This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/6QjQA0_fqdIryNhtjxIfR8HzBm8.roa
File: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (raw, json)
Hash identifier: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=
Subject key identifier: E9:08:D0:03:4F:DF:A9:D2:2B:C8:D8:6D:8F:12:1F:47:C1:F3:06:6F
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 019B7B353EE2ECBFCCCCA85E2DA0A2CBCEF7
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/6QjQA0_fqdIryNhtjxIfR8HzBm8.roa
Signing time: Thu 01 Jan 2026 20:17:25 +0000
ROA not before: Thu 01 Jan 2026 20:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272344
IP address blocks: 185.56.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:3e:e2:ec:bf:cc:cc:a8:5e:2d:a0:a2:cb:ce:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Jan 1 20:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e908d0034fdfa9d22bc8d86d8f121f47c1f3066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:85:09:2e:50:d5:7f:7a:bb:6c:01:2f:8e:
a6:d7:f3:43:55:3e:6b:54:62:c1:ac:24:6d:ee:7b:
e4:c3:84:c6:87:8d:71:06:0b:f8:eb:ba:ae:4f:42:
e7:35:70:6d:01:6e:0c:2e:53:c4:f0:df:0b:9d:9f:
84:6d:66:6a:45:c8:ed:16:dd:1c:ba:74:6e:11:b7:
ab:d5:49:7e:1c:7c:79:5e:ae:27:28:df:00:c5:38:
c3:e6:e2:bc:3b:13:53:a7:26:75:f6:cb:4d:ef:01:
47:28:36:4f:46:90:22:78:d9:56:85:bc:5f:57:59:
c4:ee:75:7c:bd:7c:f3:68:c9:b6:62:8f:c3:3d:35:
f1:7a:a7:0d:b6:fc:1b:94:bd:e9:f3:ac:cc:09:03:
1e:46:dc:f3:d2:58:8b:05:9d:d8:cb:91:1d:88:b5:
b6:a2:0d:b5:91:d4:29:cb:76:29:7c:3a:a0:0c:59:
a7:8f:30:31:0e:27:0a:0a:5c:9f:9b:15:4f:d5:e9:
7a:77:df:46:4e:57:b6:25:bc:b8:69:88:75:98:e0:
64:dc:ba:a1:8a:78:83:03:ce:85:31:52:37:e2:df:
82:c3:c0:e1:ee:c5:32:f6:4e:13:1c:9e:8f:c7:2b:
a7:69:a9:c7:d6:0d:d9:63:d7:4b:78:f9:d2:07:08:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:D0:03:4F:DF:A9:D2:2B:C8:D8:6D:8F:12:1F:47:C1:F3:06:6F
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/6QjQA0_fqdIryNhtjxIfR8HzBm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.109.0/24
Signature Algorithm: sha256WithRSAEncryption
42:37:1e:fd:d7:bd:f4:11:9c:49:5c:55:ee:f1:08:52:53:1a:
f9:26:3f:fa:e9:cd:a7:f8:a9:a0:26:13:01:57:40:1c:4d:3b:
d6:62:ac:ae:ad:b7:aa:ea:41:42:b8:3d:90:b1:27:c4:59:97:
33:65:57:8e:c6:3f:aa:cb:b8:36:3b:bb:74:2a:43:e0:39:b6:
0d:45:2c:f3:71:b7:cd:60:8e:5a:e6:bc:67:23:b8:47:a6:4a:
5d:3c:01:38:55:be:84:07:8e:e8:e9:2b:d3:ef:17:15:80:e4:
ca:92:ee:d3:7d:8e:0e:24:dd:eb:ce:91:85:d7:d1:d4:c2:f5:
40:fd:9f:60:22:3c:86:35:de:c0:f4:06:57:c4:1a:6e:21:2a:
3c:83:9a:e2:db:fd:ea:c4:fb:84:a1:67:77:05:35:4b:97:96:
6c:65:2f:57:c3:f1:e5:0e:3d:6f:ce:8e:cf:ed:3e:66:1b:f2:
bb:42:1e:09:cf:c3:35:91:36:2e:0e:ba:ac:d8:92:c6:48:0d:
51:5e:ec:03:6e:ae:7f:6c:31:db:5c:e3:1c:01:bf:39:4c:a8:
a0:e6:13:4d:33:b9:d2:eb:b7:52:85:c0:22:aa:57:01:9f:82:
e9:85:89:d3:70:c5:06:22:9f:fb:23:71:bb:ea:6d:15:d1:cc:
37:41:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:39:37 2026 by rpki-client