This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6vbDrANnc0Lws1NcQ-JKO66v7z0.roa
File: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (raw, json)
Hash identifier: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=
Subject key identifier: EA:F6:C3:AC:03:67:73:42:F0:B3:53:5C:43:E2:4A:3B:AE:AF:EF:3D
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019B791088DCD1F54C4CC4CCBB655FD22DE7
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6vbDrANnc0Lws1NcQ-JKO66v7z0.roa
Signing time: Thu 01 Jan 2026 10:18:05 +0000
ROA not before: Thu 01 Jan 2026 10:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 194.233.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:88:dc:d1:f5:4c:4c:c4:cc:bb:65:5f:d2:2d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 1 10:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaf6c3ac03677342f0b3535c43e24a3baeafef3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:d5:8e:5a:55:c7:2c:2e:b8:8d:7c:cd:e4:
19:15:ce:66:f5:51:ce:54:f3:1c:96:a6:86:da:36:
fc:4f:b6:ef:f6:99:b4:cf:bb:fd:41:18:8e:a8:8a:
df:47:f6:9a:0f:69:02:c3:30:fd:78:65:cf:ea:b5:
93:ea:4a:49:6c:37:4a:e1:26:d4:17:b0:22:b7:ba:
e4:2f:65:a4:8e:cb:6d:86:44:25:47:75:75:3d:4b:
af:dd:9c:3c:9f:71:bb:68:36:d4:09:06:90:c6:c0:
5d:6a:2b:7a:44:54:7c:57:43:67:ad:6b:3d:94:09:
fa:a2:95:58:4f:2c:a0:d6:9b:2e:08:8c:f1:a9:40:
5c:ba:70:e9:2d:7a:4b:1a:2f:25:bb:18:f3:84:7d:
e3:46:76:22:ee:a7:b6:19:2c:6e:90:60:5b:73:08:
b4:b7:b3:f6:7d:11:ad:af:2c:ad:8c:1b:c4:24:9b:
0f:6a:72:d1:35:8c:3e:89:3b:55:80:1c:8f:9c:ca:
da:77:1a:25:31:21:5f:96:5b:3b:f1:ef:e9:a2:06:
53:7d:25:4a:71:f5:14:72:eb:6d:e4:d1:ea:b5:d4:
75:fa:e3:92:e8:f3:8c:b0:ac:37:a1:ef:c0:fc:a5:
74:ee:bc:bd:a8:6c:93:5f:f3:74:84:7f:ed:6f:79:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:C3:AC:03:67:73:42:F0:B3:53:5C:43:E2:4A:3B:AE:AF:EF:3D
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6vbDrANnc0Lws1NcQ-JKO66v7z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fc:91:37:96:59:a1:90:07:c2:15:db:e8:43:be:f8:fa:38:
9c:84:5b:05:a9:45:7a:22:5b:ef:b0:88:27:42:99:8d:83:32:
91:6b:0e:f3:ff:3f:67:42:e1:6e:e6:9c:99:59:25:50:16:21:
ae:05:d3:10:c9:20:b2:81:9a:8e:19:cc:02:f0:76:2c:69:5c:
d1:c8:ea:5e:3d:80:36:78:23:56:24:60:e9:6e:13:a3:46:7f:
56:61:ca:f4:90:b4:90:ab:b7:c3:e7:35:53:1c:42:ae:24:0d:
1e:f7:00:36:f5:36:32:9d:f3:01:e2:3a:d8:79:f6:40:be:1a:
67:5f:ca:94:4e:74:53:d6:fa:d7:6b:54:31:57:80:08:fd:76:
a2:0b:22:b4:ba:be:a9:9a:06:b9:57:ec:bb:f9:7b:18:83:36:
45:5d:bc:89:6b:90:50:c9:7a:75:ea:35:89:c4:06:bc:e3:d6:
b7:d3:54:ee:08:09:d5:ba:78:f0:50:7b:a4:88:88:14:cf:99:
0c:fd:32:01:01:97:66:3e:12:4c:af:55:c0:e6:dc:2b:bb:1b:
74:71:07:d1:7c:90:39:cb:10:e3:61:9c:96:91:ff:8c:a4:5b:
18:53:81:e4:e2:dd:a1:49:0f:a2:8a:3c:80:24:5e:7e:21:60:
32:6a:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 12:58:26 2026 by rpki-client