This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa
File: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (raw, json)
Hash identifier: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=
Subject key identifier: E8:29:F4:2C:C1:CF:0C:1B:26:E0:D9:BC:84:57:2C:29:2E:AD:63:DE
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 019B797E1A0A61C68CB9FAA6C4D8DF1896B5
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa
Signing time: Thu 01 Jan 2026 12:17:45 +0000
ROA not before: Thu 01 Jan 2026 12:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209733
IP address blocks: 45.82.61.0/24 maxlen: 24
45.82.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:1a:0a:61:c6:8c:b9:fa:a6:c4:d8:df:18:96:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Jan 1 12:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e829f42cc1cf0c1b26e0d9bc84572c292ead63de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:0e:7b:d5:a3:8f:6a:e1:c1:7f:66:14:aa:
e3:aa:13:9f:21:3e:ca:dc:f7:a7:14:99:93:be:d1:
c5:76:7a:79:db:5e:39:58:fc:9e:58:22:db:d1:e2:
c0:7f:27:f2:06:04:3c:d6:ab:c4:8a:61:06:67:d3:
b0:95:1f:63:ba:29:95:10:de:72:02:fa:fc:91:7b:
25:c4:a7:08:49:05:88:64:8c:20:a0:04:22:58:13:
52:0b:7e:09:e4:46:dd:6c:a0:8c:22:65:58:df:f9:
f9:fc:81:bb:63:1f:71:97:fc:8f:b2:46:73:22:1b:
cc:87:2e:68:4b:30:1b:a8:05:d5:10:e7:e8:27:b4:
bc:5b:3c:97:df:22:09:8e:af:eb:89:d1:cb:e0:2b:
53:58:23:f5:6b:8f:8c:92:05:a2:be:6f:42:e5:60:
ca:70:ed:58:d6:ae:64:3f:10:39:7d:1d:b1:85:c4:
7e:20:6c:f1:7f:8d:eb:e6:fa:e9:67:41:00:61:2e:
b3:96:7e:db:1a:2f:7e:65:a9:ee:71:8d:bf:ef:b2:
31:6a:ce:0a:fc:0c:f7:32:8a:5c:61:10:6e:0b:53:
ef:5f:1f:c6:ec:8f:ab:55:5d:2f:bf:95:5b:57:c9:
d2:46:56:ba:35:84:0c:39:9f:54:2b:52:1d:4c:fa:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:F4:2C:C1:CF:0C:1B:26:E0:D9:BC:84:57:2C:29:2E:AD:63:DE
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.61.0-45.82.62.255
Signature Algorithm: sha256WithRSAEncryption
80:10:99:9c:07:1e:52:a4:26:cf:c2:eb:bf:9e:50:0b:67:3f:
2c:44:97:ee:ae:db:f5:74:d1:9a:4d:3d:9b:d2:3d:63:e7:e6:
ad:d4:6b:5f:6a:14:f7:5d:b2:44:32:7f:73:92:3a:55:07:28:
9e:36:7d:01:ea:35:39:7c:78:bf:66:51:59:db:48:92:d3:8a:
87:80:7e:30:5d:38:cc:0c:fe:71:5b:51:44:56:52:2f:7b:9d:
09:53:c7:72:30:17:de:82:26:17:64:ea:0e:70:13:ce:b1:87:
b9:00:83:d7:8e:75:be:ae:90:cb:d1:f0:44:77:41:a1:e1:7c:
64:8f:7f:b4:40:c7:3b:07:36:6b:78:33:78:73:c1:87:f1:77:
10:b4:4f:d0:62:10:e0:ee:58:e7:26:5f:88:4f:6f:04:f0:d7:
8f:71:84:60:c5:bf:2a:f9:63:27:92:35:88:b6:f1:fb:38:22:
f4:52:7b:f3:a1:7d:45:1a:80:ac:ed:d8:10:c1:71:c3:36:f8:
74:a1:62:60:37:3b:c6:fa:35:a8:d4:fd:d1:36:c5:c8:de:2b:
e4:06:fd:97:8b:6e:c8:6d:71:cf:7e:69:df:f6:7f:00:81:ad:
fa:30:ec:7b:4c:63:0a:91:ac:2e:b5:65:4d:92:a6:5f:d6:15:
f2:a1:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:30:34 2026 by rpki-client