This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/6dxV01X9vg2jPotO5hv9PQEuxwo.roa
File: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (raw, json)
Hash identifier: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=
Subject key identifier: E9:DC:55:D3:55:FD:BE:0D:A3:3E:8B:4E:E6:1B:FD:3D:01:2E:C7:0A
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019B797F2EBCE1AC259430F6C2FA44C4815B
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/6dxV01X9vg2jPotO5hv9PQEuxwo.roa
Signing time: Thu 01 Jan 2026 12:18:56 +0000
ROA not before: Thu 01 Jan 2026 12:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205766
IP address blocks: 185.26.156.0/24 maxlen: 24
2a00:d0c0:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:2e:bc:e1:ac:25:94:30:f6:c2:fa:44:c4:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jan 1 12:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9dc55d355fdbe0da33e8b4ee61bfd3d012ec70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:98:70:12:f4:ab:a4:a8:9f:74:c2:17:a1:9e:
29:1c:91:db:92:5e:3c:9d:bd:64:c1:49:89:3d:7d:
53:e9:74:19:a6:92:10:31:00:48:01:5e:e5:df:cf:
22:49:58:66:30:d2:65:2f:64:06:8c:6a:2d:af:ed:
87:37:7f:7e:78:64:7f:92:86:72:ac:37:7e:19:da:
47:b7:8e:f8:41:28:83:df:08:0c:89:2f:7b:62:f0:
e8:ee:8b:9d:84:c9:be:d6:f7:2c:91:8a:0a:a8:c3:
ca:fc:34:f7:df:66:db:7a:ff:3e:c1:71:bf:1c:ce:
29:0c:63:a1:bc:d3:4f:d6:8c:dd:4b:31:7a:ad:0c:
91:24:50:56:a1:fd:35:04:29:ab:69:eb:3d:4f:7a:
71:1a:89:de:24:59:0c:b9:77:2c:d6:c3:d1:9e:ce:
76:1c:e1:0d:8d:6a:a7:63:96:3c:47:21:e9:c4:b5:
1e:ea:9d:2c:83:e6:2c:b4:27:f4:b7:6a:a0:59:1b:
2b:ab:18:de:91:92:bd:af:3d:ea:a1:09:09:c6:95:
b6:1c:b8:cb:6f:ee:44:07:3a:2c:c0:40:2a:2a:1f:
45:8b:d8:85:f6:53:32:aa:36:b4:19:27:12:9f:3e:
8c:f2:4e:b0:58:f8:cc:f4:2b:a5:e9:98:11:79:38:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:55:D3:55:FD:BE:0D:A3:3E:8B:4E:E6:1B:FD:3D:01:2E:C7:0A
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/6dxV01X9vg2jPotO5hv9PQEuxwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.156.0/24
IPv6:
2a00:d0c0:200::/48
Signature Algorithm: sha256WithRSAEncryption
ad:64:37:4b:71:55:13:1a:9b:7a:92:38:99:a2:75:6b:e7:b8:
d3:fc:eb:bb:d1:75:e6:1e:d2:00:f4:76:65:16:cb:7b:f7:67:
b8:01:02:1b:b4:fb:f1:dd:9f:28:c6:99:ea:fd:7c:48:5b:28:
f8:51:8e:ea:0d:41:4c:ba:1e:f2:f1:12:23:7c:da:de:64:57:
85:e0:8f:14:e0:df:07:95:da:c1:96:90:94:d9:4d:4f:58:7c:
e3:58:97:a8:63:52:4b:8a:c1:3f:f7:af:d4:12:21:48:02:b7:
e5:0e:72:5a:2a:ad:8f:2a:7a:ea:94:db:fe:79:80:01:2c:6b:
4d:39:eb:a7:75:09:71:6a:3e:99:62:e8:18:68:a6:5b:49:64:
d6:2c:ee:90:e0:0e:7d:dd:3a:ec:5c:9a:7f:ee:f0:60:7d:31:
85:78:f9:1f:12:6b:73:cc:80:c1:9a:4d:2a:45:d1:80:b4:06:
02:fb:43:90:17:78:aa:4d:36:97:75:2d:cf:ed:00:7e:d4:9f:
99:da:89:4b:35:af:fd:eb:36:ff:fc:6e:2e:a0:12:11:f7:e4:
e2:a2:fc:17:c9:e5:99:e0:08:72:83:7c:39:2e:85:38:f6:4f:
8b:61:68:b9:51:3e:3f:c4:09:2c:fe:ae:03:06:44:1e:63:fe:
59:bd:65:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:33 2026 by rpki-client