This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa
File: jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa (raw, json)
Hash identifier: fp8xX6qHENJp/r7Mh6H1TsYEX2pKIdlfsNezIS3fbdA=
Subject key identifier: 8E:D3:33:04:51:39:D4:7B:3B:08:60:23:5D:C5:14:10:8B:07:E6:64
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 019B797F48749DD14CBB51BCDB21FA459A24
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa
Signing time: Thu 01 Jan 2026 12:19:03 +0000
ROA not before: Thu 01 Jan 2026 12:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46887
IP address blocks: 2a06:6540:2001::/48 maxlen: 48
2a06:6541:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:48:74:9d:d1:4c:bb:51:bc:db:21:fa:45:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 1 12:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ed333045139d47b3b0860235dc514108b07e664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2c:ff:4b:de:c4:5e:56:15:ce:29:1a:71:da:
55:fa:62:31:01:90:08:99:b5:98:43:bd:2d:f4:29:
5f:b4:32:d1:ed:8e:68:67:dc:08:cb:92:5b:bd:af:
50:d8:63:49:8b:98:5d:88:03:ff:52:63:50:4d:34:
0e:51:19:fc:71:6f:4d:c4:fa:30:32:02:48:60:81:
98:c8:90:33:f1:ad:ad:c4:36:a9:6f:ba:c9:88:34:
f3:da:71:d5:8d:97:db:23:1c:c6:17:ea:b9:f5:98:
fd:a6:13:30:e4:53:ff:5e:0e:09:db:73:59:cd:6d:
c5:67:1a:de:02:a7:42:2f:53:15:e9:35:b2:2c:37:
91:af:39:00:b5:ab:05:40:b6:ef:3e:29:83:3d:74:
3d:0a:a0:c1:97:fc:44:24:9c:5a:74:0b:36:06:82:
ae:cd:32:b7:3b:b8:aa:b9:01:df:60:7d:bc:20:4a:
ed:05:f7:da:79:7c:93:66:4b:31:33:6d:11:e4:a1:
c7:f3:ec:e7:9d:d2:97:83:82:00:3d:20:e4:ec:4f:
46:e9:cb:b8:d5:a6:41:6e:9c:de:86:c4:22:94:18:
99:c8:26:fe:cf:13:8d:8d:48:8c:87:48:79:4d:48:
6f:f0:9f:ce:d6:5f:cd:63:89:f1:bb:f9:ad:e6:7b:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:33:04:51:39:D4:7B:3B:08:60:23:5D:C5:14:10:8B:07:E6:64
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:2001::/48
2a06:6541:2001::/48
Signature Algorithm: sha256WithRSAEncryption
29:76:f7:55:fb:70:b0:78:81:2a:35:c7:4f:c8:df:52:e1:fc:
78:8d:60:35:0e:5d:35:1b:83:1a:1c:21:12:0c:68:88:de:3e:
e1:c0:d7:00:0f:7f:07:05:00:dd:0c:d7:78:8f:31:fc:76:32:
95:86:7d:8e:a7:64:dc:4e:bd:bc:c0:d5:29:b8:95:89:cc:f2:
6b:1f:42:9f:42:4d:6b:57:1d:b9:73:26:9c:07:50:61:04:01:
68:77:71:5b:82:56:74:9d:5b:1e:2d:bd:c2:99:e0:cd:8e:01:
a0:9e:c7:9a:63:87:51:98:ca:08:2c:6e:d5:6e:35:40:e8:c8:
dd:7b:50:e2:95:d8:dd:5f:26:b4:2e:af:d0:4b:6c:93:8f:59:
59:32:7d:d7:30:b3:a8:bd:73:da:fb:29:b3:a6:dc:45:39:3c:
bb:31:de:95:f6:93:40:7f:66:86:19:ad:f1:2a:f8:1c:00:99:
c8:f2:f0:fc:e9:19:72:6e:26:93:b3:9f:94:ac:15:12:43:1b:
0c:e0:44:40:89:b3:8c:6a:65:7f:6d:b8:66:22:93:26:c6:23:
c8:79:1a:ea:e4:f9:26:91:1d:d6:94:14:e1:0d:7a:0a:88:69:
ab:2d:d9:d4:31:cc:80:6c:8e:18:2d:95:c7:68:67:87:c2:16:
2a:60:48:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt5f0h0ndFMu1G82yH6RZokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQzMzMwNDUxMzlkNDdiM2IwODYwMjM1ZGM1MTQxMDhiMDdlNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cz/S97EXlYVzikacdpV+mIxAZAI
mbWYQ70t9ClftDLR7Y5oZ9wIy5Jbva9Q2GNJi5hdiAP/UmNQTTQOURn8cW9NxPow
MgJIYIGYyJAz8a2txDapb7rJiDTz2nHVjZfbIxzGF+q59Zj9phMw5FP/Xg4J23NZ
zW3FZxreAqdCL1MV6TWyLDeRrzkAtasFQLbvPimDPXQ9CqDBl/xEJJxadAs2BoKu
zTK3O7iquQHfYH28IErtBffaeXyTZksxM20R5KHH8+znndKXg4IAPSDk7E9G6cu4
1aZBbpzehsQilBiZyCb+zxONjUiMh0h5TUhv8J/O1l/NY4nxu/mt5nu0DQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI7TMwRROdR7OwhgI13FFBCLB+ZkMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvanRNekJGRTUxSHM3Q0dBalhjVVVFSXNINW1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgZlQCAB
AwcAKgZlQSABMA0GCSqGSIb3DQEBCwUAA4IBAQApdvdV+3CweIEqNcdPyN9S4fx4
jWA1Dl01G4MaHCESDGiI3j7hwNcAD38HBQDdDNd4jzH8djKVhn2Op2TcTr28wNUp
uJWJzPJrH0KfQk1rVx25cyacB1BhBAFod3FbglZ0nVseLb3CmeDNjgGgnseaY4dR
mMoILG7VbjVA6Mjde1DildjdXya0Lq/QS2yTj1lZMn3XMLOovXPa+ymzptxFOTy7
Md6V9pNAf2aGGa3xKvgcAJnI8vD86RlybiaTs5+UrBUSQxsM4ERAibOMamV/bbhm
IpMmxiPIeRrq5PkmkR3WlBThDXoKiGmrLdnUMcyAbI4YLZXHaGeHwhYqYEjq
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:49 2026 by rpki-client