This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/15yCVEUMlA6Ddrr6JEjDwvBMz80.roa
File: 15yCVEUMlA6Ddrr6JEjDwvBMz80.roa (raw, json)
Hash identifier: sKTLJ+h5zKOVXBiT37fYz0srLqY2xyrqs+bNhWwdVuc=
Subject key identifier: D7:9C:82:54:45:0C:94:0E:83:76:BA:FA:24:48:C3:C2:F0:4C:CF:CD
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 019B77C709892E7C5C6CDD2CC8612E19F2E5
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/15yCVEUMlA6Ddrr6JEjDwvBMz80.roa
Signing time: Thu 01 Jan 2026 04:18:11 +0000
ROA not before: Thu 01 Jan 2026 04:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 212.57.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:09:89:2e:7c:5c:6c:dd:2c:c8:61:2e:19:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Jan 1 04:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d79c8254450c940e8376bafa2448c3c2f04ccfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:a4:d5:6b:74:c8:f3:fe:19:d5:c9:86:a1:
ab:5c:4f:37:99:90:bc:86:e6:87:de:c3:4d:89:fb:
9b:b3:23:b6:f2:00:6d:b2:a1:c1:b4:99:f8:ff:3a:
43:0b:82:91:47:00:22:09:3b:9a:9a:ff:9f:5d:b0:
ef:56:c4:3e:d8:cb:d8:29:5d:60:c3:a2:13:73:dd:
e2:63:0a:47:5a:1e:a4:27:34:5e:fa:4d:d8:86:14:
bc:25:1f:1d:15:29:00:03:67:26:64:9c:ec:22:15:
68:4a:bf:d8:8b:2c:4f:7f:02:32:7a:3e:87:73:f2:
8e:a7:f3:27:83:64:21:25:f5:18:e5:7e:be:42:74:
c8:78:54:01:78:ac:95:a7:c8:f1:28:d0:37:25:4d:
5e:df:da:84:73:52:06:5f:19:7c:ae:2b:d3:05:89:
99:66:7d:ca:b1:2d:b2:40:c1:50:3a:11:1b:5b:6b:
e1:03:dd:4e:04:12:e8:4b:bd:e8:8c:f1:4c:a7:52:
6c:c9:af:91:58:83:03:d1:75:23:0c:a0:53:fb:2c:
40:76:24:33:6f:59:ff:3d:0d:77:b2:d5:f5:dd:a2:
10:53:ca:cc:f7:fc:88:13:d9:cd:7f:9e:6b:5b:33:
b8:82:3c:07:68:af:18:7c:5d:29:50:5d:d7:b0:0c:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:82:54:45:0C:94:0E:83:76:BA:FA:24:48:C3:C2:F0:4C:CF:CD
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/15yCVEUMlA6Ddrr6JEjDwvBMz80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
65:80:94:b1:b2:f7:c6:83:9c:18:7a:9f:7b:eb:20:93:25:29:
2b:2b:a6:9f:cd:f0:02:35:e1:2e:f5:9c:36:22:e9:f5:41:b2:
6f:59:6f:38:cd:8b:67:32:2d:43:fd:a6:c0:68:81:ff:23:4c:
c2:72:04:46:16:ff:45:f5:47:5f:d8:3d:6f:f8:88:7f:77:57:
a8:f9:9c:19:8a:ca:61:6d:ab:78:f9:2a:2d:96:23:59:2f:0f:
48:7a:b7:83:ab:39:bd:32:97:4f:09:59:e1:0b:83:ce:26:a9:
60:27:90:ac:f5:8b:03:96:d6:36:2a:23:ed:e4:22:94:f4:6f:
6d:fb:72:af:e7:a1:9b:fa:43:a3:04:ba:f5:c4:56:58:af:63:
4b:19:0e:44:19:be:8f:20:6e:9a:ce:2e:19:a0:f3:b8:39:0b:
c2:38:0b:be:06:34:4c:a9:58:e2:fa:50:5d:ab:34:bf:10:3d:
dd:20:50:0c:fa:e1:00:4b:66:7c:18:23:41:4a:b5:65:b4:f2:
d4:51:17:1f:b5:35:2c:63:f3:d1:c7:fb:45:d0:f3:96:16:ec:
7c:75:8c:0f:ab:49:06:df:d6:bc:28:15:9e:6b:50:19:5d:3b:
72:1a:1a:d3:5b:dd:2b:66:c4:28:9c:18:11:41:79:21:80:b7:
42:47:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:07:44 2026 by rpki-client