This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/6XE4eDrC06d690GkRlprAnwbaW8.roa
File: 6XE4eDrC06d690GkRlprAnwbaW8.roa (raw, json)
Hash identifier: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=
Subject key identifier: E9:71:38:78:3A:C2:D3:A7:7A:F7:41:A4:46:5A:6B:02:7C:1B:69:6F
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 019C168B4087503984826758CB2CD7A11281
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/6XE4eDrC06d690GkRlprAnwbaW8.roa
Signing time: Sun 01 Feb 2026 00:12:30 +0000
ROA not before: Sun 01 Feb 2026 00:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215528
IP address blocks: 188.65.165.0/24 maxlen: 24
2a01:f9c0:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:16:8b:40:87:50:39:84:82:67:58:cb:2c:d7:a1:12:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Feb 1 00:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e97138783ac2d3a77af741a4465a6b027c1b696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:9d:b0:55:22:b7:25:8e:94:cf:fd:81:40:
46:5a:8b:0f:56:d0:14:a4:c2:1f:c9:2f:a9:14:7c:
05:06:e0:2e:ec:17:2c:3d:da:77:2c:0c:71:79:93:
91:87:74:f2:71:d6:e7:07:53:33:b6:71:78:96:40:
46:96:c5:93:9d:c4:9d:61:ff:37:ec:35:06:66:2b:
a5:52:c3:62:a7:7f:81:d8:e9:6d:95:05:6e:09:4b:
d5:22:34:2d:26:92:21:b4:30:83:a1:96:5a:24:1d:
23:d3:ac:bb:2e:9f:6a:d6:ef:5c:7c:ab:25:40:19:
c7:65:fa:02:8f:30:e0:9f:4a:76:93:60:c7:23:22:
b5:72:2b:60:ef:e6:65:a0:ae:04:84:4b:f0:a0:9d:
26:9d:ee:d7:a8:c9:ba:de:b5:a6:13:ba:9d:42:4d:
77:b1:52:51:e9:78:7c:e0:1d:14:95:2b:c1:3a:71:
fd:c6:29:6a:94:15:02:62:97:00:fd:56:43:0d:16:
3f:41:ce:f1:7e:70:64:42:a9:d5:46:29:37:58:81:
0a:c9:db:7a:34:27:f1:87:54:63:1a:db:1e:be:ef:
38:7f:8b:c7:5a:03:21:3a:d0:7f:2c:a7:4f:c4:f8:
8c:ed:e3:a9:8c:71:f7:ba:b5:03:77:72:4e:36:2f:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:38:78:3A:C2:D3:A7:7A:F7:41:A4:46:5A:6B:02:7C:1B:69:6F
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/6XE4eDrC06d690GkRlprAnwbaW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.65.165.0/24
IPv6:
2a01:f9c0:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
7f:fe:1a:91:50:a7:1b:4b:b3:fc:91:3d:10:0b:60:ba:f9:44:
82:81:6f:65:11:fa:73:d9:96:13:25:d4:22:1b:08:f1:11:47:
67:d8:30:ba:45:7c:00:97:6d:64:e2:df:6f:2a:64:73:fc:e7:
b0:cd:1d:1c:c1:0d:d1:b1:3b:6c:63:ca:3e:04:78:ed:3d:2b:
d2:25:6f:d6:9c:a2:1e:d0:c7:d1:52:b9:f0:e7:f4:11:90:e6:
4f:e6:b9:1c:af:48:ec:6c:3f:74:f3:c5:a5:8d:1d:20:93:ca:
b9:f3:04:45:35:e5:cb:84:f3:73:57:e2:f1:05:66:7b:5f:9f:
b3:38:c0:67:1a:07:d0:42:25:df:19:a4:f4:e4:2d:be:63:62:
59:fa:32:d3:8d:13:be:76:5a:45:99:5e:12:1d:8f:24:0f:0d:
74:e8:f0:74:97:88:cc:1f:93:29:ec:f5:05:af:a4:f8:25:f9:
a8:75:71:6a:00:b0:5e:00:42:02:eb:68:19:79:de:90:9d:9f:
13:a6:5d:fc:9b:9e:8b:78:1c:60:f7:c9:ca:59:5e:8d:b1:77:
91:ab:8a:e5:12:eb:ba:62:d2:2b:90:be:ec:3a:77:f1:de:a9:
b1:a2:9e:b3:ed:eb:1c:5a:da:d0:b9:18:49:23:96:cb:7e:b9:
0d:c1:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:41:41 2026 by rpki-client