This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/K-_2uZ2W_94glxC861Amn-MX16Y.roa
File: K-_2uZ2W_94glxC861Amn-MX16Y.roa (raw, json)
Hash identifier: 8kuZRTyoDvaEWZI2mWm260ca1KMDIA3sdGDe2hunErA=
Subject key identifier: 2B:EF:F6:B9:9D:96:FF:DE:20:97:10:BC:EB:50:26:9F:E3:17:D7:A6
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 019B7D5ADD5C5673BF11FD50B583F47B950C
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/K-_2uZ2W_94glxC861Amn-MX16Y.roa
Signing time: Fri 02 Jan 2026 06:17:45 +0000
ROA not before: Fri 02 Jan 2026 06:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56821
IP address blocks: 89.239.24.0/21 maxlen: 21
2a02:4007::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:dd:5c:56:73:bf:11:fd:50:b5:83:f4:7b:95:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Jan 2 06:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2beff6b99d96ffde209710bceb50269fe317d7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:56:5f:e8:0e:c6:f7:31:f1:48:78:93:95:
bb:0e:fe:96:13:e8:4c:90:b4:d5:7b:10:cf:f3:3a:
04:1b:61:4d:22:6b:12:6a:4a:e3:60:07:92:b4:d4:
2a:c0:8b:dd:7b:70:c2:c7:aa:35:8a:45:1c:e8:26:
6f:4a:1e:4c:c9:4d:2e:95:bc:91:2a:c8:22:2d:59:
6f:23:2c:59:89:4c:e0:b6:0e:cd:7a:59:04:d5:9d:
9e:e6:45:c0:9a:92:f8:6e:2c:f4:78:75:f7:99:6e:
86:ea:04:c9:77:ff:8f:fc:71:01:6a:f2:5b:16:ee:
9b:83:c7:9f:df:60:9f:4a:84:d2:4f:11:f3:d1:45:
c2:a1:c0:5c:5b:e2:7c:c2:45:d0:6f:12:a4:ef:6d:
17:cb:ae:79:61:69:8c:cf:fc:61:c5:f0:c8:ea:1d:
7e:c3:ca:89:4e:21:c3:82:e1:45:43:6a:58:c9:0e:
ee:b5:40:6a:77:7a:0b:ba:9f:59:61:e5:85:c5:14:
ad:f1:1e:4e:2a:5b:87:8f:d2:f6:41:22:9e:4d:dd:
5c:81:16:45:8c:f3:bd:46:b7:4d:34:a8:d5:da:ad:
49:f3:06:dd:bd:90:05:a0:f4:77:e4:b9:26:c2:ff:
31:b2:57:22:54:9d:65:23:e1:76:f2:79:a4:94:80:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:F6:B9:9D:96:FF:DE:20:97:10:BC:EB:50:26:9F:E3:17:D7:A6
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/K-_2uZ2W_94glxC861Amn-MX16Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.239.24.0/21
IPv6:
2a02:4007::/32
Signature Algorithm: sha256WithRSAEncryption
92:fa:4e:39:cc:58:da:cc:52:26:e8:97:31:b0:03:04:13:03:
69:fb:3c:b3:dc:24:22:c2:7b:44:a4:70:f3:f4:d5:80:7e:28:
a5:6c:3c:b8:d2:89:af:98:4b:99:69:16:57:33:ae:6c:da:67:
23:31:08:1c:01:78:66:88:a2:62:d8:ce:46:e2:b0:59:8e:1f:
58:a3:79:6f:c0:c6:85:53:47:6a:78:ba:96:3d:d9:dd:4e:cf:
ed:a6:3c:d0:da:03:56:27:d1:d1:0e:0b:2f:2f:b5:d4:65:0f:
f7:bb:c9:08:13:73:94:ce:03:5e:86:49:d2:e6:26:be:f1:54:
75:91:02:ce:f3:10:e0:ed:1e:0d:7c:ac:c3:02:2b:03:f9:90:
6b:09:c3:15:5b:2c:21:69:cb:b2:59:a8:41:0f:e7:6b:05:70:
b7:b7:18:af:13:43:6d:6d:f6:54:5f:93:37:be:6f:fd:0f:4c:
2d:89:10:7c:fd:05:29:d4:e5:46:54:64:16:52:2c:f6:de:59:
2e:1e:f8:a2:c2:99:89:bd:16:90:c3:17:be:f3:59:10:0e:63:
4f:e2:b5:70:53:7a:52:ed:54:ff:11:f2:29:39:d0:72:93:a8:
36:ad:18:57:09:a3:d1:22:ac:d3:b2:81:bb:b8:9e:9a:ca:3d:
1b:34:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:07 2026 by rpki-client