This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/6cANbFm-EJrK8-PMA7NyEk83u6k.roa
File: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (raw, json)
Hash identifier: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=
Subject key identifier: E9:C0:0D:6C:59:BE:10:9A:CA:F3:E3:CC:03:B3:72:12:4F:37:BB:A9
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019B7A5B368635BC7ABDFBAF0703E88682FB
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/6cANbFm-EJrK8-PMA7NyEk83u6k.roa
Signing time: Thu 01 Jan 2026 16:19:16 +0000
ROA not before: Thu 01 Jan 2026 16:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212396
IP address blocks: 193.110.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:36:86:35:bc:7a:bd:fb:af:07:03:e8:86:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 16:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9c00d6c59be109acaf3e3cc03b372124f37bba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:67:27:97:d5:98:78:b7:3f:61:04:59:88:
28:9b:4a:9e:01:46:19:ce:79:a8:e0:c9:31:c8:06:
9d:22:ee:6b:86:bb:d7:5c:1b:3e:23:a8:0f:b0:46:
8f:f1:1b:aa:5b:d8:d9:c9:5d:1e:9b:5a:b2:c3:e7:
48:82:0a:2e:14:14:27:94:c3:d8:cb:db:1d:f7:8e:
56:d5:a5:e4:86:c9:04:55:27:81:30:47:62:57:14:
f9:ad:a8:b2:a8:a8:29:e9:5c:8c:94:9e:e8:7f:ac:
b1:94:cd:bb:99:99:e7:eb:f0:b5:27:ba:53:b3:2b:
c8:db:d1:24:79:f1:4a:38:0d:2b:83:e5:ca:36:24:
d8:fe:7e:dc:5c:07:26:5a:29:5f:b3:3e:a4:6c:ce:
76:96:b5:ac:37:6c:93:6f:5f:fc:a7:32:e8:63:49:
3f:9f:63:3e:66:b5:d8:78:a6:74:f6:b0:f7:b0:e5:
f6:5b:39:e1:8d:38:c8:ef:30:8b:2b:a7:11:bb:c5:
82:89:10:58:24:55:d7:38:4f:e2:4d:64:b0:cf:4b:
9a:f0:e8:03:a8:ff:60:4d:fd:4f:d7:d8:a8:5a:2e:
45:2c:38:92:c8:3b:14:2c:ed:85:ce:8c:03:4d:44:
ac:6b:5f:37:4d:92:93:ce:c1:94:d1:d0:a8:66:2b:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:0D:6C:59:BE:10:9A:CA:F3:E3:CC:03:B3:72:12:4F:37:BB:A9
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/6cANbFm-EJrK8-PMA7NyEk83u6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
78:45:4f:9b:2c:f4:80:dc:86:6f:77:03:7e:2c:9e:35:2c:02:
ec:15:0d:b5:54:00:cf:4e:b0:bb:2b:dc:db:59:40:85:be:56:
56:b3:1e:b2:ad:ed:5c:c5:bb:b0:db:6d:12:8c:78:82:16:c9:
f3:08:f9:aa:19:6a:85:c8:42:e3:5c:b4:8c:eb:fc:11:db:d7:
12:c0:0c:e1:e5:2a:3a:18:d8:9b:c8:3f:d2:61:90:85:7b:b1:
5b:58:22:32:d2:64:06:67:c9:5b:10:a3:ea:70:4f:3f:cc:8d:
1f:a5:cc:d3:37:f4:ba:22:98:96:56:71:02:a1:36:cd:a4:0a:
a8:4b:f0:5e:83:5a:93:6e:18:a5:32:6a:e0:e3:cd:13:a5:b8:
5b:6e:64:03:11:22:5a:6e:f5:ea:89:e7:de:7e:c5:cb:ad:c7:
fd:00:03:c9:92:ef:a1:7c:77:cb:2c:ce:2b:30:b2:b7:55:8c:
20:ad:74:2d:22:f0:38:e4:51:40:9d:29:1f:b5:5e:b5:b7:15:
96:c1:dd:18:96:77:97:b9:99:7a:da:02:22:3c:dc:06:59:2b:
9f:38:e1:90:dd:dc:e1:50:19:5f:59:ed:a5:55:16:75:35:1d:
14:be:78:ed:df:da:dc:4b:82:81:c2:ea:63:dc:c1:a3:a0:83:
c8:de:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:44 2026 by rpki-client