This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa
File: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (raw, json)
Hash identifier: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=
Subject key identifier: E9:7E:09:93:AA:A8:EF:91:10:63:90:2A:67:B2:F2:68:C9:8F:3A:3E
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 019B7F80F7A449ED199CDEFD5AFBD9F3B863
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa
Signing time: Fri 02 Jan 2026 16:18:36 +0000
ROA not before: Fri 02 Jan 2026 16:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49234
IP address blocks: 193.24.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:f7:a4:49:ed:19:9c:de:fd:5a:fb:d9:f3:b8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Jan 2 16:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e97e0993aaa8ef911063902a67b2f268c98f3a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:df:16:9e:97:93:c5:46:7c:57:ca:94:7c:
c8:6c:79:c0:2a:d1:38:f7:b1:a7:47:f4:6a:f4:9e:
cf:f6:12:5b:98:75:1e:9b:ea:e7:6d:7f:31:cf:19:
d8:af:03:7d:ad:32:58:81:eb:87:87:ad:93:7b:15:
5c:13:13:68:66:58:99:fc:1d:53:58:2a:c0:78:4c:
e8:a9:5f:55:c6:dd:f7:81:2e:3a:89:7f:89:b5:25:
78:e4:80:a7:77:d5:b5:5f:1e:a1:73:25:7b:3a:86:
6f:0f:f4:0d:88:1f:e0:f3:3a:b7:58:17:7e:5e:ec:
c9:86:0e:a1:45:48:03:c8:6a:75:53:e1:32:a0:ec:
00:da:b5:c0:bc:fd:5e:93:3e:69:7a:a9:70:e9:2f:
48:c3:80:68:17:23:4b:41:ef:dc:e4:63:91:31:37:
0b:c9:f3:62:f2:ad:99:3e:02:db:c7:28:c4:4d:e0:
a7:b2:7d:ca:08:b7:3a:04:ce:f5:3f:6b:56:06:fb:
0c:5b:ec:61:ad:81:35:d1:7a:bd:1c:43:d3:be:04:
c6:d1:ac:60:2e:f6:13:0e:4a:44:90:88:e8:88:fe:
c5:db:80:65:61:a2:32:1b:10:03:9b:81:5b:ac:5c:
45:bd:a7:a6:01:51:83:65:84:55:b1:77:d2:e0:a0:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7E:09:93:AA:A8:EF:91:10:63:90:2A:67:B2:F2:68:C9:8F:3A:3E
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.128.0/18
Signature Algorithm: sha256WithRSAEncryption
93:be:a8:f5:48:91:76:b5:c3:19:52:ce:4d:5e:27:b7:da:8b:
04:fc:2c:7f:81:c6:98:2d:8f:12:a8:13:19:7d:06:fb:01:2e:
e9:3d:55:5f:63:91:6f:63:09:c1:ec:9a:55:68:42:64:43:65:
f6:4c:5b:1c:d0:93:64:5f:ce:ce:c8:cd:d2:26:99:38:38:55:
af:a8:df:0f:da:29:58:6c:ff:09:07:73:4f:6a:74:42:e7:b6:
3f:02:42:c8:ca:bd:23:7a:4c:f9:c3:8d:66:5e:21:b3:94:4c:
9d:b5:96:25:7a:12:2d:38:e8:f5:6c:e0:bf:34:a5:e0:01:fa:
0f:3b:bc:0e:04:fa:86:76:f1:08:77:09:a3:f2:47:bc:d1:15:
48:0f:2c:ca:87:14:50:cb:ce:2f:b7:ee:fb:83:06:0b:df:09:
09:b6:ec:22:67:8f:fd:1a:7d:39:e6:ad:b9:bb:7e:65:a1:54:
07:78:96:82:dc:69:13:ad:f9:30:bf:46:5e:14:29:d4:f5:ea:
58:71:21:70:18:78:57:c9:bd:25:f8:fb:96:cc:a4:51:7b:b1:
6d:21:84:02:06:1f:80:65:b9:b2:a2:69:b8:ac:3c:9c:65:b8:
1a:3e:57:3f:04:4c:b3:39:ed:68:0b:2b:db:ff:a3:7b:c7:29:
19:07:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:12:02 2026 by rpki-client