This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa
File: 6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa (raw, json)
Hash identifier: iKR3kfIAFn2a0LPW4iVTJ4KFinuojhMkZ15qw0uG8us=
Subject key identifier: EB:F0:A7:71:EF:49:BD:93:57:D1:6A:34:3D:1F:2E:3D:9C:41:D8:56
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019B7F1446B0643928D3E575AE8A228A920F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa
Signing time: Fri 02 Jan 2026 14:19:53 +0000
ROA not before: Fri 02 Jan 2026 14:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41925
IP address blocks: 147.45.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:46:b0:64:39:28:d3:e5:75:ae:8a:22:8a:92:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 14:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebf0a771ef49bd9357d16a343d1f2e3d9c41d856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:33:c8:9c:a4:7b:12:96:4c:8c:4c:6b:0d:
25:45:33:9e:6b:af:ec:9b:36:37:44:76:14:92:6a:
75:e9:5c:eb:c0:59:c6:21:df:65:af:dd:23:4e:dd:
3e:21:b6:a9:22:38:df:28:62:4b:e9:15:fc:ed:24:
bc:97:c6:96:54:62:ab:96:cd:b3:da:5d:62:c0:18:
a8:4d:de:84:db:6e:99:0e:e4:4a:c5:d2:7a:5f:0f:
e3:8d:e7:b2:19:f1:11:c0:80:dc:7c:d4:26:b2:d3:
f3:ac:98:a4:49:4b:8f:8e:ba:60:88:f5:09:b5:b2:
ef:1a:bc:9e:92:fb:1a:3a:c6:95:48:91:52:fc:8e:
eb:8a:18:71:9e:1c:2e:7a:d7:e5:6a:bb:75:3f:86:
be:7b:75:63:0c:27:b6:25:08:0e:0a:81:1f:90:db:
c0:a2:33:e3:25:30:a1:0e:59:c2:e6:03:71:d0:4b:
54:fc:8c:08:cd:db:4b:b2:47:ba:98:3a:ff:be:8f:
5a:ae:af:32:10:f3:38:62:c6:ba:84:e9:43:1b:d7:
37:be:ed:1a:31:6f:75:a2:38:ae:10:8b:32:e9:a4:
77:b7:4a:17:89:31:f4:05:91:7b:77:93:0e:a6:8b:
37:03:20:84:ff:ec:6a:71:39:94:33:56:dd:d4:39:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:A7:71:EF:49:BD:93:57:D1:6A:34:3D:1F:2E:3D:9C:41:D8:56
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.113.0/24
Signature Algorithm: sha256WithRSAEncryption
63:87:dc:93:91:96:37:b7:c8:7f:f2:7d:5d:b4:5e:c1:45:82:
a2:65:2c:97:1c:33:46:15:22:f0:7f:50:af:7f:05:8c:0d:a7:
0f:a9:f6:ed:a8:06:c8:61:4a:dc:83:90:4f:1c:07:9f:8c:2d:
5f:0a:4d:d6:33:a8:b1:0f:60:d0:8a:68:da:ee:da:ae:c3:ca:
10:90:21:f5:f2:2a:28:d6:68:84:eb:14:74:75:df:52:eb:c4:
3e:a8:84:4f:9c:c5:26:2f:0a:02:25:93:52:7f:60:6c:d3:81:
f7:0f:d6:60:b6:f1:60:29:0e:0f:58:64:c8:3d:08:0b:ea:6e:
8e:3d:64:30:01:67:51:28:a4:63:e1:dd:62:ec:e5:78:46:2d:
d0:f2:b8:3d:8c:a9:bf:92:61:98:35:d1:85:14:c0:25:13:05:
59:c1:25:95:fb:1e:48:c5:5d:20:d8:99:d4:35:53:3b:bf:74:
ef:31:ae:13:0b:25:34:f5:1c:ae:60:60:56:3d:e7:c4:a8:04:
57:ee:86:87:97:5d:5a:89:6f:41:9e:09:6c:a3:5f:94:a6:b2:
f3:0c:8e:63:fb:08:16:e7:a1:f8:94:9a:88:c0:55:54:4b:ef:
0e:6e:c1:ea:dc:fb:19:e0:25:3e:75:2f:2a:73:d2:dc:c1:07:
f1:d9:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 11:09:50 2026 by rpki-client