This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/sEgm3_XRgBoM_m_4MZWUdV255ek.roa
File: sEgm3_XRgBoM_m_4MZWUdV255ek.roa (raw, json)
Hash identifier: CpbzWWdHJIuAL6B0XSOZioEdqbZ10CLLsSA3gtv0Imo=
Subject key identifier: B0:48:26:DF:F5:D1:80:1A:0C:FE:6F:F8:31:95:94:75:5D:B9:E5:E9
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 019B7EA6BB65D855CF0F72C388A46077BB7D
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/sEgm3_XRgBoM_m_4MZWUdV255ek.roa
Signing time: Fri 02 Jan 2026 12:20:14 +0000
ROA not before: Fri 02 Jan 2026 12:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207534
IP address blocks: 212.6.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:bb:65:d8:55:cf:0f:72:c3:88:a4:60:77:bb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jan 2 12:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b04826dff5d1801a0cfe6ff8319594755db9e5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:5f:58:92:6b:d8:ea:84:5c:66:e2:c7:f5:
a3:ab:ba:a2:f9:96:e7:f8:f9:f4:f6:f8:a2:4e:b1:
15:92:5b:4d:50:75:55:ed:83:7e:3e:00:f7:e7:f4:
2b:a3:13:58:a7:4a:8b:16:a1:5f:5f:36:2e:d6:42:
bb:c3:1a:00:bd:ac:ec:79:2b:05:a4:b2:5e:ac:23:
23:12:de:9a:8b:d5:17:bf:32:1b:7b:f6:7a:62:bd:
77:30:5c:e1:7a:e5:0d:c0:1f:7f:24:b2:54:92:d0:
25:49:4b:3f:d1:82:a9:02:15:f2:cb:4c:90:84:59:
49:7c:b8:95:6d:dc:49:c3:28:71:66:de:5f:49:9b:
2d:2b:2f:83:93:a5:90:f5:1f:ca:ad:49:8a:be:69:
84:9a:d6:91:2c:6e:16:f3:4c:67:43:a9:61:35:5e:
20:45:a7:03:7e:aa:8c:d3:18:20:70:6f:ca:64:d2:
8c:d4:7d:10:4a:4b:52:85:50:d0:36:12:9a:32:7c:
c8:40:24:b5:ad:41:71:b6:d8:88:80:74:9e:e9:9e:
a1:62:e9:f6:d0:f4:86:a1:c5:4b:89:f6:6a:6a:ec:
e9:7e:18:b2:f4:9d:0e:e2:4c:bf:2a:61:3c:b7:75:
e4:76:a2:e4:4a:4a:5d:70:2a:01:ae:37:ba:f7:e5:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:26:DF:F5:D1:80:1A:0C:FE:6F:F8:31:95:94:75:5D:B9:E5:E9
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/sEgm3_XRgBoM_m_4MZWUdV255ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
25:dd:67:fe:eb:7f:cc:87:bc:7e:e0:08:e0:6e:94:b7:6a:81:
9a:3a:b2:15:47:71:a0:34:a6:e0:12:50:71:ac:d9:ed:d0:52:
92:50:00:ad:e8:d2:5b:90:cc:28:12:69:2d:bf:4a:6f:81:da:
ff:4b:73:c8:3c:cb:60:2c:14:0e:07:b2:89:5d:47:44:f1:7d:
7e:84:d3:4d:f5:31:d6:8b:ec:90:f6:33:34:56:cc:b0:13:a0:
a4:7c:2a:b5:66:c7:55:42:23:ab:87:78:14:04:52:de:d9:b3:
4b:42:e1:bf:6b:93:cb:9e:d2:61:8d:1f:d6:75:c5:85:73:28:
69:a8:23:20:c7:77:22:c3:fa:40:ee:6f:39:09:d8:5a:51:e2:
95:9a:a7:d8:4a:fd:3f:6b:71:f4:44:9a:73:ee:23:c7:86:d3:
47:d4:0d:56:6c:26:00:67:78:3b:a2:88:bb:6d:1f:9d:89:cc:
16:fa:24:2d:22:2c:1f:9a:c5:ef:a6:d3:7a:fe:08:21:67:4a:
76:f5:d3:70:d5:15:77:1b:8f:b7:04:05:09:fc:4e:8c:db:65:
01:6f:e7:d5:ac:6e:82:e0:14:47:f4:73:b4:aa:8c:87:70:da:
30:8e:eb:72:3c:a4:5d:3e:95:e2:ce:75:2c:56:30:27:89:4c:
31:8c:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:37 2026 by rpki-client