This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/R6YdT3A1dPoz_GlM1sv_fuPZtYY.roa
File: R6YdT3A1dPoz_GlM1sv_fuPZtYY.roa (raw, json)
Hash identifier: +0b5MOqwjLPDlEzzisb4dVnFj5iEfZJ4Ui/+kwf7BEk=
Subject key identifier: 47:A6:1D:4F:70:35:74:FA:33:FC:69:4C:D6:CB:FF:7E:E3:D9:B5:86
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019B78A34643C71C791FED3FD0E209482297
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/R6YdT3A1dPoz_GlM1sv_fuPZtYY.roa
Signing time: Thu 01 Jan 2026 08:18:44 +0000
ROA not before: Thu 01 Jan 2026 08:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 178.253.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:46:43:c7:1c:79:1f:ed:3f:d0:e2:09:48:22:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 1 08:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47a61d4f703574fa33fc694cd6cbff7ee3d9b586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:53:32:d9:62:3c:b3:99:7a:34:d6:46:f2:
ad:b4:16:10:e5:f5:e1:44:66:da:20:f6:87:cd:aa:
a2:fc:db:42:28:a6:23:cd:86:f6:28:47:2d:21:ae:
c1:18:b8:6a:95:75:86:6c:56:55:ec:aa:e4:57:c4:
f2:60:c0:c4:80:c6:a7:f3:35:e2:76:1e:6b:f7:96:
c3:1a:90:2b:b4:ff:ba:09:11:60:86:2a:25:2a:4b:
82:33:b3:30:f1:9a:7d:92:86:cd:f5:cb:ee:c4:87:
1e:f1:58:03:21:89:71:6f:f2:c5:35:48:17:3b:14:
3a:99:bd:ae:5f:28:e6:ce:f8:55:d4:68:4c:ca:e8:
73:eb:23:2d:9e:19:0f:24:0f:8e:27:c5:b6:9e:89:
32:3e:95:e7:96:ab:15:79:79:2c:1f:9b:5f:7f:1b:
73:66:e2:e8:2a:7e:45:ec:e7:94:51:2e:f8:26:6a:
1f:af:02:6d:9a:0e:0a:65:57:25:5d:d8:38:e9:f1:
94:e0:d4:e5:21:fd:7c:48:af:8d:38:6a:0b:3b:c0:
f8:5f:7e:9c:df:82:b6:e1:7c:0b:88:cd:b4:d8:ba:
10:fc:85:c7:28:37:33:79:01:aa:4b:b9:ba:f8:f9:
72:73:17:5d:7c:59:1f:f7:65:0f:f2:6e:0e:14:c0:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A6:1D:4F:70:35:74:FA:33:FC:69:4C:D6:CB:FF:7E:E3:D9:B5:86
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/R6YdT3A1dPoz_GlM1sv_fuPZtYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:49:c8:7d:e8:cc:5e:4d:48:73:e3:96:88:d3:95:6c:a9:3b:
af:33:ae:77:db:d0:b4:1c:40:11:74:7a:1c:8e:89:7a:e7:ca:
9a:2d:85:3c:aa:81:98:8c:43:c2:fa:c2:87:57:9f:11:cd:02:
27:11:b3:08:c4:a5:87:96:b6:64:dd:cd:2a:5b:a6:86:2b:34:
ab:8f:0b:f9:db:02:4b:1b:f0:bb:85:1d:a8:d4:82:45:a5:d4:
fc:a4:67:a5:08:59:b2:2a:6d:47:0a:14:75:24:c0:c6:7f:6e:
42:01:2d:55:3f:b1:c7:84:59:ae:a6:54:1a:4f:6f:19:3a:ae:
77:a6:4a:bd:a4:02:0c:d8:71:c4:3c:64:6f:10:28:ea:70:fa:
62:7b:c4:a8:1f:5f:a7:f6:cc:00:13:5a:00:cb:d6:3c:37:06:
52:ec:c6:43:7d:68:c1:f4:24:b4:65:c8:30:2b:72:e7:d7:37:
f6:7c:85:94:d8:26:60:86:9d:f7:ed:04:98:1f:9a:a1:30:a0:
7d:4c:e7:f9:97:a8:d3:34:ad:77:86:71:f2:1c:07:f4:3b:37:
17:b3:9f:11:bd:f5:f0:52:10:fc:e3:df:11:18:b1:7b:ef:70:
17:c2:34:f2:b3:ec:a4:e4:4f:fa:21:b4:dc:3e:33:f8:47:e5:
fe:f3:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:25:06 2026 by rpki-client