This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa
File: 6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa (raw, json)
Hash identifier: gmhuU19AYYZVOUgU+6LiaTx3y8WKPDmPoobM8/JmPm0=
Subject key identifier: E9:6B:18:1A:FF:A9:48:A3:FA:67:32:63:23:7A:81:DF:73:0E:81:79
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019B7C12ED63BE34D9B91D4EB5F937921254
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa
Signing time: Fri 02 Jan 2026 00:19:33 +0000
ROA not before: Fri 02 Jan 2026 00:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16114
IP address blocks: 194.209.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:ed:63:be:34:d9:b9:1d:4e:b5:f9:37:92:12:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 2 00:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e96b181affa948a3fa673263237a81df730e8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:11:12:d8:c2:e0:1a:7b:75:5d:b0:87:bf:
e8:23:8e:cf:81:6b:0a:54:ed:af:ee:47:30:d2:c5:
0d:59:30:c7:4d:d8:c2:f9:14:3b:64:a6:13:e1:57:
4c:3c:d3:1b:f9:9b:c6:6e:97:6a:9a:fe:8b:d8:bf:
65:23:c7:b7:40:19:b7:13:fb:38:ad:8d:dc:cf:10:
05:42:45:c7:67:50:c5:65:30:2b:b2:b3:94:55:ac:
67:5e:10:36:0b:1d:ac:09:59:cf:15:09:26:dd:9c:
9d:60:b5:ae:10:1c:4a:86:28:bd:00:85:4e:7e:73:
a1:29:49:a6:12:b1:02:73:11:31:1d:38:59:99:3b:
80:ef:25:7d:33:16:9c:fd:a1:92:27:21:9d:6e:8b:
4f:1b:92:83:ca:78:61:ce:dd:78:22:46:85:83:5e:
85:7a:e7:0d:c3:f2:cb:2b:d1:ab:a7:5b:ff:68:8b:
13:98:50:fd:b8:51:78:d2:e8:ef:d9:a0:33:28:bb:
1f:1e:d9:ee:6d:7f:93:68:dd:9a:48:f1:0e:71:dc:
f2:fa:1e:b2:84:c5:71:d4:33:b9:58:1f:8c:31:71:
6d:0c:f8:f6:5e:e4:83:34:64:b3:c4:b3:08:cd:23:
df:93:ee:0a:22:81:d5:56:4c:a7:23:86:b5:76:89:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:18:1A:FF:A9:48:A3:FA:67:32:63:23:7A:81:DF:73:0E:81:79
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:43:39:1b:67:0b:c7:39:a5:d7:33:55:45:83:74:e1:1b:c8:
26:b9:c7:24:e4:12:6f:d5:bb:5b:d0:a9:5e:87:bb:62:75:2e:
4d:dc:74:f8:1b:92:54:e7:76:60:20:f2:01:be:4c:2a:99:e4:
68:3c:9a:5f:bf:c6:89:4e:ed:cc:8d:98:36:b8:9a:61:77:25:
e9:f4:9b:17:4a:a1:6f:bc:eb:f8:b2:67:2d:2b:cd:0a:10:29:
c4:e0:3b:8c:a5:de:ac:5e:15:cc:ce:ca:38:63:23:7e:7b:9c:
9f:f3:63:2e:8e:c9:b7:ae:69:d6:1e:25:99:11:5e:c3:70:65:
54:35:8b:34:70:c6:a0:e0:59:0e:0c:dc:ec:4a:db:3c:ea:13:
eb:7d:5f:23:63:a6:78:b3:36:4d:c7:d4:f7:ff:70:f5:f4:63:
32:fe:62:e4:c3:73:ab:df:b2:f8:8e:de:87:a0:0f:01:c9:8c:
f0:e7:fa:9d:09:03:2b:c3:7d:1e:0c:21:fa:2d:c6:de:45:c1:
f9:e2:c2:96:23:e8:f2:c5:7c:b7:bf:d5:e5:43:3e:63:45:25:
f4:56:7b:e6:49:86:4f:f8:6e:b1:9c:e0:21:67:51:ab:22:b1:
9a:6c:20:cb:5f:9e:4f:19:0d:e1:7e:56:7c:09:22:c7:c5:ea:
8d:5c:35:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Eu1jvjTZuR1Otfk3khJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTZiMTgxYWZmYTk0OGEzZmE2NzMyNjMyMzdhODFkZjczMGU4MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OUREtjC4Bp7dV2wh7/oI47PgWsK
VO2v7kcw0sUNWTDHTdjC+RQ7ZKYT4VdMPNMb+ZvGbpdqmv6L2L9lI8e3QBm3E/s4
rY3czxAFQkXHZ1DFZTArsrOUVaxnXhA2Cx2sCVnPFQkm3ZydYLWuEBxKhii9AIVO
fnOhKUmmErECcxExHThZmTuA7yV9Mxac/aGSJyGdbotPG5KDynhhzt14IkaFg16F
eucNw/LLK9Grp1v/aIsTmFD9uFF40ujv2aAzKLsfHtnubX+TaN2aSPEOcdzy+h6y
hMVx1DO5WB+MMXFtDPj2XuSDNGSzxLMIzSPfk+4KIoHVVkynI4a1domOlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlrGBr/qUij+mcyYyN6gd9zDoF5MB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvNldzWUd2LXBTS1A2WnpKakkzcUIzM01PZ1hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtHxMA0G
CSqGSIb3DQEBCwUAA4IBAQC5QzkbZwvHOaXXM1VFg3ThG8gmucck5BJv1btb0Kle
h7tidS5N3HT4G5JU53ZgIPIBvkwqmeRoPJpfv8aJTu3MjZg2uJphdyXp9JsXSqFv
vOv4smctK80KECnE4DuMpd6sXhXMzso4YyN+e5yf82Mujsm3rmnWHiWZEV7DcGVU
NYs0cMag4FkODNzsSts86hPrfV8jY6Z4szZNx9T3/3D19GMy/mLkw3Or37L4jt6H
oA8ByYzw5/qdCQMrw30eDCH6LcbeRcH54sKWI+jyxXy3v9XlQz5jRSX0VnvmSYZP
+G6xnOAhZ1GrIrGabCDLX55PGQ3hflZ8CSLHxeqNXDXc
-----END CERTIFICATE-----
Generated at Mon Jan 26 17:45:35 2026 by rpki-client