This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6mOOJSR4mgA3k1EgD-IMKS_IeWM.roa
File: 6mOOJSR4mgA3k1EgD-IMKS_IeWM.roa (raw, json)
Hash identifier: fzy1SzpNvbTuJWVj4k5cuA/mcHsGc0uNLoR64SoKxmA=
Subject key identifier: EA:63:8E:25:24:78:9A:00:37:93:51:20:0F:E2:0C:29:2F:C8:79:63
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019B8E54C80B527FA9189A74B3ED3FABB5F0
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6mOOJSR4mgA3k1EgD-IMKS_IeWM.roa
Signing time: Mon 05 Jan 2026 13:24:39 +0000
ROA not before: Mon 05 Jan 2026 13:24:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215285
IP address blocks: 185.243.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8e:54:c8:0b:52:7f:a9:18:9a:74:b3:ed:3f:ab:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 5 13:24:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea638e2524789a00379351200fe20c292fc87963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:19:a9:ae:58:08:4c:72:59:10:38:cd:1d:
82:4c:39:47:42:ac:8e:b9:3c:16:20:b4:31:72:8e:
1f:34:61:4b:e0:27:c9:d3:bd:b6:3f:d9:ff:e8:60:
a8:1a:21:6b:d0:76:6f:a5:75:0a:59:a1:46:23:80:
1a:bd:e7:13:02:3b:77:64:b3:eb:59:c1:cd:a4:93:
40:95:65:17:6b:a8:69:8e:fb:cc:ae:2a:db:72:56:
22:17:f8:71:57:ca:41:31:4c:43:af:75:cc:f3:af:
5d:69:25:6e:f3:fd:1f:95:04:f8:cc:ca:f3:46:fa:
23:f2:db:a7:66:61:14:64:f1:55:ee:1c:8e:37:3f:
50:2a:3e:90:95:85:83:e2:09:75:0a:99:56:c3:a1:
08:62:88:d7:67:6e:52:ff:7b:14:4d:8b:31:be:61:
b4:02:b6:37:11:93:8f:ad:f0:85:3e:3e:62:c6:9c:
38:89:42:75:15:da:a6:9b:66:6d:5c:42:f5:bb:dc:
f0:6b:7d:83:56:be:db:ce:2e:38:16:40:be:a8:d3:
04:7a:8e:43:9a:63:09:82:ef:54:a8:d2:69:78:b4:
cb:b7:cf:2e:b2:44:3c:2c:69:03:35:71:71:9a:a4:
14:66:4e:39:a8:fc:a6:6f:a3:04:df:b8:0e:59:54:
e1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:63:8E:25:24:78:9A:00:37:93:51:20:0F:E2:0C:29:2F:C8:79:63
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6mOOJSR4mgA3k1EgD-IMKS_IeWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.49.0/24
Signature Algorithm: sha256WithRSAEncryption
94:84:bf:01:03:33:0f:d4:24:e4:67:48:b3:33:43:1a:f9:db:
11:1e:0b:ec:f2:e1:98:3f:b0:8e:da:92:c6:5a:95:9d:e2:b8:
77:ed:91:71:ba:62:2e:6a:58:02:a6:cc:6e:6e:68:47:15:53:
de:73:10:d4:e3:ba:30:a9:ad:dc:56:6f:77:6c:0d:1e:84:26:
ad:2f:54:18:d5:87:07:5f:72:d1:e1:9e:0c:49:86:5a:89:95:
a3:b3:fd:4f:2a:c1:ff:02:14:ed:31:8c:79:24:ed:3b:e7:ae:
22:b1:6d:c4:d3:33:27:a4:9f:d2:51:44:42:a9:4d:30:18:4b:
bb:b9:88:dc:fb:7e:53:f1:9d:bc:4f:18:01:94:f3:13:b1:f8:
04:1b:45:be:6c:76:4b:ae:05:29:0b:eb:91:8e:2c:16:fb:ff:
8b:18:6a:85:86:27:f5:53:3f:16:67:5b:7b:32:8d:7d:f7:32:
7a:61:d5:a8:30:d5:0f:d4:7a:eb:32:db:8e:85:13:ea:a0:1f:
63:3f:1b:33:4b:36:a9:c2:13:36:f3:98:c7:d8:cc:6f:6d:c6:
c6:ed:e5:d1:44:95:7e:f3:b9:9f:71:f0:e2:4f:c9:30:46:08:
0f:8a:b2:b1:9c:0a:b8:99:e4:59:90:34:33:4f:04:8a:25:e4:
50:ba:3d:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZuOVMgLUn+pGJp0s+0/q7XwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwMTA1MTMyNDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTYzOGUyNTI0Nzg5YTAwMzc5MzUxMjAwZmUyMGMyOTJmYzg3OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oUZqa5YCExyWRA4zR2CTDlHQqyO
uTwWILQxco4fNGFL4CfJ0722P9n/6GCoGiFr0HZvpXUKWaFGI4AavecTAjt3ZLPr
WcHNpJNAlWUXa6hpjvvMrirbclYiF/hxV8pBMUxDr3XM869daSVu8/0flQT4zMrz
Rvoj8tunZmEUZPFV7hyONz9QKj6QlYWD4gl1CplWw6EIYojXZ25S/3sUTYsxvmG0
ArY3EZOPrfCFPj5ixpw4iUJ1Fdqmm2ZtXEL1u9zwa32DVr7bzi44FkC+qNMEeo5D
mmMJgu9UqNJpeLTLt88uskQ8LGkDNXFxmqQUZk45qPymb6ME37gOWVThdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpjjiUkeJoAN5NRIA/iDCkvyHljMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvNm1PT0pTUjRtZ0EzazFFZ0QtSU1LU19JZVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufMxMA0G
CSqGSIb3DQEBCwUAA4IBAQCUhL8BAzMP1CTkZ0izM0Ma+dsRHgvs8uGYP7CO2pLG
WpWd4rh37ZFxumIualgCpsxubmhHFVPecxDU47owqa3cVm93bA0ehCatL1QY1YcH
X3LR4Z4MSYZaiZWjs/1PKsH/AhTtMYx5JO07564isW3E0zMnpJ/SUURCqU0wGEu7
uYjc+35T8Z28TxgBlPMTsfgEG0W+bHZLrgUpC+uRjiwW+/+LGGqFhif1Uz8WZ1t7
Mo199zJ6YdWoMNUP1HrrMtuOhRPqoB9jPxszSzapwhM285jH2MxvbcbG7eXRRJV+
87mfcfDiT8kwRggPirKxnAq4meRZkDQzTwSKJeRQuj1j
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:35 2026 by rpki-client