This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa
File: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (raw, json)
Hash identifier: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=
Subject key identifier: 6F:A4:AB:1E:DE:51:A3:1E:C6:CF:49:85:22:50:A0:38:6C:58:D3:E7
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 019B79ECA2868A75600E5C4071F1B43E6979
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa
Signing time: Thu 01 Jan 2026 14:18:29 +0000
ROA not before: Thu 01 Jan 2026 14:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57712
IP address blocks: 176.106.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:a2:86:8a:75:60:0e:5c:40:71:f1:b4:3e:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Jan 1 14:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fa4ab1ede51a31ec6cf49852250a0386c58d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:9a:84:01:f7:54:91:98:4f:ed:c8:4a:46:
28:14:31:22:6b:32:76:a5:5f:05:b2:a5:b0:f2:9e:
42:c4:0b:7b:1c:c2:0b:21:4c:72:a9:1a:bb:7e:ec:
a6:91:1e:0a:f5:b9:57:31:99:8e:a8:2d:75:f3:6c:
a5:76:d7:b7:fa:d6:5d:a0:ae:43:c1:c7:12:94:56:
b7:b5:59:4a:e0:40:d6:e7:cf:0c:a2:53:eb:2b:44:
93:65:64:73:0c:e7:c5:bd:36:07:b8:99:62:8f:ba:
02:2f:03:f9:21:10:01:43:7d:48:bf:f1:e3:6d:a7:
94:ea:25:ff:77:cf:7d:c5:65:37:3e:04:1a:db:40:
3f:d8:ba:24:12:3c:45:5d:a5:6c:43:af:05:78:e8:
9f:4b:48:23:ec:30:25:13:8c:31:00:d1:f5:9f:52:
c5:50:71:5f:e0:84:3a:99:d8:92:01:dc:e7:12:5d:
81:51:67:5a:4f:1b:fa:0b:16:f7:9c:b4:d0:ef:0b:
87:72:96:99:81:6e:95:24:39:1c:e0:b3:90:24:d7:
99:d9:db:37:db:bd:6b:71:a3:54:8b:b3:42:03:95:
b5:b6:be:12:0a:49:54:4a:49:4d:04:4d:e4:6b:56:
0b:5c:35:af:52:ee:df:9d:fa:da:72:3b:c6:16:ca:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A4:AB:1E:DE:51:A3:1E:C6:CF:49:85:22:50:A0:38:6C:58:D3:E7
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:04:83:15:a0:4b:5a:7b:e5:6b:e5:76:6f:b3:a1:5c:ba:e6:
df:2c:c2:35:a8:94:63:6b:0d:a2:16:99:56:39:fb:69:6e:88:
e8:4b:64:93:10:a7:16:60:e5:72:97:b1:43:99:3e:06:3f:b6:
cb:ec:bb:86:55:e3:42:e2:30:83:45:d8:68:9d:3d:bb:2c:b2:
6a:23:5b:18:ce:3c:ae:cf:ef:90:7e:1b:52:fb:09:39:58:6d:
03:3a:16:dc:cd:ac:ae:08:10:b9:60:96:87:67:4f:64:80:f7:
ca:00:75:8f:e2:0c:88:15:56:b4:2d:99:b4:12:d6:ef:77:92:
b6:d4:75:0f:ca:75:02:a8:f3:66:9a:04:3a:b3:95:a9:0f:df:
7a:fb:13:68:bf:68:6d:21:03:7a:db:d1:f2:09:c1:82:e6:2e:
1f:ce:d3:59:f1:24:bf:c5:e7:d0:e4:1a:9b:89:88:19:2d:de:
5b:08:7d:05:aa:3d:2b:fd:d8:82:b1:3a:a1:77:07:4d:62:6d:
11:72:b0:9a:3e:e4:fc:8f:6d:f6:81:2c:79:37:20:78:4f:97:
b0:19:f2:67:32:e3:65:9d:e9:ce:b6:82:05:0b:17:6b:4d:ba:
a9:99:93:44:7a:b9:3a:ce:17:21:64:11:57:02:58:11:a8:ff:
a2:4f:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:22 2026 by rpki-client