This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa
File: R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa (raw, json)
Hash identifier: nb/6KQdFOLZV09sF9OK9gvGL0HQoI0XdoKq2+mGgfyY=
Subject key identifier: 47:AB:57:EE:7D:44:53:38:52:D9:17:3C:02:05:5F:75:CC:A6:1E:38
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 019B7E38C114A9F4F14A9625451D0D584509
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa
Signing time: Fri 02 Jan 2026 10:20:07 +0000
ROA not before: Fri 02 Jan 2026 10:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48325
IP address blocks: 185.126.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:c1:14:a9:f4:f1:4a:96:25:45:1d:0d:58:45:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Jan 2 10:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47ab57ee7d44533852d9173c02055f75cca61e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:0f:ed:85:ca:c1:64:d8:bf:3d:30:4e:66:
01:c0:2a:9c:8f:1f:4e:5e:66:77:e9:15:b8:bc:d3:
6a:be:3e:1e:b8:08:42:d2:96:2b:42:92:e9:ad:a6:
01:fc:79:d4:01:99:32:dd:6e:c0:62:01:94:a3:8e:
81:8f:bf:48:17:bf:16:45:2b:f5:37:31:ad:cc:6c:
cf:bc:0d:c8:f8:60:db:de:b4:39:e5:5f:c4:e5:30:
eb:a3:65:5d:1e:e4:14:7d:f3:37:b1:3a:50:6f:53:
8c:81:cb:62:85:a8:f1:41:fa:dc:8e:f8:48:c7:b0:
9a:cc:e6:cf:b0:28:5c:b9:0a:24:c7:3d:98:48:a9:
99:d7:6e:33:8b:24:3e:8d:f4:92:b4:d6:bd:b9:af:
7f:23:03:64:88:88:55:87:84:6c:88:cf:c5:18:30:
fc:8d:58:05:5a:79:99:a2:e0:12:97:42:91:03:b7:
43:e1:e8:5e:2d:7c:0f:09:c2:e8:4c:d7:36:b8:6f:
73:35:e8:f1:28:48:49:f1:05:68:53:28:36:fd:66:
a8:3f:4e:3c:6b:c4:50:0f:6b:80:c3:92:5d:96:d4:
bc:ea:f9:f2:b4:90:6b:64:23:6f:e4:e3:cf:52:77:
00:e1:29:e5:8e:53:10:55:fc:c9:5a:9d:01:62:ad:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AB:57:EE:7D:44:53:38:52:D9:17:3C:02:05:5F:75:CC:A6:1E:38
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.173.0/24
Signature Algorithm: sha256WithRSAEncryption
23:30:21:20:6d:a7:16:fb:bd:74:15:50:ef:a8:a3:66:06:f6:
af:3b:62:dd:96:26:b5:1b:4a:d4:a4:12:bd:5e:cb:e6:28:17:
04:bf:78:83:c3:f8:d9:4d:ea:1e:b7:d4:fd:35:d3:30:70:5d:
30:36:cc:d4:7e:61:33:8d:5d:8f:4a:50:6a:49:38:c8:65:a4:
66:11:3e:3a:fb:f8:73:f1:ca:08:43:cd:1d:cb:a6:1a:cf:54:
8b:c9:71:1e:29:9c:53:1e:47:c6:6b:43:92:fb:04:3b:d6:ef:
8b:1d:a1:50:55:31:cf:00:b0:b0:fa:4a:c7:e3:95:d7:55:66:
d8:4d:b3:66:96:f6:f6:c2:e8:57:15:45:59:ef:1d:b9:b3:0c:
ff:66:f2:c0:fd:d9:33:33:de:95:20:86:19:69:20:69:cb:1b:
38:77:7a:42:07:9b:6c:fe:06:ba:03:f4:c8:05:43:ac:4f:6f:
e8:b2:b1:70:58:b3:79:18:4b:3b:90:0b:3e:76:5c:88:70:2f:
fc:83:c6:a4:aa:cf:0c:64:50:ee:c6:df:10:68:37:ad:9d:66:
1d:cb:c0:52:96:15:2e:b0:f8:01:f9:c3:e6:0e:20:9e:91:3d:
f7:32:1f:ed:94:ee:c4:e1:c1:ce:c8:7c:d1:ff:4c:3c:62:4f:
e4:35:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:56 2026 by rpki-client