This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/B4c6N2MizK8adC1jI5nCnuasVyQ.roa
File: B4c6N2MizK8adC1jI5nCnuasVyQ.roa (raw, json)
Hash identifier: vkr5AztZBkpOoQXyn9yDEdd3WF22aoRXCoS3gCShBNw=
Subject key identifier: 07:87:3A:37:63:22:CC:AF:1A:74:2D:63:23:99:C2:9E:E6:AC:57:24
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019B7FF25AC48B2A98F1BB6E9E6C3603EF58
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/B4c6N2MizK8adC1jI5nCnuasVyQ.roa
Signing time: Fri 02 Jan 2026 18:22:27 +0000
ROA not before: Fri 02 Jan 2026 18:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 2a02:1140:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:5a:c4:8b:2a:98:f1:bb:6e:9e:6c:36:03:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 18:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07873a376322ccaf1a742d632399c29ee6ac5724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:b5:09:c3:7e:1a:fe:80:13:52:89:70:b9:
2f:28:79:87:76:34:c1:6b:23:ab:14:10:41:46:93:
45:d6:31:cb:63:b8:df:6e:3d:2a:c3:5f:13:86:ee:
30:3d:f0:f5:3f:fe:e4:36:98:ee:a0:37:ed:c5:b3:
80:11:68:d1:22:00:53:46:35:de:96:8d:2a:c4:cd:
e6:ee:77:06:c8:eb:d8:68:20:ea:07:64:5d:1f:e7:
be:e1:83:5a:a4:c7:ba:9e:5d:d2:0d:ae:ed:0e:96:
a4:48:c1:cf:51:b2:b1:1d:41:ed:b1:4a:c4:cd:e1:
c8:18:a6:e9:ab:a3:e0:59:f4:d1:c0:f8:a8:e9:58:
e1:2a:30:a6:e4:4b:93:7d:48:54:29:fd:91:28:be:
a5:f3:aa:fd:69:04:68:94:ec:a5:c1:d4:c9:5f:3c:
0a:ec:3a:66:c8:c0:7c:4b:a4:1a:84:9f:d0:3e:f2:
c8:e6:d7:9d:3c:b4:4c:ea:a6:03:88:04:8d:0a:86:
b7:bb:16:44:f6:bf:44:86:39:62:3b:95:0f:91:a2:
bd:48:73:36:85:f9:f4:db:da:64:f7:c3:6f:de:59:
e5:c3:9e:fc:51:70:d1:a2:b3:e2:23:4f:ad:7f:d4:
57:bf:bf:c5:aa:d3:cb:31:c2:2f:06:3e:a0:a8:48:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:3A:37:63:22:CC:AF:1A:74:2D:63:23:99:C2:9E:E6:AC:57:24
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/B4c6N2MizK8adC1jI5nCnuasVyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1140:200::/40
Signature Algorithm: sha256WithRSAEncryption
27:63:90:5d:39:62:87:c7:9a:0c:f7:30:07:c2:1a:bc:50:74:
3d:b2:69:58:9c:c5:8b:5a:a9:4e:cb:7b:90:41:3b:9b:9f:e3:
88:e0:54:d9:dc:85:ab:d8:a0:82:7d:a9:d9:62:52:2c:85:81:
b8:82:05:14:4b:4d:bc:2b:a2:18:d6:b5:9a:f0:59:fe:3d:88:
9f:e4:11:4c:1b:86:d0:11:33:bc:f4:70:be:2f:ed:65:90:35:
74:76:c4:03:84:d0:96:a9:41:f3:3a:f5:5f:99:22:31:ab:b9:
5d:6c:09:6a:25:bf:bd:49:ea:68:72:6c:96:a4:1a:56:65:08:
7f:18:67:52:77:6f:ac:99:29:d6:32:72:86:45:e3:30:3d:ba:
da:d8:6e:52:91:cb:a2:95:ea:a8:4c:41:23:b4:33:e9:d1:8f:
65:05:08:01:a4:86:35:7c:bf:b0:01:32:7e:60:bf:d3:bc:70:
5e:be:f3:da:e2:ec:17:25:92:df:4c:a3:c5:0e:72:da:8b:25:
cd:32:c9:28:a8:7c:ca:41:f5:c6:75:1a:23:5c:75:f1:2d:93:
83:4a:c8:71:dd:24:28:c3:0c:5d:ca:02:a9:79:69:f9:92:df:
cb:e2:ea:64:1c:07:08:ed:3f:80:75:ee:a0:e9:d8:d7:f3:c4:
8f:6a:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:50:34 2026 by rpki-client