This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/6KA1NZY-8uTlMpHRidS_d7PudWA.roa
File: 6KA1NZY-8uTlMpHRidS_d7PudWA.roa (raw, json)
Hash identifier: xUjKfuqdolVHKjbneqZVOfWNZfUlkAINU/NVZ98kNRU=
Subject key identifier: E8:A0:35:35:96:3E:F2:E4:E5:32:91:D1:89:D4:BF:77:B3:EE:75:60
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 019B7EA56B6787474E00615E352EA7F130C7
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/6KA1NZY-8uTlMpHRidS_d7PudWA.roa
Signing time: Fri 02 Jan 2026 12:18:48 +0000
ROA not before: Fri 02 Jan 2026 12:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210118
IP address blocks: 45.154.61.0/24 maxlen: 24
2a0f:b100:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:6b:67:87:47:4e:00:61:5e:35:2e:a7:f1:30:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 2 12:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8a03535963ef2e4e53291d189d4bf77b3ee7560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:f1:50:0d:a9:78:f5:75:4e:23:cb:f9:e1:
5f:34:bd:e4:44:fd:c9:96:89:72:02:e0:08:a4:ca:
b8:08:33:92:09:b2:60:96:ef:e6:f6:32:f8:12:0e:
59:75:c8:4e:0f:9d:7c:2c:06:b7:21:f2:4e:c0:0e:
e7:81:09:d6:aa:dd:85:f0:c2:8a:37:87:27:d1:68:
ce:1b:5a:76:ea:11:96:89:bd:76:e8:f8:d4:e8:b5:
54:9e:fc:08:f5:c5:23:49:01:29:fb:5e:ce:39:cd:
0f:d1:35:eb:8c:a8:b7:b7:88:d6:0f:d9:bf:86:0a:
53:21:d1:c3:c5:d4:87:1a:2b:a9:21:b5:3b:ff:69:
f9:e4:55:ab:c8:07:fb:ad:8f:f3:20:cb:8f:8b:14:
3a:07:0d:4f:14:6e:7e:e5:24:2e:eb:f2:f2:29:c4:
c5:8d:47:74:3e:fe:46:f1:ae:0f:ce:98:3a:c6:f0:
af:af:fc:d9:c3:a8:18:9f:45:50:fe:4f:35:45:83:
ae:81:cb:dc:eb:8b:20:a3:8b:9d:7e:e0:05:a4:57:
8a:b3:46:64:54:3a:17:51:0f:4f:00:c6:72:45:cc:
87:6e:a7:9a:10:97:eb:5a:1b:74:b1:7e:e1:19:d9:
1f:6c:51:ad:31:70:11:54:ab:c9:de:f3:af:e6:fa:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:35:35:96:3E:F2:E4:E5:32:91:D1:89:D4:BF:77:B3:EE:75:60
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/6KA1NZY-8uTlMpHRidS_d7PudWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.61.0/24
IPv6:
2a0f:b100:100::/40
Signature Algorithm: sha256WithRSAEncryption
61:7c:12:da:6c:2d:12:a7:a2:35:52:58:6c:b1:e0:69:81:7a:
3c:6a:01:89:b0:18:a8:86:fe:17:39:2f:1c:ce:82:a6:97:73:
be:51:ab:b5:8f:35:b3:cb:5a:b0:80:c0:62:86:bf:16:7e:2f:
9e:64:e6:67:37:c1:c0:fb:69:db:15:49:4f:93:06:9c:16:18:
76:64:3f:72:33:3e:ae:b6:0b:10:58:f5:57:c3:f3:5d:97:83:
eb:1c:ba:52:d5:6a:2b:ba:c1:3b:5a:db:27:bf:19:98:6d:b6:
68:4a:48:15:e5:9d:32:b0:5a:4c:49:b5:08:09:06:5c:6f:0f:
1f:ac:fe:29:92:36:11:e9:55:cc:0e:05:44:91:7c:0d:8c:f2:
6a:82:2c:b4:cc:48:2d:86:e1:bf:a8:06:19:52:eb:67:fc:ce:
d3:8f:56:38:fc:23:b3:e6:1f:13:0f:60:17:97:73:4a:d6:1a:
4e:f3:67:a7:df:50:b3:28:a6:2d:9a:5d:b3:f1:ec:9a:77:ae:
ce:00:1f:40:dc:e6:15:88:8c:52:5e:1e:00:a7:33:ba:80:40:
89:da:5f:68:28:d8:5d:a9:7b:63:97:d6:e1:e5:07:6e:b5:ad:
d7:90:a6:5e:aa:65:80:2c:9d:02:19:32:79:04:79:96:d5:3d:
bf:a6:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:53:53 2026 by rpki-client