This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/6vOB_0kXFWOVeiswTba6ofOe3mU.roa
File: 6vOB_0kXFWOVeiswTba6ofOe3mU.roa (raw, json)
Hash identifier: G//GVAi7wgZlWL5aVcz26sd32lr8++Cd1gJc7XKITXk=
Subject key identifier: EA:F3:81:FF:49:17:15:63:95:7A:2B:30:4D:B6:BA:A1:F3:9E:DE:65
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019B7C1215AF65EC75FB150D1DA3434E8B44
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/6vOB_0kXFWOVeiswTba6ofOe3mU.roa
Signing time: Fri 02 Jan 2026 00:18:38 +0000
ROA not before: Fri 02 Jan 2026 00:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43962
IP address blocks: 185.123.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:15:af:65:ec:75:fb:15:0d:1d:a3:43:4e:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 2 00:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaf381ff49171563957a2b304db6baa1f39ede65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:c8:92:d8:70:47:87:60:6c:f0:62:fe:d7:
0c:a3:16:cd:7b:aa:db:4c:63:ef:15:e5:13:1c:ea:
f4:c0:54:35:56:76:de:20:a9:68:ea:67:47:53:e0:
40:05:3b:63:5e:c0:55:b7:aa:9c:e5:04:0d:9b:6e:
15:0d:25:a7:4c:15:01:09:22:3c:90:52:e8:69:37:
ba:10:3f:9b:69:c8:23:0c:b2:d7:ff:a0:c2:22:28:
48:72:4f:e2:ef:fc:a3:ff:6d:ba:5b:7a:a3:99:d8:
2e:cd:dd:b1:08:8f:84:10:35:6a:29:bb:27:9f:3d:
28:aa:90:55:8b:8e:97:9b:61:e8:95:cf:8f:50:8c:
30:c3:c4:db:94:1c:2e:e3:de:f6:28:46:cb:95:8f:
cb:94:bf:dd:6f:2a:0d:5d:40:b6:34:c5:39:74:2a:
ac:9d:ce:a1:4d:93:9d:f0:d6:56:45:ac:11:7a:dc:
da:29:0a:51:47:46:86:85:47:13:0d:5e:ab:65:73:
8c:24:d4:19:79:28:80:e7:57:c7:50:fc:e4:46:a8:
d7:8e:9c:1c:52:ec:4a:f2:ab:98:32:9f:3b:46:df:
0e:87:67:dd:22:e9:43:e2:f4:fb:61:4c:be:34:1b:
eb:6e:06:96:28:57:15:40:49:20:29:dc:b7:a5:b8:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F3:81:FF:49:17:15:63:95:7A:2B:30:4D:B6:BA:A1:F3:9E:DE:65
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/6vOB_0kXFWOVeiswTba6ofOe3mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.162.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b4:98:ac:f5:85:66:2c:d4:b7:d9:fb:94:30:01:be:c5:fb:
f8:f6:73:57:67:86:15:c1:45:50:a2:c6:22:46:63:f8:91:93:
ec:f7:10:43:85:d8:47:90:43:e5:39:77:70:38:03:c0:6d:bf:
57:cf:4d:37:29:a6:88:d5:f8:69:a9:2a:e8:89:02:8a:83:51:
46:ab:23:32:70:ff:07:68:df:aa:c1:75:91:10:2d:74:53:31:
27:5a:9f:71:ae:2d:a0:f6:44:95:13:56:81:23:34:45:99:f7:
54:8d:8f:67:c0:9b:fe:c0:32:40:9d:5d:a9:72:21:a6:1b:7e:
78:3e:1e:52:0e:80:8f:e2:ee:cf:bc:34:4a:15:cd:c1:75:37:
42:24:c4:93:50:c1:2c:78:42:d9:cb:af:e7:b7:fa:94:47:b3:
24:56:f5:65:00:06:0d:15:6a:03:16:19:33:32:0a:9a:ab:14:
e3:0b:61:fe:da:58:a4:1a:50:aa:87:b9:a1:21:07:12:b5:9f:
b9:5c:5f:27:01:52:0e:ab:96:69:d0:3a:b1:c2:5d:d2:7c:b7:
2a:e8:e9:76:a9:cc:88:0a:52:c5:b1:fa:a5:43:b5:71:ef:fa:
dc:ce:fa:d8:a7:ff:8d:00:e8:67:27:a4:fc:4d:23:0f:b2:44:
0e:b7:eb:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EhWvZex1+xUNHaNDTotEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw
N2IzNDMwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWYzODFmZjQ5MTcxNTYzOTU3YTJiMzA0ZGI2YmFhMWYzOWVkZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fPIkthwR4dgbPBi/tcMoxbNe6rb
TGPvFeUTHOr0wFQ1VnbeIKlo6mdHU+BABTtjXsBVt6qc5QQNm24VDSWnTBUBCSI8
kFLoaTe6ED+bacgjDLLX/6DCIihIck/i7/yj/226W3qjmdguzd2xCI+EEDVqKbsn
nz0oqpBVi46Xm2Holc+PUIwww8TblBwu4972KEbLlY/LlL/dbyoNXUC2NMU5dCqs
nc6hTZOd8NZWRawRetzaKQpRR0aGhUcTDV6rZXOMJNQZeSiA51fHUPzkRqjXjpwc
UuxK8quYMp87Rt8Oh2fdIulD4vT7YUy+NBvrbgaWKFcVQEkgKdy3pbjniwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrzgf9JFxVjlXorME22uqHznt5lMB8GA1UdIwQY
MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt
Mjk3ZTI4MmQ2NmE4LzEvNnZPQl8wa1hGV09WZWlzd1RiYTZvZk9lM21VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4
LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXuiMA0G
CSqGSIb3DQEBCwUAA4IBAQBftJis9YVmLNS32fuUMAG+xfv49nNXZ4YVwUVQosYi
RmP4kZPs9xBDhdhHkEPlOXdwOAPAbb9Xz003KaaI1fhpqSroiQKKg1FGqyMycP8H
aN+qwXWREC10UzEnWp9xri2g9kSVE1aBIzRFmfdUjY9nwJv+wDJAnV2pciGmG354
Ph5SDoCP4u7PvDRKFc3BdTdCJMSTUMEseELZy6/nt/qUR7MkVvVlAAYNFWoDFhkz
MgqaqxTjC2H+2likGlCqh7mhIQcStZ+5XF8nAVIOq5Zp0Dqxwl3SfLcq6Ol2qcyI
ClLFsfqlQ7Vx7/rczvrYp/+NAOhnJ6T8TSMPskQOt+s5
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:38:35 2026 by rpki-client