This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6ay0wHDiAgZDJPmL-UcgJsFPARM.roa
File: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (raw, json)
Hash identifier: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=
Subject key identifier: E9:AC:B4:C0:70:E2:02:06:43:24:F9:8B:F9:47:20:26:C1:4F:01:13
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019B76EB825C0D30901A9CA2C09F31E007DC
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6ay0wHDiAgZDJPmL-UcgJsFPARM.roa
Signing time: Thu 01 Jan 2026 00:18:24 +0000
ROA not before: Thu 01 Jan 2026 00:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49223
IP address blocks: 92.119.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:82:5c:0d:30:90:1a:9c:a2:c0:9f:31:e0:07:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jan 1 00:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9acb4c070e202064324f98bf9472026c14f0113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:fb:e5:91:25:c0:db:9c:f6:9f:07:84:f1:
f7:e3:e4:b3:60:c7:80:6d:a2:76:0c:b7:c7:b6:71:
2c:14:c4:98:17:a8:31:8b:e5:7e:ad:c1:77:ce:b0:
9b:5f:3f:5f:11:ed:2c:9d:50:d6:c3:53:2b:4a:bf:
f5:a8:2e:ca:30:1b:9d:af:b5:67:26:eb:9d:fc:6f:
5d:26:a8:5c:cd:3e:92:b0:09:ba:b0:61:d0:c1:ba:
be:f4:00:42:84:15:52:c8:3f:32:4b:23:61:23:23:
c8:04:6e:70:45:61:f1:85:9b:27:0c:e8:35:fe:da:
cd:76:da:94:d8:12:d8:76:be:9a:8c:b6:d2:17:fb:
f8:24:72:1a:4c:a6:63:f5:7b:12:83:05:fa:5f:df:
51:2d:fe:51:14:e0:82:d4:f7:e5:7f:5f:20:cc:a3:
01:1c:8d:38:1c:8f:35:4a:21:cd:e5:89:20:19:9f:
9e:59:b3:57:f3:ab:dd:0e:16:12:33:9a:39:6d:6d:
22:f6:54:29:d2:73:03:24:83:b5:5a:bf:eb:0f:96:
68:7e:4b:a6:4e:05:de:b5:b3:82:54:f6:a2:12:32:
a3:3e:09:7b:0d:29:bd:18:10:23:29:e1:a0:44:e0:
f7:ee:b1:1e:59:17:d7:a0:a5:64:a5:35:fc:2b:cb:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:B4:C0:70:E2:02:06:43:24:F9:8B:F9:47:20:26:C1:4F:01:13
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6ay0wHDiAgZDJPmL-UcgJsFPARM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.240.0/22
Signature Algorithm: sha256WithRSAEncryption
81:b7:46:b4:9f:4a:7e:7c:7a:35:da:fa:cd:b9:ec:39:5e:0c:
3c:2d:46:db:cf:53:23:ed:13:86:54:fc:5a:ab:49:71:c4:c8:
a2:3d:cf:57:9c:23:e8:89:36:63:da:b6:b1:72:c6:75:4f:2f:
3b:7f:91:0f:7c:7d:14:8c:14:d8:6e:7c:03:30:c2:f1:83:fe:
ff:32:e3:6b:eb:c3:ad:86:e5:bb:74:a4:82:dd:b2:95:18:7b:
6d:3d:63:b9:f5:f6:a5:5d:12:11:fb:b7:cd:b0:7e:5a:f5:e4:
a6:70:76:38:fd:d1:e2:8a:6f:a8:fa:bb:46:e3:67:50:07:a2:
09:d9:2e:82:2f:4d:ec:f8:fc:7f:f6:0d:15:56:d9:1b:b0:b1:
42:45:89:2c:c9:d0:8c:af:d4:d7:be:7b:d3:c2:18:b4:94:61:
d6:fb:91:64:f3:d3:3c:26:4c:68:b6:3d:97:57:7d:42:9f:8f:
ee:fb:86:8f:b2:e4:8a:24:9b:30:09:9f:67:19:e6:00:f0:d9:
47:a2:50:c1:0e:f7:f4:b3:88:8d:4d:2e:01:5c:18:12:86:65:
d3:6f:6c:af:54:cf:c3:c3:05:c9:f1:35:28:27:78:66:b9:b5:
9b:4a:de:b6:75:bb:72:61:b4:51:27:de:60:40:e5:b9:e3:6d:
fc:84:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:05 2026 by rpki-client