This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/6Y_Q_XYNyE3ONOEUbtEBa-B0Ffc.roa
File: 6Y_Q_XYNyE3ONOEUbtEBa-B0Ffc.roa (raw, json)
Hash identifier: ZASDjsooOVaChWwIP1atzMXETDhEIRoxPGVrC5Frz3o=
Subject key identifier: E9:8F:D0:FD:76:0D:C8:4D:CE:34:E1:14:6E:D1:01:6B:E0:74:15:F7
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 019BB2FFE871FFAB10A2389F8E4190C2AE49
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/6Y_Q_XYNyE3ONOEUbtEBa-B0Ffc.roa
Signing time: Mon 12 Jan 2026 16:17:54 +0000
ROA not before: Mon 12 Jan 2026 16:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 91.108.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 19:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b2:ff:e8:71:ff:ab:10:a2:38:9f:8e:41:90:c2:ae:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Jan 12 16:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e98fd0fd760dc84dce34e1146ed1016be07415f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:94:42:65:49:2c:e1:18:22:54:63:57:dc:
ad:42:e4:4a:9b:93:ca:43:d4:4c:e8:d0:d6:84:af:
a8:33:3c:95:bf:2a:47:c7:49:46:29:a6:ba:43:97:
38:47:d7:2f:b8:8c:75:1a:fe:ec:5f:33:3e:31:c7:
a9:fc:95:02:31:c7:1b:14:dd:82:88:a7:66:4b:6c:
09:52:ce:c1:f5:37:6d:07:0c:16:86:bb:dd:e1:ac:
f0:f5:62:e9:57:2d:94:ae:4b:d7:2d:7e:2f:bb:9e:
72:37:21:2a:a9:ce:78:76:26:e2:9b:7a:9f:00:58:
40:8e:d2:1b:e1:87:6e:ed:68:af:81:5a:d2:e3:de:
a5:74:8a:54:e5:2a:70:3c:05:17:b5:2a:08:7a:0b:
53:4e:db:0f:90:30:08:90:aa:45:e9:78:ae:b4:b3:
6a:e7:00:0d:d7:06:ba:b5:49:11:bf:aa:ce:3a:2a:
75:3c:d1:c7:bd:a7:86:53:08:40:7f:92:89:89:da:
6d:25:6e:8a:67:81:a3:b3:0b:db:2a:99:57:55:6d:
98:7d:d6:29:7e:2e:db:41:17:2a:f3:9f:1c:84:c7:
05:1b:25:90:5a:ea:cd:db:32:7e:8a:07:27:47:c5:
e0:4f:b9:7e:b3:a1:f7:a5:61:10:a0:88:f5:63:11:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:D0:FD:76:0D:C8:4D:CE:34:E1:14:6E:D1:01:6B:E0:74:15:F7
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/6Y_Q_XYNyE3ONOEUbtEBa-B0Ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.186.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e8:e5:eb:7b:0d:00:57:97:ba:82:74:44:98:2f:d1:dc:1e:
82:9c:b9:30:7b:af:72:f1:7d:22:81:87:b7:0d:9c:a1:71:6f:
36:c1:1c:c0:6e:d9:18:42:33:a3:11:7c:fd:0f:bf:1a:6a:0b:
17:6d:4b:c8:48:f8:fc:2e:f3:bd:6d:4b:21:8d:75:d4:e0:db:
99:76:55:77:44:72:32:14:5b:3a:10:eb:99:9e:87:38:f7:50:
ef:4e:a9:53:69:a3:ae:b4:92:f2:5d:50:ff:cf:24:7d:99:c4:
c0:a6:d5:f6:7f:f6:98:49:41:51:f7:c9:54:01:bd:5d:69:a6:
8a:10:1b:05:50:d5:66:6a:14:34:31:0f:62:62:37:88:b4:cc:
4d:72:56:f9:46:21:01:69:13:63:e9:e4:86:5a:f5:f5:d0:40:
51:6d:6d:31:6e:72:61:a0:b6:c2:bf:d6:3d:6e:e7:b5:5a:26:
2f:64:47:53:12:6a:cc:2b:89:a9:97:33:e4:71:d0:53:49:76:
46:3f:db:8f:c1:4e:9b:e9:86:a5:86:e3:bb:41:30:f4:8a:02:
7d:da:5a:5a:72:3b:2d:de:ad:4d:fd:81:75:98:e3:06:95:c3:
53:f1:27:b3:4b:41:de:6d:3c:a7:1e:6c:45:4c:c9:46:7a:37:
75:b2:1d:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZuy/+hx/6sQojifjkGQwq5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm
NGQxNWYwHhcNMjYwMTEyMTYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOThmZDBmZDc2MGRjODRkY2UzNGUxMTQ2ZWQxMDE2YmUwNzQxNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp+UQmVJLOEYIlRjV9ytQuRKm5PK
Q9RM6NDWhK+oMzyVvypHx0lGKaa6Q5c4R9cvuIx1Gv7sXzM+Mcep/JUCMccbFN2C
iKdmS2wJUs7B9TdtBwwWhrvd4azw9WLpVy2UrkvXLX4vu55yNyEqqc54dibim3qf
AFhAjtIb4Ydu7WivgVrS496ldIpU5SpwPAUXtSoIegtTTtsPkDAIkKpF6XiutLNq
5wAN1wa6tUkRv6rOOip1PNHHvaeGUwhAf5KJidptJW6KZ4GjswvbKplXVW2YfdYp
fi7bQRcq858chMcFGyWQWurN2zJ+igcnR8XgT7l+s6H3pWEQoIj1YxF94QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmP0P12DchNzjThFG7RAWvgdBX3MB8GA1UdIwQY
MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt
NTAwN2RkZTM1MDQ1LzEvNllfUV9YWU55RTNPTk9FVWJ0RUJhLUIwRmZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEtNTAwN2RkZTM1MDQ1
LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2y6MA0G
CSqGSIb3DQEBCwUAA4IBAQBG6OXrew0AV5e6gnREmC/R3B6CnLkwe69y8X0igYe3
DZyhcW82wRzAbtkYQjOjEXz9D78aagsXbUvISPj8LvO9bUshjXXU4NuZdlV3RHIy
FFs6EOuZnoc491DvTqlTaaOutJLyXVD/zyR9mcTAptX2f/aYSUFR98lUAb1daaaK
EBsFUNVmahQ0MQ9iYjeItMxNclb5RiEBaRNj6eSGWvX10EBRbW0xbnJhoLbCv9Y9
bue1WiYvZEdTEmrMK4mplzPkcdBTSXZGP9uPwU6b6YalhuO7QTD0igJ92lpacjst
3q1N/YF1mOMGlcNT8SezS0HebTynHmxFTMlGejd1sh1o
-----END CERTIFICATE-----
Generated at Mon Jan 19 05:22:00 2026 by rpki-client