This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa
File: w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa (raw, json)
Hash identifier: Yf1g7ljDU7te6N4XEGH4NkhfBi9rKgbfTnWehMLxzL8=
Subject key identifier: C3:A6:48:5C:F0:E9:01:EB:B9:3F:BF:E6:1F:A1:D9:8A:A9:E4:57:DA
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 019B78A30512F1B58FADBEFE2AB9E3F9C7F5
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa
Signing time: Thu 01 Jan 2026 08:18:28 +0000
ROA not before: Thu 01 Jan 2026 08:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199739
IP address blocks: 81.22.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:05:12:f1:b5:8f:ad:be:fe:2a:b9:e3:f9:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Jan 1 08:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3a6485cf0e901ebb93fbfe61fa1d98aa9e457da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:2e:4c:ca:61:b4:f9:d7:e6:eb:e9:12:ad:
7f:08:33:7e:15:f7:c7:76:af:67:4f:b8:47:87:a7:
1e:af:6c:a2:e8:ce:34:4d:f7:26:75:25:1f:b1:88:
be:01:6c:ec:01:f6:46:f8:c1:83:b5:04:3c:83:1d:
10:d9:23:46:6e:8e:fb:72:2a:f5:4e:45:bb:86:d6:
f4:22:62:5f:0c:40:1b:3a:22:c5:26:42:d4:7f:d8:
4e:fe:d5:c3:f8:03:2c:99:4c:80:41:12:b9:1b:29:
a0:82:17:a5:13:4d:6b:73:c0:37:54:bb:e2:42:f4:
30:7a:39:ec:48:b4:0a:e1:f3:4c:a9:05:20:f9:39:
f1:d0:83:e3:aa:12:d9:ed:17:c4:44:fb:8e:37:e6:
73:57:2f:6b:6f:da:c3:62:ce:2a:b9:fb:80:84:5e:
c0:0a:24:2a:3a:29:7d:d6:46:a1:bc:b8:f3:77:5d:
3d:e1:77:23:ab:b4:77:98:02:bd:95:28:35:89:f7:
6b:20:f2:1f:a4:b6:fa:60:11:86:fb:c5:2b:9f:2b:
5d:12:89:ad:c2:8d:a7:c7:9a:16:6a:37:59:be:08:
80:be:7d:e9:e6:ba:d0:30:60:70:14:35:54:dd:ef:
18:9e:a0:67:ed:77:0b:0b:a0:7f:9f:1c:a4:66:16:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A6:48:5C:F0:E9:01:EB:B9:3F:BF:E6:1F:A1:D9:8A:A9:E4:57:DA
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3a:20:6b:27:72:98:cd:99:0c:cb:a5:24:1b:52:45:1c:89:
88:8d:00:15:e0:8a:1c:de:e9:27:99:21:28:bc:00:e3:ae:c3:
77:7f:3c:c5:5f:64:b8:9c:71:3a:36:3d:3f:cf:dd:79:7e:41:
e8:c2:30:2f:3a:f8:56:4d:13:b9:ec:71:52:24:b5:8a:fb:16:
09:58:90:89:e4:0f:d9:ac:23:74:3e:65:90:f4:6a:95:8b:e1:
63:9e:4b:25:cd:12:fd:ee:48:52:f9:67:3a:3a:de:28:b7:ff:
3a:eb:1a:2a:b8:2d:44:94:ff:61:3e:20:a1:b9:e2:2d:90:c3:
b4:36:ac:89:d9:20:c9:e9:f1:57:ba:bd:00:09:da:25:68:c6:
02:fd:52:63:7a:01:6a:9c:5b:21:c5:dd:9b:ab:1f:d8:ee:98:
6b:25:42:a1:bc:cf:62:06:67:c2:dd:9a:9d:e3:2a:09:2e:78:
97:9f:f8:39:07:2c:cf:aa:f5:d0:89:c3:ee:51:01:ac:86:d3:
81:3c:09:87:73:eb:47:72:4d:03:54:b4:f2:c3:01:e2:4f:b1:
ec:86:d8:ab:42:e2:7f:fa:51:fd:8a:75:72:ec:26:86:38:51:
b6:4b:cc:3c:ca:9c:7e:81:16:dc:57:3d:97:60:4b:88:b5:42:
cf:3a:ae:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4owUS8bWPrb7+Krnj+cf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYTdmY2JlNTkzMTRjMzcyYjY4ZjIzMjIyMzgyOGIxZTMz
YTAzZWMwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2E2NDg1Y2YwZTkwMWViYjkzZmJmZTYxZmExZDk4YWE5ZTQ1N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRMuTMphtPnX5uvpEq1/CDN+FffH
dq9nT7hHh6cer2yi6M40TfcmdSUfsYi+AWzsAfZG+MGDtQQ8gx0Q2SNGbo77cir1
TkW7htb0ImJfDEAbOiLFJkLUf9hO/tXD+AMsmUyAQRK5GymgghelE01rc8A3VLvi
QvQwejnsSLQK4fNMqQUg+Tnx0IPjqhLZ7RfERPuON+ZzVy9rb9rDYs4qufuAhF7A
CiQqOil91kahvLjzd1094Xcjq7R3mAK9lSg1ifdrIPIfpLb6YBGG+8UrnytdEomt
wo2nx5oWajdZvgiAvn3p5rrQMGBwFDVU3e8YnqBn7XcLC6B/nxykZhbBtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOmSFzw6QHruT+/5h+h2Yqp5FfaMB8GA1UdIwQY
MBaAFCCn/L5ZMUw3K2jyMiI4KLHjOgPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTIt
NDI2MDM5Nzg4OTE5LzEvdzZaSVhQRHBBZXU1UDdfbUg2SFppcW5rVjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTItNDI2MDM5Nzg4OTE5
LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURYhMA0G
CSqGSIb3DQEBCwUAA4IBAQB9OiBrJ3KYzZkMy6UkG1JFHImIjQAV4Ioc3uknmSEo
vADjrsN3fzzFX2S4nHE6Nj0/z915fkHowjAvOvhWTRO57HFSJLWK+xYJWJCJ5A/Z
rCN0PmWQ9GqVi+FjnkslzRL97khS+Wc6Ot4ot/866xoquC1ElP9hPiChueItkMO0
NqyJ2SDJ6fFXur0ACdolaMYC/VJjegFqnFshxd2bqx/Y7phrJUKhvM9iBmfC3Zqd
4yoJLniXn/g5ByzPqvXQicPuUQGshtOBPAmHc+tHck0DVLTywwHiT7HshtirQuJ/
+lH9inVy7CaGOFG2S8w8ypx+gRbcVz2XYEuItULPOq4+
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:30 2026 by rpki-client