This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tWR6de_y3YqQITSsFwOUQ9hgoS8.roa
File: tWR6de_y3YqQITSsFwOUQ9hgoS8.roa (raw, json)
Hash identifier: A85iHNufZIkn4yOU2pLKW3cxxsXEb4XDO37mWDui/7U=
Subject key identifier: B5:64:7A:75:EF:F2:DD:8A:90:21:34:AC:17:03:94:43:D8:60:A1:2F
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019B7C80353480E12B9588E089D34D6799FF
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tWR6de_y3YqQITSsFwOUQ9hgoS8.roa
Signing time: Fri 02 Jan 2026 02:18:55 +0000
ROA not before: Fri 02 Jan 2026 02:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 95.155.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:35:34:80:e1:2b:95:88:e0:89:d3:4d:67:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jan 2 02:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5647a75eff2dd8a902134ac17039443d860a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:9b:9d:f2:12:a0:21:2c:34:e0:ea:dc:ff:
35:61:d0:8d:1b:f5:00:a5:93:38:ad:7d:a5:a3:26:
a5:10:5f:91:23:90:73:1f:b4:b2:4d:95:48:2d:c6:
f3:55:1c:b1:36:22:22:e6:a8:25:03:e3:77:40:6b:
95:80:13:21:90:a2:88:c9:90:42:fd:ae:5a:89:58:
73:df:f3:fe:87:3c:5e:00:4a:93:ab:9d:73:d1:a8:
63:6f:c5:12:76:3b:51:83:fa:65:e3:07:15:cb:bc:
73:c7:d9:1d:9e:82:e5:5b:84:20:64:c4:da:25:1f:
14:f0:ec:57:1b:8b:53:3c:df:ba:0c:47:13:ed:34:
7f:9b:57:02:38:bf:59:06:40:ca:18:3e:5b:bf:ab:
99:96:4a:8a:40:20:4f:4c:b9:90:0d:f4:e7:11:46:
d4:db:3e:04:c0:0e:dc:8d:20:47:3f:02:2b:e5:c8:
9c:31:a6:85:80:1e:c1:b6:b9:7b:d3:e0:21:26:f1:
98:03:2b:52:16:71:78:f0:ae:2d:da:94:d2:7a:56:
e2:ac:dc:cb:c1:50:bf:79:25:a2:62:86:95:99:7b:
1e:ea:18:27:07:7e:4b:48:9e:7a:ff:2e:48:a3:67:
91:78:a7:c0:00:c3:58:5e:e9:de:70:b9:1d:db:1a:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:7A:75:EF:F2:DD:8A:90:21:34:AC:17:03:94:43:D8:60:A1:2F
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tWR6de_y3YqQITSsFwOUQ9hgoS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.156.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d8:e1:74:c4:95:a4:e6:6f:9f:59:dc:65:5e:b5:40:03:dd:
4d:19:b2:1e:7a:00:55:0d:5e:a9:24:f3:37:90:2b:57:60:35:
3b:3e:73:d9:20:45:79:71:3c:18:a8:98:78:c8:ae:d6:69:fe:
bc:81:6e:c2:cb:4d:ec:39:0a:f6:a9:c6:63:89:f5:41:07:23:
34:03:f5:eb:f3:0b:ba:39:8d:06:9d:9f:34:dd:c9:2c:19:b1:
ed:49:8d:82:74:52:b6:a8:2c:46:9c:d8:d3:ef:3d:eb:66:a8:
01:df:aa:72:71:43:55:ff:79:87:a8:70:d2:ea:91:c5:98:ee:
83:99:0f:fe:69:3f:bc:49:92:17:d9:9f:f0:fa:0f:5e:06:45:
ca:b5:01:c2:10:4f:4e:3c:6d:fb:08:ae:6a:36:b9:5d:ad:bc:
03:c4:2b:a7:54:7f:47:ac:46:a4:87:7d:33:d5:9f:1c:92:28:
de:4b:23:d6:7c:ca:ec:c5:cf:fe:b6:68:63:a2:2d:46:93:a5:
e0:0f:fc:f2:dd:3a:64:ed:65:0e:a4:0d:7a:56:4d:fc:63:42:
23:a3:80:65:9f:b7:77:46:bd:f5:5f:93:fa:a6:58:44:a1:83:
98:ce:0a:64:bd:f8:b3:47:ff:87:03:00:42:7b:a6:c5:3a:aa:
7c:53:d5:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gDU0gOErlYjgidNNZ5n/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTY0N2E3NWVmZjJkZDhhOTAyMTM0YWMxNzAzOTQ0M2Q4NjBhMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKWbnfISoCEsNODq3P81YdCNG/UA
pZM4rX2loyalEF+RI5BzH7SyTZVILcbzVRyxNiIi5qglA+N3QGuVgBMhkKKIyZBC
/a5aiVhz3/P+hzxeAEqTq51z0ahjb8USdjtRg/pl4wcVy7xzx9kdnoLlW4QgZMTa
JR8U8OxXG4tTPN+6DEcT7TR/m1cCOL9ZBkDKGD5bv6uZlkqKQCBPTLmQDfTnEUbU
2z4EwA7cjSBHPwIr5cicMaaFgB7Btrl70+AhJvGYAytSFnF48K4t2pTSelbirNzL
wVC/eSWiYoaVmXse6hgnB35LSJ56/y5Io2eReKfAAMNYXunecLkd2xoIkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVkenXv8t2KkCE0rBcDlEPYYKEvMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvdFdSNmRlX3kzWXFRSVRTc0Z3T1VROWhnb1M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5ucMA0G
CSqGSIb3DQEBCwUAA4IBAQCW2OF0xJWk5m+fWdxlXrVAA91NGbIeegBVDV6pJPM3
kCtXYDU7PnPZIEV5cTwYqJh4yK7Waf68gW7Cy03sOQr2qcZjifVBByM0A/Xr8wu6
OY0GnZ803cksGbHtSY2CdFK2qCxGnNjT7z3rZqgB36pycUNV/3mHqHDS6pHFmO6D
mQ/+aT+8SZIX2Z/w+g9eBkXKtQHCEE9OPG37CK5qNrldrbwDxCunVH9HrEakh30z
1Z8ckijeSyPWfMrsxc/+tmhjoi1Gk6XgD/zy3Tpk7WUOpA16Vk38Y0Ijo4Bln7d3
Rr31X5P6plhEoYOYzgpkvfizR/+HAwBCe6bFOqp8U9Xx
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:06:05 2026 by rpki-client