This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6FJf_K3zret8g9jKR7dICF1RyQU.roa
File: 6FJf_K3zret8g9jKR7dICF1RyQU.roa (raw, json)
Hash identifier: Ppe4V4XuJtgdDUgGoLGUExo11yX/zYydhg2czWcTcIo=
Subject key identifier: E8:52:5F:FC:AD:F3:AD:EB:7C:83:D8:CA:47:B7:48:08:5D:51:C9:05
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5CA04B9C70E5F2C8BABB322D493442
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6FJf_K3zret8g9jKR7dICF1RyQU.roa
Signing time: Fri 02 Jan 2026 06:19:40 +0000
ROA not before: Fri 02 Jan 2026 06:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 93.88.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:a0:4b:9c:70:e5:f2:c8:ba:bb:32:2d:49:34:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8525ffcadf3adeb7c83d8ca47b748085d51c905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:9a:70:1e:45:d9:44:a3:eb:2b:02:3b:0a:
48:7c:13:24:1a:8e:2d:d5:4e:0a:35:8a:4a:eb:7d:
2b:76:5e:60:f9:f9:93:6e:13:36:7f:2a:22:82:97:
d0:a9:29:4f:3a:44:fe:22:73:24:35:aa:78:7c:b5:
d1:13:f9:63:3d:31:ff:ce:97:04:7b:30:4d:07:ba:
ce:a1:05:8a:69:2f:f7:a2:c5:2d:ec:d2:a5:eb:39:
72:9f:b1:0b:da:56:cc:2e:08:00:00:40:98:d1:6b:
0b:a5:92:27:f7:85:25:c3:e6:3a:3e:49:4c:ba:72:
ba:a8:a1:6d:f4:75:64:81:30:dc:92:e2:96:f3:ba:
50:4d:96:60:de:35:17:98:35:bd:4f:dc:8e:80:04:
af:69:94:99:2b:d4:4c:ba:86:26:18:16:11:42:2f:
0e:57:f2:5e:35:3c:f6:91:53:e8:ad:d9:89:96:46:
0c:3a:a6:93:19:37:e1:4a:4f:5b:5c:38:ed:8b:de:
c8:8d:02:a1:07:e5:2d:c8:cf:fa:af:21:7e:cb:1e:
8f:8c:97:ad:3c:5d:e7:5b:c2:e8:a8:c1:c6:07:8e:
9a:f9:51:c3:51:4c:93:53:8e:36:17:f3:99:1a:ba:
46:56:45:1a:2b:f7:c0:bd:f2:64:13:41:ce:40:98:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:52:5F:FC:AD:F3:AD:EB:7C:83:D8:CA:47:B7:48:08:5D:51:C9:05
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6FJf_K3zret8g9jKR7dICF1RyQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.206.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2b:2c:28:68:86:99:a6:ae:05:f0:f0:8f:55:25:92:ee:b0:
af:9f:5f:27:4b:d7:da:89:32:8a:5c:1d:c4:7f:a3:02:f1:53:
c8:9c:9a:77:83:c5:67:c1:48:67:d1:57:8c:3e:d1:b0:06:a6:
fb:9b:ea:36:4b:4d:c5:0f:ee:99:19:84:25:7f:ee:65:c8:4e:
2c:ba:ec:a1:bf:ec:7f:80:6b:42:00:2f:4d:dd:13:c3:38:4c:
31:2e:6b:1a:59:3a:79:f3:fc:5b:fb:a2:a6:cf:98:a6:96:56:
a4:e7:f7:ec:73:57:42:55:12:d5:3b:fb:0a:0a:ef:c5:5e:cd:
c1:72:94:17:19:ab:2e:63:a8:00:fa:15:df:55:37:f2:36:48:
9f:11:d4:ba:ec:80:96:72:f2:e6:31:08:9c:8d:99:2a:a1:4f:
78:83:98:44:db:0e:76:0a:34:08:00:54:ee:18:24:13:34:b4:
7d:e7:ab:b7:7d:23:76:57:50:23:5b:55:6c:fc:8a:86:65:28:
14:54:45:a7:33:0d:5f:19:46:dd:63:40:0c:de:6d:4a:f9:22:
c0:43:fb:0b:1d:57:74:26:dc:84:46:44:7c:bb:26:77:eb:29:
d8:03:98:1c:1d:13:52:16:34:4d:41:4f:42:13:d8:63:67:91:
00:dc:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:11:41 2026 by rpki-client