This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa
File: F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa (raw, json)
Hash identifier: VvXIzi7dvfLzRfzq8yrSH5FHAFTW+ckA8+wnrvNtY0E=
Subject key identifier: 17:A8:D7:43:BA:25:D5:E2:51:3B:CF:B3:AB:31:86:10:B5:8B:3E:95
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 019B7CED66095A34DD90A631876D07036AA6
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa
Signing time: Fri 02 Jan 2026 04:18:11 +0000
ROA not before: Fri 02 Jan 2026 04:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215839
IP address blocks: 213.134.27.0/24 maxlen: 24
2a14:2c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:66:09:5a:34:dd:90:a6:31:87:6d:07:03:6a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Jan 2 04:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a8d743ba25d5e2513bcfb3ab318610b58b3e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:ae:cb:6b:7c:4a:df:a2:86:ee:3b:bf:2a:
81:1c:62:3c:0f:9c:cd:cd:39:00:49:97:21:a6:05:
e6:22:b5:37:f4:5b:a9:ed:a7:58:33:64:a9:15:67:
88:27:4a:9f:27:f8:f1:90:b1:79:40:8c:9f:c1:7a:
6c:6b:3d:10:1e:8c:a3:8e:3c:87:33:fb:20:81:77:
a7:ba:cf:89:d5:71:84:a7:34:e3:1d:7e:c9:5c:e3:
68:28:f6:53:85:c6:3b:99:af:c4:33:45:6f:f5:50:
1a:d0:05:9f:90:28:84:c8:e4:67:91:40:2d:37:ec:
89:9e:d1:f5:57:45:89:c6:3d:f5:2e:bf:0e:36:0a:
dd:ce:ad:82:6f:9e:11:1a:9a:85:c8:6d:f9:49:c2:
dc:f1:9b:e1:90:39:ab:ac:1b:b3:a1:19:ef:8a:4f:
f5:98:b5:8a:3e:51:ba:ca:97:79:1f:e7:08:af:88:
8a:f3:1e:1d:0c:3e:03:79:e4:91:da:80:e3:b3:01:
ab:af:cc:50:8d:ab:83:08:fe:cc:5b:b0:d0:7e:ce:
50:05:7a:0e:6b:96:21:fa:19:e1:1a:a2:5c:ed:22:
b7:64:7a:9a:f8:d7:87:0f:2e:59:af:7d:42:ad:33:
0b:03:d4:83:78:b1:14:a5:f4:68:df:dd:35:61:da:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:D7:43:BA:25:D5:E2:51:3B:CF:B3:AB:31:86:10:B5:8B:3E:95
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.27.0/24
IPv6:
2a14:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
44:e4:0a:ca:6f:c7:8b:31:d3:e2:5c:25:7c:8e:2b:9b:d6:0e:
0a:98:6a:f0:d2:a5:e9:58:ba:2f:77:aa:50:ab:72:ee:5b:07:
5e:60:0a:95:43:2c:f5:bc:82:ab:33:42:94:f6:cb:1f:11:9a:
e9:ab:5d:97:fb:ce:5b:b8:8f:d1:af:cc:84:a4:04:aa:04:80:
4a:15:88:83:82:35:b9:a8:5e:47:1b:5a:c7:ca:76:05:31:33:
be:e3:6c:67:08:68:f9:7a:5f:36:b4:7e:4d:ef:af:17:82:78:
a1:c5:12:d0:02:15:e7:b8:d2:df:1c:36:04:ca:bb:3d:38:c3:
85:ae:1f:ed:8e:25:da:6d:f7:23:d5:91:29:21:8e:a3:fb:73:
a8:2c:1f:ad:5a:78:98:b4:b5:48:d9:c6:a5:0f:f3:7a:2a:f4:
37:6e:99:cb:b2:00:49:9a:d8:c4:a5:76:89:6c:0d:8a:d5:56:
aa:53:50:dd:79:3f:9d:4a:e2:02:77:d2:3e:56:90:45:1d:cb:
25:8c:0a:6a:9b:7f:cd:28:0b:3f:58:ea:fd:05:5f:f1:d4:1f:
7c:49:e4:c1:8d:7d:0d:c2:d4:0a:28:b8:76:32:ca:d2:c6:96:
00:45:3c:96:80:c6:2d:67:a8:b3:32:4e:a8:19:5c:a8:24:03:
92:e4:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:27 2026 by rpki-client