This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6IhV53P-rOJNtGgLv87grIlB8lE.roa
File: 6IhV53P-rOJNtGgLv87grIlB8lE.roa (raw, json)
Hash identifier: 1BaSh+kndU+/2L1VOLRg2mH/yJsPDCy9dsia5dvIb7s=
Subject key identifier: E8:88:55:E7:73:FE:AC:E2:4D:B4:68:0B:BF:CE:E0:AC:89:41:F2:51
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019B7E37C90A766999CD924E44FCEC295DA8
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6IhV53P-rOJNtGgLv87grIlB8lE.roa
Signing time: Fri 02 Jan 2026 10:19:03 +0000
ROA not before: Fri 02 Jan 2026 10:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211389
IP address blocks: 155.2.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:c9:0a:76:69:99:cd:92:4e:44:fc:ec:29:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 2 10:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e88855e773feace24db4680bbfcee0ac8941f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:1f:ce:70:9d:35:b5:a4:02:4b:a3:d2:c2:
ce:65:94:e1:49:10:12:a7:67:62:8e:1b:1b:15:aa:
29:74:5a:05:52:47:d1:b6:b0:35:3e:66:d3:b2:09:
2e:8c:20:b8:78:65:97:e1:46:92:00:15:c8:95:91:
b8:e1:e0:5b:da:b7:dc:d6:97:c4:e7:4b:5f:5d:e6:
66:f5:b0:df:65:ad:ac:73:8c:f4:71:7c:38:a0:2a:
98:23:bd:9c:09:a2:af:a8:d0:45:c2:88:9e:56:51:
44:7b:7b:cd:5c:1d:c8:1b:7f:e4:f3:44:45:1e:96:
a4:8a:1c:92:8a:79:7d:1d:93:8d:9e:0c:6f:1f:77:
71:56:20:8d:13:2c:0d:a9:92:82:41:15:07:71:a2:
1a:ba:ec:f2:2f:51:5f:8c:b2:23:86:c1:12:c9:aa:
2e:2a:3a:cb:f9:e9:14:2d:db:4d:60:cb:c6:1a:8b:
6f:ba:48:3c:64:4c:3e:6e:ed:88:aa:27:42:7e:b9:
38:0e:dd:82:df:10:c9:5f:57:8b:08:e4:75:bc:eb:
b7:b5:3b:ef:1b:74:bf:dd:96:f6:eb:17:6f:d4:55:
6a:57:2e:d3:97:fd:52:00:db:fd:a8:fd:0e:83:bf:
25:34:93:29:e2:59:d7:ac:08:26:92:de:1f:35:d0:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:55:E7:73:FE:AC:E2:4D:B4:68:0B:BF:CE:E0:AC:89:41:F2:51
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6IhV53P-rOJNtGgLv87grIlB8lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.2.210.0/23
Signature Algorithm: sha256WithRSAEncryption
e2:f8:2b:bb:ce:8d:5d:6e:f2:f2:95:22:4a:e6:d3:1a:68:e7:
81:93:e1:ce:7c:8c:df:0b:f2:97:85:52:5a:3a:67:cd:29:78:
bc:41:52:72:57:fd:21:40:29:33:13:d5:b7:0e:92:4f:f8:01:
fc:ae:3f:2c:b6:97:06:04:1d:31:48:89:76:57:59:ea:68:57:
ad:f0:8a:d6:df:4d:bb:ae:57:86:ba:71:63:a3:09:13:9b:67:
d9:53:15:4d:fc:54:a2:f3:16:88:f6:1b:0c:1c:79:99:88:a1:
ff:0f:f9:11:32:ec:99:96:9f:10:6d:5e:5d:09:81:95:34:1e:
0f:7a:20:ef:81:f0:0f:51:4f:cf:59:07:fa:90:e2:69:ea:17:
d6:c6:83:be:4d:4d:21:be:8c:f6:ca:c6:33:2d:6f:82:dd:35:
f9:f5:80:84:30:15:d8:77:db:24:df:5d:08:54:d1:4f:dc:d8:
10:7f:d8:71:8e:0f:98:cc:ce:8e:d2:e0:ee:f4:76:9b:7f:a6:
fc:ca:28:27:81:e2:44:c9:cc:b6:de:8e:6d:54:bc:08:94:20:
9b:e2:68:f1:7d:30:ce:b2:8e:d4:54:ec:7f:10:57:7f:99:25:
95:52:53:90:34:3c:b0:f0:80:4b:1a:d6:f9:19:6e:3f:cc:4e:
d6:7e:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 04:39:22 2026 by rpki-client