This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6ZLUefDskNIp1-5_EH9pUAp13mQ.roa
File: 6ZLUefDskNIp1-5_EH9pUAp13mQ.roa (raw, json)
Hash identifier: JrqcIjoB4EYeURGqsZWpMLimakjpF0h22GtEXoNBaTc=
Subject key identifier: E9:92:D4:79:F0:EC:90:D2:29:D7:EE:7F:10:7F:69:50:0A:75:DE:64
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019B7AC7E6E7A93F83AAB1E95D717DAFEC34
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6ZLUefDskNIp1-5_EH9pUAp13mQ.roa
Signing time: Thu 01 Jan 2026 18:17:59 +0000
ROA not before: Thu 01 Jan 2026 18:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1145
IP address blocks: 145.97.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e6:e7:a9:3f:83:aa:b1:e9:5d:71:7d:af:ec:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 18:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e992d479f0ec90d229d7ee7f107f69500a75de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:b8:44:41:48:8b:2c:72:e4:54:81:f2:55:
59:b5:10:d6:9e:50:8d:29:46:df:f0:29:a4:3b:67:
0b:3a:ef:02:f4:97:75:81:e1:a0:d8:46:16:aa:55:
45:d8:52:ac:3f:ce:6a:62:67:60:91:ad:2d:c0:ca:
f2:f6:cf:66:77:21:66:8b:1d:a9:78:3b:86:4d:f3:
a0:6c:84:66:5d:0b:3a:8e:1e:61:68:22:aa:b0:7d:
a2:fe:7a:01:ea:7a:5c:2b:24:8f:c2:8a:26:0e:25:
0d:c8:bd:97:40:70:22:f7:94:6f:e3:28:7c:d1:51:
22:6b:8d:8e:87:f6:c3:b1:bb:b7:68:37:c1:78:9f:
78:b4:05:4a:e7:f1:5d:99:5a:66:c9:97:10:8c:20:
62:50:91:b0:61:57:a0:fa:04:47:41:03:df:2c:d7:
c6:bf:a4:8f:10:ac:c4:56:86:c1:d4:89:70:6e:e3:
78:bd:93:5d:cb:9a:0c:05:df:54:9e:e9:16:e1:ac:
98:bd:f7:ff:f8:90:9f:1f:21:65:26:e6:14:b3:8a:
5c:57:bc:fa:49:e6:24:3d:1b:83:e6:cb:74:e7:b7:
6d:47:8e:ba:c1:45:fa:d6:26:87:39:61:5d:28:85:
44:c3:4b:4c:c9:99:4e:4e:7e:c5:c7:59:e2:72:ae:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:D4:79:F0:EC:90:D2:29:D7:EE:7F:10:7F:69:50:0A:75:DE:64
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6ZLUefDskNIp1-5_EH9pUAp13mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.97.32.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:6d:91:e6:e8:28:32:46:97:6c:56:fe:e2:8f:7f:68:32:47:
b5:a5:5c:8f:2f:22:1d:c4:3e:b8:6e:4b:ea:17:25:fe:19:34:
b6:c1:2f:2d:e8:de:25:87:ec:33:eb:64:36:65:20:74:6d:85:
c8:bb:a6:51:65:2a:99:c4:b2:35:a8:29:c5:87:fd:b6:64:86:
3b:20:3b:a8:07:45:3a:7f:ad:cb:f9:dd:b5:82:ea:97:d2:37:
28:02:57:ea:87:2f:bf:44:89:ca:79:07:c7:ac:ee:2f:1b:90:
38:71:90:57:60:96:4e:65:59:aa:3c:c5:02:75:e0:c7:a4:0e:
1c:f5:69:91:63:b7:00:8f:80:6a:1a:a7:74:61:70:44:7f:ba:
b7:8c:ad:28:28:1b:1e:d1:6a:ec:4d:11:ff:f2:57:23:d3:22:
bc:b7:92:57:a4:45:b6:69:ec:13:53:03:a3:fa:42:66:69:13:
1a:41:ac:c1:0e:4d:eb:20:3d:df:6d:e1:f7:3a:d1:e4:01:16:
38:a6:6f:55:8b:56:3a:40:69:97:6a:9a:f3:e2:d1:b6:54:3f:
c4:df:55:f8:f6:ff:9c:de:fa:3e:37:24:bf:c3:ce:47:77:a9:
c1:e7:b1:bd:86:67:f3:d2:05:c3:96:ab:2c:99:16:23:58:5a:
33:ff:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:06 2026 by rpki-client