This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa
File: tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa (raw, json)
Hash identifier: a8njVHA3PgmiXYz6G4XmdwuLn9Y6NsOKeLUNSaCEPZA=
Subject key identifier: B5:9E:AC:7D:BC:70:85:10:AB:64:16:CE:27:03:AD:5C:8F:5D:73:8B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C359C2BFA64C5B3BF76371DF0536B7DA4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa
Signing time: Sat 07 Feb 2026 00:59:13 +0000
ROA not before: Sat 07 Feb 2026 00:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201423
IP address blocks: 2a06:9801:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 19:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:35:9c:2b:fa:64:c5:b3:bf:76:37:1d:f0:53:6b:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 7 00:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b59eac7dbc708510ab6416ce2703ad5c8f5d738b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:47:2e:90:77:90:0a:c6:32:43:1e:47:97:
b5:c3:59:e3:d0:77:23:39:67:1c:bd:72:45:ee:b6:
fe:29:83:0e:92:1d:cc:2f:86:91:c6:68:b6:d3:5b:
9d:a4:28:a0:06:5a:f4:78:29:2d:65:3b:08:89:e5:
41:0d:ef:6d:e1:3f:8d:df:d7:cc:ff:a0:a2:09:ea:
b7:e8:a4:81:80:a0:45:be:8b:78:87:00:80:09:4e:
ea:a8:7f:69:21:a3:36:76:e5:f6:61:d0:65:cc:bb:
c8:64:13:74:12:c0:be:6a:d9:c3:d8:f9:8c:f6:80:
ce:5f:bc:c5:5d:9f:b1:14:db:46:91:bc:86:d8:14:
a4:b9:3d:a8:d2:63:ee:33:1b:02:1c:05:e9:58:93:
2c:71:dd:ce:b5:07:3e:b2:fb:5c:e1:6b:ae:7d:59:
4b:bc:6b:6a:38:2d:9e:c6:35:db:4e:7c:0c:bc:78:
2e:94:f6:35:66:22:14:a1:b1:5f:04:3a:0d:80:38:
89:a3:f2:f4:0c:57:01:ec:9a:86:ed:12:f5:02:e4:
57:43:09:75:d4:64:46:ca:64:c5:4a:bd:10:82:d8:
ba:03:65:fb:f7:cb:f5:b6:1c:30:2e:cf:fb:cf:c2:
be:f8:ff:4a:60:94:50:ec:7c:3d:b5:ff:55:d4:3f:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:AC:7D:BC:70:85:10:AB:64:16:CE:27:03:AD:5C:8F:5D:73:8B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:11::/48
Signature Algorithm: sha256WithRSAEncryption
19:a9:14:86:6a:be:6c:a3:44:a0:cd:36:8e:74:ed:5e:28:35:
b2:9d:1a:9d:27:2f:b9:f8:98:3f:60:87:04:00:1f:3d:fb:04:
fb:07:53:fb:11:6d:9b:7b:fc:e4:ea:fc:9a:ea:6b:c2:2d:ea:
4d:af:6f:ac:33:26:df:30:1b:24:83:90:8a:7f:0d:cd:31:ab:
1c:04:1e:2e:1a:4e:4b:01:39:fb:7d:ca:16:37:f1:4c:38:a0:
4e:19:2d:3e:fa:8c:06:e9:bd:8f:02:37:68:a9:9b:33:e6:df:
20:7a:16:4b:b2:1b:b5:22:4a:07:64:ab:7b:f5:4b:6c:2f:d5:
d5:1a:be:82:bf:a6:61:90:26:b4:9d:ca:4c:ef:fa:d2:37:50:
af:68:e2:e5:41:88:aa:95:0b:b7:a6:19:94:5b:5f:88:a4:21:
63:b7:bf:37:df:32:fc:cd:e8:ee:33:2a:e6:cd:68:d3:3a:01:
c4:52:ce:40:b9:f9:3c:88:69:2f:c2:17:9c:ce:44:bd:5d:67:
b6:a3:cc:c1:9a:e4:5b:6e:eb:46:f7:8b:77:7a:5e:e0:a1:88:
2d:ef:cd:a6:0a:7b:6c:d3:17:64:e4:5d:5f:59:59:ab:d7:92:
fb:1e:02:03:9c:37:94:bb:ed:9c:15:90:6f:55:c4:f5:03:4a:
38:b3:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 04:50:40 2026 by rpki-client