This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/a6Erf_tnT8pMndq3WnrW7H4B990.roa
File: a6Erf_tnT8pMndq3WnrW7H4B990.roa (raw, json)
Hash identifier: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=
Subject key identifier: 6B:A1:2B:7F:FB:67:4F:CA:4C:9D:DA:B7:5A:7A:D6:EC:7E:01:F7:DD
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019B79111A8DB033F1192E3B7C5E41238D9C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/a6Erf_tnT8pMndq3WnrW7H4B990.roa
Signing time: Thu 01 Jan 2026 10:18:42 +0000
ROA not before: Thu 01 Jan 2026 10:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 94.182.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:1a:8d:b0:33:f1:19:2e:3b:7c:5e:41:23:8d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 10:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ba12b7ffb674fca4c9ddab75a7ad6ec7e01f7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:76:e1:b0:ff:db:5f:d7:9c:82:f0:85:ab:
3d:50:fb:32:a1:ea:1d:f1:2b:f3:cb:91:dd:52:8d:
21:da:e3:48:0b:74:cc:db:79:a1:e2:3a:4b:7a:49:
6d:6c:67:f5:e5:19:62:7a:b8:5a:e2:53:ff:d6:5c:
0c:6d:1f:e2:51:d7:75:d8:15:ec:80:00:54:a8:29:
2e:cb:c8:c6:96:73:14:39:0d:2f:fe:eb:01:28:4d:
32:cb:69:08:f9:6b:1a:62:40:d8:a8:e3:3c:00:45:
78:e4:89:67:d1:9c:23:ee:f3:98:23:93:61:07:b0:
a6:39:8f:3b:ba:2f:af:e0:96:7c:a1:27:1d:0e:68:
24:39:5c:fc:1b:a0:ce:d9:6c:97:8e:ab:78:dd:90:
bb:bf:e2:28:13:70:bd:3d:fe:ee:7e:03:20:ba:1f:
c6:49:1f:fa:de:83:8e:e8:74:af:b3:bd:6d:d6:94:
53:48:6b:f1:69:b7:0e:95:e9:24:8b:b8:b5:3c:15:
ed:94:38:fe:8f:79:8e:ce:78:32:c1:cb:af:64:4f:
3a:89:86:d9:da:b0:8d:28:c7:96:54:36:98:ed:24:
18:7c:52:da:ed:40:47:b1:4c:86:56:e3:44:b3:78:
71:6a:57:c4:8d:0a:68:f7:85:6f:d2:a7:ba:1b:74:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:2B:7F:FB:67:4F:CA:4C:9D:DA:B7:5A:7A:D6:EC:7E:01:F7:DD
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/a6Erf_tnT8pMndq3WnrW7H4B990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.228.0/24
Signature Algorithm: sha256WithRSAEncryption
55:72:86:27:de:91:6c:7b:c0:a5:3e:4b:c5:c1:93:70:92:29:
1b:a4:1c:a1:8c:7f:53:16:65:ef:fd:29:b4:15:ef:9b:98:f6:
01:74:45:24:e2:36:fa:c4:56:a5:9c:1f:9b:cf:ff:50:86:27:
df:20:5d:71:37:a4:a4:96:bb:0f:68:2f:26:5e:d2:76:48:49:
bf:98:c3:d8:c4:90:f8:21:39:0c:75:f6:cd:01:47:a1:b1:76:
dc:f7:5a:cf:a1:e9:35:f0:9a:6d:67:c5:df:dd:c0:69:9d:09:
6a:09:2e:2c:24:1b:80:eb:77:de:55:40:68:b7:1b:27:e2:a4:
3f:c7:12:e8:85:c1:af:0e:90:54:74:79:65:8b:9b:98:3f:f0:
99:f9:58:83:3c:77:1e:59:4c:c0:42:6c:00:e4:a5:fd:b0:b0:
7e:10:7b:2b:df:11:cd:46:56:f0:3b:b6:ac:f8:32:77:a7:5f:
6f:cf:5d:dd:b8:c4:bd:c0:3d:b1:1e:8f:97:a9:be:19:ce:9a:
de:32:43:fb:9e:34:b3:76:23:99:4d:2d:d2:e1:3b:92:50:41:
82:46:51:31:c6:d5:4f:55:05:1e:ef:41:b8:b0:ba:3a:88:d7:
ad:f8:42:ee:76:9b:80:74:f6:9e:55:7a:14:f9:d8:57:d2:ec:
8b:ba:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:16:22 2026 by rpki-client