This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/1-w6BP38irc8ikwIFmua621R4fsA.roa
File: 1-w6BP38irc8ikwIFmua621R4fsA.roa (raw, json)
Hash identifier: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=
Subject key identifier: FB:0E:81:3F:7F:22:AD:CF:22:93:02:05:9A:E6:BA:DB:54:78:7E:C0
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 019B7C7FD1767E82239A1F2AFAE4FD4F0C68
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/1-w6BP38irc8ikwIFmua621R4fsA.roa
Signing time: Fri 02 Jan 2026 02:18:30 +0000
ROA not before: Fri 02 Jan 2026 02:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210008
IP address blocks: 94.136.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:d1:76:7e:82:23:9a:1f:2a:fa:e4:fd:4f:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Jan 2 02:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb0e813f7f22adcf229302059ae6badb54787ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:d5:61:b4:14:ad:f8:36:ec:5d:43:4d:ed:
ff:72:fd:4e:9d:4c:93:50:ac:2d:dc:2d:4d:93:18:
fb:63:3a:82:9d:85:89:ae:e7:81:d7:6d:2e:e3:ad:
7c:49:4b:27:57:b5:d7:6d:e2:1f:12:ea:94:65:90:
91:d1:2e:84:04:b3:27:35:91:e8:c3:f8:37:8a:cb:
49:9e:de:80:5c:37:73:d1:bb:c6:9e:58:ba:48:fc:
8b:0e:83:0e:7d:05:f8:2f:80:2a:9b:03:27:e4:f7:
57:a3:bd:5b:79:ad:aa:64:b2:43:73:ab:df:ca:a8:
c9:96:40:f8:0a:2d:ef:49:93:e4:b0:9c:34:dc:fc:
8e:fe:83:b9:20:d8:de:05:21:98:f4:ba:64:3c:12:
5a:5d:89:5f:5b:50:ff:26:f0:39:d9:27:c3:dd:9e:
56:19:c8:28:d5:1b:44:04:97:65:cc:26:18:3f:02:
f5:f6:6e:5e:7f:7c:61:0e:a7:6f:c0:e0:cd:8c:bf:
1f:85:73:d5:04:73:47:58:7a:e2:38:18:e9:c2:76:
96:ac:33:98:7e:46:7a:1d:02:e0:ce:34:75:bf:91:
87:34:90:bc:17:0b:e5:45:41:01:42:71:e4:e1:ba:
2b:ac:64:47:44:d9:b1:55:40:3b:d4:f6:f9:0d:aa:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:81:3F:7F:22:AD:CF:22:93:02:05:9A:E6:BA:DB:54:78:7E:C0
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/1-w6BP38irc8ikwIFmua621R4fsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.236.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:33:c6:12:69:0e:8d:0d:ec:34:97:93:20:60:60:75:c6:c1:
18:5e:db:45:52:99:01:a3:90:b5:19:0e:7a:9c:4d:6a:c6:99:
2e:44:e0:d9:e4:e6:f2:a9:04:a1:9d:29:d7:f7:e7:c8:b4:79:
ea:0e:17:e6:d6:df:5e:36:a6:cb:2f:a0:14:24:da:45:4e:9b:
77:a0:17:44:37:21:6f:24:3a:bb:a4:f8:7a:32:4a:cb:e4:a7:
97:7c:6c:99:6a:a8:59:31:da:7b:2b:9b:cc:c3:02:1d:7e:c3:
95:c7:35:2c:50:71:59:dc:6c:79:2b:f3:6c:ee:d2:ee:9d:d1:
69:50:b7:cb:97:77:9a:76:6b:d1:91:d8:08:ae:f8:53:94:4d:
06:16:ac:00:11:9d:bd:6a:cd:03:a9:05:21:2f:c2:9c:af:14:
0b:72:2b:7f:b1:b9:94:21:11:9b:df:b2:13:46:6c:bd:3e:19:
2e:f7:9c:ff:ed:d3:18:d3:16:1d:1b:fe:29:4a:37:95:cc:79:
f7:f7:2f:9a:4e:9a:ef:cd:52:97:37:56:2c:12:44:48:84:d9:
fa:42:07:7c:5c:17:5a:0f:5c:cf:8c:43:82:7d:4d:a8:68:cb:
ae:c8:97:dc:58:ac:e1:c5:d7:76:ab:34:c1:d6:1a:d2:0f:d9:
ec:6c:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:54 2026 by rpki-client