This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/6y0QRmdd9vlcIIW6C7nugFvCC0A.roa
File: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (raw, json)
Hash identifier: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=
Subject key identifier: EB:2D:10:46:67:5D:F6:F9:5C:20:85:BA:0B:B9:EE:80:5B:C2:0B:40
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019B77596F19F4A7761C16D9A88661883B5B
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/6y0QRmdd9vlcIIW6C7nugFvCC0A.roa
Signing time: Thu 01 Jan 2026 02:18:28 +0000
ROA not before: Thu 01 Jan 2026 02:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 140.77.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:6f:19:f4:a7:76:1c:16:d9:a8:86:61:88:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Jan 1 02:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb2d1046675df6f95c2085ba0bb9ee805bc20b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:60:e3:76:7d:f3:e1:68:a4:f2:7b:ea:dd:
55:32:a3:e6:38:f2:4a:fc:8b:45:9c:33:20:1e:49:
45:d3:ca:04:82:d9:b8:ec:db:6d:62:cb:54:44:88:
bb:d2:ca:09:b6:2b:9f:5f:c9:cd:14:d0:41:7a:a0:
4c:93:84:ea:0a:cd:57:4e:7f:aa:c1:95:70:72:b1:
04:a5:f2:df:36:2f:3f:a1:e3:a0:f1:07:b0:60:93:
4a:67:4b:a3:36:df:c8:dd:39:22:59:c7:49:d7:ae:
75:19:2f:d6:5f:98:57:5d:c1:23:31:8e:12:78:85:
4d:d2:0f:0e:77:ec:62:b7:77:38:53:53:14:b7:ce:
83:75:e6:51:86:5d:f8:c4:d6:dd:16:20:fb:c2:af:
bd:27:48:1f:6c:a5:93:a1:43:46:f6:4f:cc:97:28:
e1:83:1c:96:0d:79:bc:4b:7f:95:86:a1:f4:30:ea:
da:c6:b5:dd:0e:c5:a3:23:3a:33:49:ab:d9:9e:5d:
53:be:d6:12:e2:81:96:da:77:83:48:ad:06:5a:10:
57:ee:2d:6a:52:42:e6:f2:f1:37:50:25:ca:e3:54:
54:07:a5:b2:9c:23:ff:81:cb:98:d5:22:b1:73:e3:
cf:b0:93:56:f2:25:7b:df:56:22:ee:e1:50:4c:18:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2D:10:46:67:5D:F6:F9:5C:20:85:BA:0B:B9:EE:80:5B:C2:0B:40
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/6y0QRmdd9vlcIIW6C7nugFvCC0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:6d:e7:0c:ef:91:e8:f1:4f:57:15:3d:34:8f:8b:1a:be:39:
fe:bb:40:91:6d:58:30:f0:98:94:6e:0a:b0:cc:f8:98:92:9d:
a0:72:5b:dd:18:c3:04:72:d4:f9:f0:f2:5e:b0:cc:cf:17:ca:
0d:a4:e3:10:15:20:aa:ad:e8:b6:f0:2f:8f:9c:6e:b0:48:fc:
19:87:f1:81:f8:c8:92:8e:74:a4:cb:50:0b:47:16:ec:5e:64:
84:63:21:e6:03:da:01:ab:e9:1a:9e:a1:63:36:9a:4d:44:50:
50:29:47:64:8c:fb:0e:68:12:66:ee:3d:6b:e1:94:46:c3:36:
83:5b:a2:0c:ab:b6:6c:7c:ac:3f:91:7c:93:7a:bd:2c:5f:d9:
de:05:71:20:d0:82:25:85:b8:c3:49:dc:a9:14:51:d8:4a:e0:
27:0b:24:32:ed:08:78:04:a8:cd:42:e2:17:72:e0:3c:ea:74:
7a:ea:48:5c:96:39:ee:00:b9:d8:ee:96:e0:f4:df:ee:e2:d7:
6d:55:61:b6:ea:b8:5a:9a:11:b0:46:30:d7:da:10:9e:c5:64:
b0:1f:6d:90:e2:0c:87:00:f7:8f:21:db:5d:c7:e9:93:37:97:
fa:a5:09:c4:3c:a7:c9:e8:d0:2f:19:76:5f:8d:7b:ab:44:9a:
a9:70:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:10 2026 by rpki-client