This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D6EihVqjMUZlfm_2CSnRPYElQyk.roa
File: D6EihVqjMUZlfm_2CSnRPYElQyk.roa (raw, json)
Hash identifier: +uh3AcUeZOvvNNzGAn1oVEhYK5M+xwZn/VchN4VxIVA=
Subject key identifier: 0F:A1:22:85:5A:A3:31:46:65:7E:6F:F6:09:29:D1:3D:81:25:43:29
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019B7C1307B532791B24306FB9C977795354
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D6EihVqjMUZlfm_2CSnRPYElQyk.roa
Signing time: Fri 02 Jan 2026 00:19:40 +0000
ROA not before: Fri 02 Jan 2026 00:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209326
IP address blocks: 212.243.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:07:b5:32:79:1b:24:30:6f:b9:c9:77:79:53:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 2 00:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fa122855aa33146657e6ff60929d13d81254329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:b6:5a:a1:93:6e:5a:53:33:b7:e0:80:f2:
51:a7:08:84:59:cc:07:1b:09:2d:6d:1c:f7:06:0d:
a2:c7:a3:ed:a1:dd:bb:36:f2:16:3d:2a:91:e8:d7:
aa:eb:6e:9f:27:1f:cc:23:dc:85:9e:ae:53:67:37:
d8:7a:6e:0f:6d:c2:f8:b2:73:fb:09:0f:36:3b:f3:
af:dd:48:ac:b3:e0:68:17:6a:95:dc:f9:6f:ab:a4:
de:b2:8c:bb:20:f4:93:0f:b3:94:80:61:d5:d7:26:
b5:ba:11:5a:13:e1:d2:a9:32:42:36:5b:01:03:fc:
a7:1e:3d:15:e8:3e:2a:87:e0:a6:cf:8d:9f:dc:b8:
81:bf:ad:4c:66:0d:69:99:45:8b:4f:f1:fa:65:8e:
54:02:c2:8b:bf:a5:a2:69:6d:8c:42:a1:0f:7a:bd:
e2:8c:5c:a7:14:03:4c:bd:5c:e1:08:aa:68:17:80:
58:27:40:c6:96:45:01:e6:6c:b4:f0:15:83:2f:aa:
3f:55:24:0a:9f:ff:35:0b:88:b8:65:f8:47:64:eb:
c5:55:eb:c3:cd:b7:a3:f2:40:17:07:b5:93:b9:e5:
83:b8:96:a7:bf:a6:15:9c:91:c4:b3:d2:b4:71:d2:
d7:04:e9:00:11:fc:78:35:20:13:6e:22:12:ac:1c:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:22:85:5A:A3:31:46:65:7E:6F:F6:09:29:D1:3D:81:25:43:29
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D6EihVqjMUZlfm_2CSnRPYElQyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.112.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8a:f2:96:2b:15:9a:86:b2:00:73:07:7a:88:e7:b5:0d:85:
c1:8a:95:0c:06:b2:c1:27:ee:e7:83:61:69:52:c2:2b:39:20:
04:79:83:5d:40:67:72:1f:be:64:58:97:3e:e9:b3:97:38:96:
cf:fb:72:61:0a:3e:f1:b2:20:5e:d5:e7:7c:9f:c6:28:92:97:
5a:b3:a6:1c:f4:33:55:f2:88:45:b5:ab:ac:04:dc:e6:e6:8b:
19:8c:a9:a2:53:74:15:a5:95:84:cb:14:86:89:70:8e:57:8e:
82:a2:7e:0f:a0:a6:53:c5:e8:33:c0:62:68:8f:45:03:34:c3:
f1:75:61:0b:1c:5a:33:87:fe:d8:21:06:8b:79:52:a8:cc:f1:
cf:a5:ee:dd:e3:bf:4f:7d:68:bb:bc:a9:0d:78:ff:15:94:5d:
a5:75:27:a9:0a:26:df:d1:eb:ea:99:c5:ae:62:b0:56:4c:6a:
fc:4f:04:ae:79:53:b1:ae:65:bf:8b:a5:85:a3:a1:3e:89:a5:
3e:07:8e:25:7a:a3:f5:ed:d9:2e:41:5b:d1:21:85:2d:eb:9d:
c0:3b:57:f7:ca:36:0f:67:7c:c9:05:76:6f:9c:19:80:59:9e:
8f:99:0e:21:ba:85:a0:4d:bc:99:ad:03:d3:65:96:21:de:c4:
8a:58:f8:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Ewe1MnkbJDBvucl3eVNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmExMjI4NTVhYTMzMTQ2NjU3ZTZmZjYwOTI5ZDEzZDgxMjU0MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk62WqGTblpTM7fggPJRpwiEWcwH
GwktbRz3Bg2ix6Ptod27NvIWPSqR6Neq626fJx/MI9yFnq5TZzfYem4PbcL4snP7
CQ82O/Ov3Uiss+BoF2qV3Plvq6Tesoy7IPSTD7OUgGHV1ya1uhFaE+HSqTJCNlsB
A/ynHj0V6D4qh+Cmz42f3LiBv61MZg1pmUWLT/H6ZY5UAsKLv6WiaW2MQqEPer3i
jFynFANMvVzhCKpoF4BYJ0DGlkUB5my08BWDL6o/VSQKn/81C4i4ZfhHZOvFVevD
zbej8kAXB7WTueWDuJanv6YVnJHEs9K0cdLXBOkAEfx4NSATbiISrByesQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+hIoVaozFGZX5v9gkp0T2BJUMpMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvRDZFaWhWcWpNVVpsZm1fMkNTblJQWUVsUXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PNwMA0G
CSqGSIb3DQEBCwUAA4IBAQAyivKWKxWahrIAcwd6iOe1DYXBipUMBrLBJ+7ng2Fp
UsIrOSAEeYNdQGdyH75kWJc+6bOXOJbP+3JhCj7xsiBe1ed8n8Yokpdas6Yc9DNV
8ohFtausBNzm5osZjKmiU3QVpZWEyxSGiXCOV46Con4PoKZTxegzwGJoj0UDNMPx
dWELHFozh/7YIQaLeVKozPHPpe7d479PfWi7vKkNeP8VlF2ldSepCibf0evqmcWu
YrBWTGr8TwSueVOxrmW/i6WFo6E+iaU+B44leqP17dkuQVvRIYUt653AO1f3yjYP
Z3zJBXZvnBmAWZ6PmQ4huoWgTbyZrQPTZZYh3sSKWPjF
-----END CERTIFICATE-----
Generated at Mon Jan 26 15:00:21 2026 by rpki-client