This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6WYJ5c573Gr_KRb0JwGk58GZmRA.roa
File: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (raw, json)
Hash identifier: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=
Subject key identifier: E9:66:09:E5:CE:7B:DC:6A:FF:29:16:F4:27:01:A4:E7:C1:99:99:10
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019B7F1370211A3491703B5FB35E3FF5A88F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6WYJ5c573Gr_KRb0JwGk58GZmRA.roa
Signing time: Fri 02 Jan 2026 14:18:58 +0000
ROA not before: Fri 02 Jan 2026 14:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12695
IP address blocks: 77.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:70:21:1a:34:91:70:3b:5f:b3:5e:3f:f5:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 14:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e96609e5ce7bdc6aff2916f42701a4e7c1999910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:2b:74:d5:c9:a5:df:36:96:d0:34:88:5c:
87:cd:6e:60:97:be:90:4d:af:3b:d1:af:2f:bd:d8:
3c:47:e1:80:b2:0f:58:09:c6:73:41:20:96:9c:30:
dc:b3:d0:8c:4e:2d:14:72:d7:1a:e6:89:8f:11:00:
de:4c:8a:95:32:7a:3f:fb:e8:03:81:57:0b:b8:36:
06:a0:bf:3b:23:2d:75:1d:4b:7e:17:ec:2c:2a:e5:
5f:d6:7f:87:d8:e2:c8:b8:a0:16:2c:8a:a7:68:3c:
d0:cf:a1:83:9d:98:f3:56:55:89:c3:53:1a:3d:64:
4e:fc:87:c0:a4:cb:ea:7d:34:9e:f1:2e:99:06:fa:
15:bf:f7:cd:b6:dd:c1:59:0b:6c:3b:18:10:30:53:
e2:d3:56:00:8e:72:82:9a:9b:9a:97:de:d4:23:6d:
63:d5:4a:04:23:48:cb:2e:1e:7d:82:78:67:a6:cc:
7c:f3:a6:24:b8:50:e6:b4:df:eb:de:4a:30:9d:04:
82:55:f1:e8:91:bc:65:1a:b0:2d:6f:30:74:ef:41:
5e:e6:77:c7:b9:1e:86:ad:2d:2c:c2:74:bc:53:d5:
c5:2d:1a:a0:24:f5:52:79:e0:5a:9c:f1:64:33:68:
21:9f:7f:13:e6:6d:d1:10:2a:e8:8f:c1:a9:1b:ab:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:09:E5:CE:7B:DC:6A:FF:29:16:F4:27:01:A4:E7:C1:99:99:10
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6WYJ5c573Gr_KRb0JwGk58GZmRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6f:d2:da:6a:02:d4:75:33:c9:a2:35:f0:b2:48:49:1e:61:
22:da:0f:a8:eb:71:47:10:ca:9b:86:70:09:ea:06:15:44:86:
1e:b5:8b:1c:58:f1:f1:1c:8d:88:ea:c3:92:29:d1:14:db:ec:
df:b0:de:3b:e4:39:7c:96:52:09:df:f3:8e:ad:cc:2c:a7:d6:
b3:26:00:4c:09:95:fc:a3:0b:d2:f5:d7:de:34:9b:2d:b3:e3:
f2:a4:4c:3b:6a:ec:fb:16:89:c4:cc:71:d3:90:46:74:2e:03:
af:d7:d7:0b:54:c6:f3:1a:ca:0c:40:76:87:25:88:ec:3b:8b:
4b:40:fc:74:2a:8a:e7:03:4d:72:ba:95:ce:65:f2:ab:4c:44:
4d:19:16:03:0f:69:d3:29:3b:cb:ff:20:66:42:cd:e3:05:ba:
dc:6f:9b:4e:95:39:d0:2c:42:a0:2b:c9:57:b9:7f:29:ac:d8:
fd:81:67:31:4e:cd:f6:16:e2:cc:96:17:1f:96:80:99:90:a7:
3e:16:71:14:93:6b:6b:dc:16:4e:78:22:82:e0:c2:4d:83:64:
1c:69:4a:d6:b9:37:70:7c:81:df:32:f5:fe:e3:55:f1:ce:53:
3e:82:dd:77:3f:32:f2:8c:77:ed:e1:84:fc:10:36:a1:f5:a4:
d6:ff:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:48:40 2026 by rpki-client