:36:f0:ec:22:
0d:52:77:0c:7d:a1:c8:f5:76:9b:b3:7c:2c:7d:08:
e9:66:8d:dd:36:58:69:82:90:08:1e:2d:0b:28:2d:
53:3d:2d:8e:1c:3c:31:0b:19:5f:cb:bc:ef:8b:c0:
ad:a3:4b:b1:ae:11:23:c3:d9:bb:0b:b5:56:6b:de:
d7:43:2c:35:18:1f:1a:bc:8a:5e:f8:fb:30:60:dd:
29:cc:f2:bc:7d:52:02:be:3b:4a:87:1b:b4:60:11:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:D4:74:AD:AC:27:01:13:CF:87:2A:8B:87:63:89:02:9D:31:44
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/6mvUdK2sJwETz4cqi4djiQKdMUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.36.0-77.221.42.255
77.221.50.0/24
IPv6:
2a10:4941:10::/44
Signature Algorithm: sha256WithRSAEncryption
5d:df:30:56:96:ee:f5:71:ec:bd:3d:70:21:c3:a5:b7:f2:0e:
99:42:eb:56:d9:23:6e:67:6a:58:af:16:19:ef:6f:17:26:93:
9b:cb:d3:ee:a9:7b:05:c1:1b:be:38:54:e6:cc:4d:1e:58:95:
d8:b9:36:8f:13:80:5f:f5:a1:08:a6:47:b7:af:6f:2a:e9:3e:
26:3a:9b:c5:da:12:ce:dd:41:79:29:f7:2a:61:37:bc:cb:d3:
5d:8b:84:02:30:38:7e:de:f3:ed:29:96:05:94:6a:96:a5:eb:
41:4b:4d:45:26:b8:f9:6e:48:98:44:e9:10:2e:41:07:ee:fe:
4e:2f:e1:38:b1:9d:a1:e6:0c:95:67:7c:d3:64:4a:aa:8a:78:
30:44:eb:1f:87:b4:f2:7d:d6:f3:76:27:21:71:30:6a:3b:5a:
92:2e:4e:1b:87:a6:20:f8:fb:e6:f5:03:f5:7d:6e:c0:71:ce:
af:7d:2c:f7:ef:da:8a:f7:65:dc:ac:0b:04:49:71:25:77:59:
f8:fc:62:49:3b:28:68:0b:8e:34:20:af:c7:48:23:15:6c:5e:
7b:8b:f4:e8:3b:f3:22:67:90:61:99:3a:34:72:8e:b1:99:41:
df:5e:e5:17:02:4b:a2:a3:98:72:5b:e1:33:63:19:6f:21:cb:
ea:0c:89:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:11 2026 by rpki-client