This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6gYqtzaA1skTIdBgddGZhsm_vyo.roa
File: 6gYqtzaA1skTIdBgddGZhsm_vyo.roa (raw, json)
Hash identifier: UtEsUjvvwpdyV6N7sUQFyOFmE2c91q4XAnRsDVkATYk=
Subject key identifier: EA:06:2A:B7:36:80:D6:C9:13:21:D0:60:75:D1:99:86:C9:BF:BF:2A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019B76EAEEB38AC9A58526895243678DEAC7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6gYqtzaA1skTIdBgddGZhsm_vyo.roa
Signing time: Thu 01 Jan 2026 00:17:46 +0000
ROA not before: Thu 01 Jan 2026 00:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49187
IP address blocks: 188.253.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ee:b3:8a:c9:a5:85:26:89:52:43:67:8d:ea:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 00:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea062ab73680d6c91321d06075d19986c9bfbf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:c2:63:e0:11:63:56:bd:89:97:6c:1a:40:
00:d1:46:2b:45:be:a2:76:cb:fc:f0:b0:2e:e8:ec:
5c:67:12:6c:00:38:31:e7:51:5d:99:4e:43:4d:00:
79:30:84:5b:f7:eb:d7:a2:fc:83:e8:9b:8f:26:a0:
ee:85:e9:0e:db:4f:64:52:2b:1d:d4:43:59:0e:73:
02:eb:6e:53:d8:03:47:a8:67:11:78:5d:44:bb:73:
09:71:f9:92:89:4b:c8:ef:b4:48:da:b0:5f:af:fa:
6f:5a:8f:68:93:16:b3:96:6c:ed:49:ac:68:e8:26:
bb:c6:fa:31:6a:a5:e5:45:71:ca:85:78:fc:22:34:
8c:36:35:4b:1f:b9:07:97:e2:02:e2:64:89:e4:81:
a7:e1:9e:ba:93:42:8a:05:78:b2:86:11:4f:25:9a:
0a:9d:d8:e7:41:76:ca:ad:2e:a0:8c:86:8b:f3:00:
6c:62:8e:fa:5a:91:38:6f:2b:3b:05:77:35:bf:a2:
59:d2:2b:c2:8c:4e:6e:9e:01:7e:d1:6a:b7:be:7d:
47:de:53:d8:7c:e8:3d:61:d3:2f:28:c5:bb:95:c4:
30:b2:2d:03:ee:c7:b7:01:cc:9a:67:9c:f8:78:e5:
cd:8d:fd:5b:b6:ea:8a:77:3f:bf:7d:31:b6:38:e5:
8f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:2A:B7:36:80:D6:C9:13:21:D0:60:75:D1:99:86:C9:BF:BF:2A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6gYqtzaA1skTIdBgddGZhsm_vyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.14.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:ff:f3:fe:3b:1d:35:65:00:36:b3:6f:ca:ea:2d:c7:ff:e1:
49:cd:ff:f5:12:f6:6a:eb:c3:32:e0:c7:fd:0d:64:f5:7a:a2:
9b:82:63:72:36:09:e7:7d:41:10:ad:c9:cd:e4:7d:97:fc:ff:
fa:d4:d8:da:6e:ca:d1:fc:92:4c:1f:68:25:f2:5c:bf:bb:eb:
2c:d7:53:a1:38:2d:23:01:f0:92:f6:2a:34:95:e9:b7:00:8f:
16:fc:df:4e:0c:64:47:3b:1d:6f:34:61:d4:cd:7b:91:54:d3:
28:19:5f:ea:31:ed:82:24:c4:fe:76:1f:d7:3e:6c:ea:0c:0d:
be:11:e1:f2:80:e8:bb:1f:c8:18:15:7b:a8:f5:a9:5f:01:db:
26:9c:42:98:29:0c:d9:56:ab:a1:e7:25:88:d3:37:58:09:4d:
f0:d1:41:eb:e1:c3:56:5c:dc:a2:d4:46:8c:5f:f2:7e:c3:96:
12:be:db:cd:a1:da:78:d7:81:93:a8:92:bf:8e:81:4b:d1:66:
3a:92:15:2d:dc:a9:05:ba:17:f3:51:c9:43:30:df:23:a9:9a:
6b:1a:11:b7:12:22:fb:18:44:1b:e3:7a:61:64:88:ec:5e:f7:
4f:a5:12:29:80:92:57:b7:b8:21:ec:af:21:8a:3c:7c:f4:fb:
a6:44:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:06:23 2026 by rpki-client