This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/z-6izIL2te2yW3BZT-W-LC6HIiI.roa
File: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (raw, json)
Hash identifier: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=
Subject key identifier: CF:EE:A2:CC:82:F6:B5:ED:B2:5B:70:59:4F:E5:BE:2C:2E:87:22:22
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019B7F8414C90BF63ADB9AE187E64DE88712
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/z-6izIL2te2yW3BZT-W-LC6HIiI.roa
Signing time: Fri 02 Jan 2026 16:22:01 +0000
ROA not before: Fri 02 Jan 2026 16:22:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50371
IP address blocks: 37.32.74.0/24 maxlen: 24
185.129.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:14:c9:0b:f6:3a:db:9a:e1:87:e6:4d:e8:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 16:22:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfeea2cc82f6b5edb25b70594fe5be2c2e872222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:4b:82:8f:46:51:95:94:41:78:95:59:ed:
f8:18:a9:fe:55:ee:df:42:40:00:7e:9f:1d:90:d1:
f6:ef:00:7e:df:41:ec:54:49:9a:2a:5e:37:b0:7a:
79:ce:e8:11:1c:11:fe:1a:3f:5e:9f:3d:b3:3a:ce:
3b:72:a0:5b:f6:25:eb:2e:b1:73:f2:6e:63:1d:f0:
dd:90:58:2c:8a:8b:cd:28:57:0b:bf:2a:72:84:11:
b7:1f:4e:dd:03:8e:31:66:c6:24:67:eb:92:04:9d:
c1:ed:21:cf:9d:be:73:fd:46:dd:c6:e9:1c:b0:c4:
ab:ce:43:be:d0:85:91:78:9d:36:0d:dc:1e:18:d8:
4d:10:f2:e9:84:99:62:e0:82:ce:00:de:c4:5b:e2:
e0:87:c1:36:ca:2c:e8:7d:4c:bf:df:a4:86:40:d5:
f6:90:86:85:7b:52:4c:3c:39:3c:e4:6c:f1:98:be:
9d:39:9a:2e:89:f7:29:2b:90:5c:36:7f:a1:13:50:
3e:69:ce:9f:e0:53:a1:59:40:4a:b3:a9:51:4e:cb:
eb:95:c2:6b:2b:4c:9f:fe:d8:0f:a7:7a:6c:c5:bc:
9e:29:f7:d3:b3:8c:42:5f:7c:4d:f3:a3:04:f4:9c:
84:dc:32:66:f9:e4:dd:2a:5f:ea:18:9c:9c:b9:4b:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:A2:CC:82:F6:B5:ED:B2:5B:70:59:4F:E5:BE:2C:2E:87:22:22
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/z-6izIL2te2yW3BZT-W-LC6HIiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.74.0/24
185.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:32:58:ab:27:99:c5:d4:06:9c:0d:4d:96:ca:84:ad:79:85:
63:8d:e5:0c:1e:57:35:b7:69:9d:8c:22:63:0a:0e:b0:79:e9:
f5:f0:c3:94:2c:22:cb:82:9f:7e:d8:b8:58:32:95:de:46:2f:
5a:21:61:ab:03:53:f9:9a:6d:ee:92:c8:01:7e:0f:29:0d:73:
5b:0a:aa:e0:f8:83:b0:07:1c:d2:ee:0a:b4:b6:c9:e4:01:0d:
ec:d5:b4:b6:c3:3e:30:5d:ed:7f:b9:b5:37:57:7b:d5:83:7f:
3d:0e:cd:40:6a:0b:c2:1d:5b:3e:79:0b:3f:44:29:8a:ab:b0:
4f:95:ab:3f:aa:3a:3d:df:4b:ab:e1:e1:fa:ae:42:18:4c:09:
f0:42:9e:22:df:05:d1:01:d0:c5:7c:7e:4e:27:37:a2:db:86:
c2:b6:96:4c:cb:53:55:58:fa:0b:38:d8:41:ac:42:0b:bf:4a:
fe:37:67:94:89:8f:c4:4d:fe:2d:8f:26:ce:d7:43:f3:be:a4:
54:c0:49:5b:df:0c:70:24:63:bb:fa:e1:35:09:56:95:95:42:
39:d8:79:2e:ae:0c:91:60:ad:f1:bc:00:89:a4:01:a7:df:9d:
14:4f:f0:24:52:9e:1b:5e:1a:73:0a:91:00:85:ca:73:bd:7b:
3f:90:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:25:18 2026 by rpki-client