This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6ode8RT6NLonVmTVfRHst2iUVc.roa
File: q6ode8RT6NLonVmTVfRHst2iUVc.roa (raw, json)
Hash identifier: 1Jan35mV7jO0PC8DHngrpe3hyYdWRrO7tMsi/tCYpRk=
Subject key identifier: AB:AA:1D:7B:C4:53:E8:D2:E8:9D:59:93:55:F4:47:B2:DD:A2:51:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5D48D4ACAAAA70E0A7F2AE913D8436
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6ode8RT6NLonVmTVfRHst2iUVc.roa
Signing time: Fri 02 Jan 2026 06:20:24 +0000
ROA not before: Fri 02 Jan 2026 06:20:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212085
IP address blocks: 2a0e:b107:ea4::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:48:d4:ac:aa:aa:70:e0:a7:f2:ae:91:3d:84:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:20:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abaa1d7bc453e8d2e89d599355f447b2dda25157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:df:7a:fe:a4:68:f8:0c:3e:4a:71:53:dd:
68:6b:7d:50:47:a0:50:e3:66:6d:fc:af:03:27:e1:
56:1e:1e:17:3b:ce:3e:92:8f:cf:38:41:87:2a:db:
4d:64:23:33:83:f2:af:10:ac:be:52:01:16:f7:3c:
29:6f:7d:24:db:08:0e:1d:d9:0c:65:0b:81:c0:26:
b1:82:18:15:65:fe:6a:ed:42:89:b5:47:a0:b2:95:
50:d8:37:53:8f:09:ec:eb:31:6b:2c:c8:21:f1:13:
1a:62:c2:7a:47:db:d6:b1:1b:db:58:85:c0:13:79:
87:92:c7:09:d2:d1:1f:51:f0:94:57:c5:f3:e3:ed:
52:ca:31:35:df:cb:1d:8c:83:3e:5d:1d:63:89:59:
b3:27:6a:97:ae:48:ee:2b:2e:66:f1:1b:45:ff:fc:
b4:3e:50:2c:91:30:d0:f7:cb:b8:80:90:dc:29:e8:
8b:5d:af:49:d6:8f:38:72:30:38:bd:8a:00:88:25:
4c:b5:9c:fd:5b:cb:55:35:f9:75:d3:fd:fd:2f:17:
c4:28:f7:a7:50:aa:67:18:04:4e:ec:cd:cd:54:63:
15:16:9a:a0:51:ec:ee:f2:6d:d1:2e:49:17:88:0e:
93:8d:e7:f3:0a:49:68:1b:be:da:c6:cf:d1:48:36:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:1D:7B:C4:53:E8:D2:E8:9D:59:93:55:F4:47:B2:DD:A2:51:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6ode8RT6NLonVmTVfRHst2iUVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ea4::/46
Signature Algorithm: sha256WithRSAEncryption
bc:57:17:d0:e6:8c:4c:74:ba:b1:b3:02:57:6c:8a:19:af:85:
53:24:4a:23:31:7b:33:f9:ad:ea:46:b7:90:c2:4d:74:47:4a:
e3:af:45:35:cf:93:c6:99:1c:3a:d6:10:bb:0f:54:a3:36:1b:
50:1f:3a:cb:f8:06:4a:15:2f:b6:d1:3a:8f:03:90:e5:35:34:
e6:50:9c:e1:a2:28:51:e2:ac:94:ef:e2:9c:f1:ba:77:be:06:
53:eb:22:7a:d3:3b:b7:30:87:42:7a:73:e0:7b:4f:26:b2:a9:
66:dc:34:02:5b:97:b9:e0:43:32:3e:9a:5a:f9:bd:ef:dc:6a:
3b:8b:fe:d0:0c:2f:18:5c:d9:76:fc:23:4c:bb:da:03:f5:a1:
15:39:8d:e3:34:76:9b:2c:27:4c:4d:12:4b:78:d6:b0:eb:74:
8c:81:69:30:94:c0:28:5a:47:b1:43:f6:3b:d7:f8:34:4e:cf:
a3:47:7c:44:58:86:76:44:0d:25:5d:d7:73:89:11:23:0d:7a:
49:83:d9:8f:ce:96:a3:d5:49:50:13:5e:d5:25:39:f3:fb:e8:
61:cd:50:6b:46:e9:8e:16:86:9a:ff:7a:ef:df:8c:e1:0a:88:
10:07:f3:e3:03:1a:e1:a7:e8:62:53:1c:e3:3f:cc:6c:d9:3d:
69:84:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:13:28 2026 by rpki-client