This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/6qyreawZF4fVMyWkw4FMT5_E4Cs.roa
File: 6qyreawZF4fVMyWkw4FMT5_E4Cs.roa (raw, json)
Hash identifier: KqH2FCJeUYV2BaDFAOaLAJqNcjNFt24zga0dBBMyQAY=
Subject key identifier: EA:AC:AB:79:AC:19:17:87:D5:33:25:A4:C3:81:4C:4F:9F:C4:E0:2B
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 019B7B35C91BAB72E0772DB30BF85D2A88EA
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/6qyreawZF4fVMyWkw4FMT5_E4Cs.roa
Signing time: Thu 01 Jan 2026 20:18:01 +0000
ROA not before: Thu 01 Jan 2026 20:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206321
IP address blocks: 2001:67c:2d2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:c9:1b:ab:72:e0:77:2d:b3:0b:f8:5d:2a:88:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Jan 1 20:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaacab79ac191787d53325a4c3814c4f9fc4e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:b5:b8:29:9f:06:71:9d:11:11:1e:c4:58:
d8:2e:f0:40:2f:ca:0d:da:7a:e2:e7:9a:b4:1c:9f:
69:b1:b4:fa:4d:1c:c8:9b:09:d5:ea:ed:84:6c:27:
39:98:fc:f7:6d:cb:59:bd:2b:e1:9b:d1:95:5c:ee:
3a:97:c3:b0:f5:0a:86:60:e5:c0:1f:e7:e6:0d:6b:
b0:32:c5:64:fa:57:6c:89:8e:b7:31:24:5e:13:25:
85:f6:d6:a7:c4:4e:8f:cd:f0:75:32:c5:44:f0:65:
38:c6:3e:70:ba:46:01:e3:b6:09:43:1e:72:1e:a0:
ba:7d:40:f6:18:ed:6d:7a:4e:33:73:13:9b:c9:98:
7e:93:52:44:1d:0b:84:38:a0:b3:e2:23:df:1e:4e:
80:2a:b7:86:87:5c:ed:1c:93:48:d3:26:9c:37:dc:
88:21:ce:f1:3a:c5:d1:62:36:bf:85:33:ad:15:c3:
c0:7e:2a:6d:db:4c:7f:ce:2a:e1:39:56:59:d4:4a:
c8:59:30:09:3b:37:a4:c4:8e:4f:65:d6:cf:e2:69:
03:db:78:70:f3:2e:75:bb:4b:33:90:ea:72:18:c1:
6a:bf:a4:23:c4:5a:bd:52:cc:3e:59:e9:bc:9e:4b:
cb:fb:ba:87:95:46:3a:b4:a4:fd:74:6f:ab:2d:8a:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:AB:79:AC:19:17:87:D5:33:25:A4:C3:81:4C:4F:9F:C4:E0:2B
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/6qyreawZF4fVMyWkw4FMT5_E4Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d2c::/48
Signature Algorithm: sha256WithRSAEncryption
a4:c8:fa:8b:35:00:c0:d4:09:01:c9:db:cc:29:2d:19:10:2e:
50:54:3a:7a:18:f9:19:8c:88:83:16:79:2c:66:10:72:f2:4e:
65:48:e9:c2:78:a8:38:5a:fb:1f:e0:97:1d:47:2f:43:7f:db:
2c:45:42:25:93:81:fd:01:22:28:18:95:64:13:9e:5b:60:28:
21:eb:17:23:cc:77:ac:cc:b7:bb:ef:bd:d1:0f:11:2e:e0:6c:
59:44:04:af:69:5e:e8:c7:c8:ec:30:9f:6a:88:93:b0:46:30:
be:09:9f:60:d4:e9:4f:21:78:46:cc:05:d6:00:44:58:8e:09:
3d:19:b7:50:04:89:4b:7f:18:4c:2e:7f:2d:4a:07:ef:0a:f7:
09:c6:f1:ec:e2:91:64:fe:fa:ca:e0:22:54:9c:0e:ea:f8:eb:
f5:c3:50:9f:f8:a5:37:34:0d:9e:80:e7:65:b2:fa:c9:7f:bb:
e4:cf:91:5a:a8:0b:d7:9a:97:49:5f:d4:78:e9:dc:d6:02:66:
a3:ae:ee:8f:73:4e:64:88:64:8e:3f:59:d0:19:4b:87:58:45:
bc:97:ee:e3:8f:cd:7e:1a:00:61:01:9d:47:98:64:bb:00:69:
e2:e9:f0:1f:75:20:e3:83:ff:2f:f9:90:d7:15:46:89:55:7d:
27:86:37:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt7Nckbq3Lgdy2zC/hdKojqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjRlODBiNGNhZDRlNTBiNzg4ZWRmMTY5NzY3MTJkZWVm
ZjZjMGQwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFjYWI3OWFjMTkxNzg3ZDUzMzI1YTRjMzgxNGM0ZjlmYzRlMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Za1uCmfBnGdEREexFjYLvBAL8oN
2nri55q0HJ9psbT6TRzImwnV6u2EbCc5mPz3bctZvSvhm9GVXO46l8Ow9QqGYOXA
H+fmDWuwMsVk+ldsiY63MSReEyWF9tanxE6PzfB1MsVE8GU4xj5wukYB47YJQx5y
HqC6fUD2GO1tek4zcxObyZh+k1JEHQuEOKCz4iPfHk6AKreGh1ztHJNI0yacN9yI
Ic7xOsXRYja/hTOtFcPAfipt20x/zirhOVZZ1ErIWTAJOzekxI5PZdbP4mkD23hw
8y51u0szkOpyGMFqv6QjxFq9Usw+Wem8nkvL+7qHlUY6tKT9dG+rLYpcNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOqsq3msGReH1TMlpMOBTE+fxOArMB8GA1UdIwQY
MBaAFJ306AtMrU5Qt4jt8Wl2cS3u/2wNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMt
YzlmYzVmNDUyOTk1LzEvNnF5cmVhd1pGNGZWTXlXa3c0Rk1UNV9FNENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMtYzlmYzVmNDUyOTk1
LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC0s
MA0GCSqGSIb3DQEBCwUAA4IBAQCkyPqLNQDA1AkBydvMKS0ZEC5QVDp6GPkZjIiD
FnksZhBy8k5lSOnCeKg4Wvsf4JcdRy9Df9ssRUIlk4H9ASIoGJVkE55bYCgh6xcj
zHeszLe7773RDxEu4GxZRASvaV7ox8jsMJ9qiJOwRjC+CZ9g1OlPIXhGzAXWAERY
jgk9GbdQBIlLfxhMLn8tSgfvCvcJxvHs4pFk/vrK4CJUnA7q+Ov1w1Cf+KU3NA2e
gOdlsvrJf7vkz5FaqAvXmpdJX9R46dzWAmajru6Pc05kiGSOP1nQGUuHWEW8l+7j
j81+GgBhAZ1HmGS7AGni6fAfdSDjg/8v+ZDXFUaJVX0nhjfV
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:31 2026 by rpki-client