This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/w6TpA7AFbg2BRMhVTS2rxPxSelU.roa
File: w6TpA7AFbg2BRMhVTS2rxPxSelU.roa (raw, json)
Hash identifier: plBsyiSdd6Ro/QDLXlxiZ/IWUOSBobSnHGjMSlmwOzw=
Subject key identifier: C3:A4:E9:03:B0:05:6E:0D:81:44:C8:55:4D:2D:AB:C4:FC:52:7A:55
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019B7BA40A3D0164288CE385E14E60F85F39
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/w6TpA7AFbg2BRMhVTS2rxPxSelU.roa
Signing time: Thu 01 Jan 2026 22:18:26 +0000
ROA not before: Thu 01 Jan 2026 22:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201231
IP address blocks: 91.103.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:0a:3d:01:64:28:8c:e3:85:e1:4e:60:f8:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jan 1 22:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3a4e903b0056e0d8144c8554d2dabc4fc527a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:d8:65:3b:82:a6:6f:9b:8a:14:cb:60:2d:
50:09:51:83:55:6c:9e:55:09:0c:75:62:2b:e4:0f:
ad:a7:23:63:08:aa:a9:6d:23:97:6d:be:aa:ad:4b:
b7:f3:4f:b9:ed:a5:60:42:d7:b1:08:73:87:4c:73:
17:d6:e6:b0:3d:72:77:dc:b3:c6:f6:11:5b:ab:0f:
02:2c:9e:b1:3b:4c:a7:ac:ee:38:6f:b5:cd:6d:d2:
ae:ba:8d:fa:41:82:6e:06:f6:4f:4f:49:a5:6a:19:
d2:4a:49:1d:e5:64:6b:88:89:07:d9:23:a4:25:c3:
7e:bf:23:30:fb:b9:d8:9c:f4:47:02:a6:df:e7:c5:
ca:ef:9c:96:0c:e8:03:23:39:2e:8c:62:fa:07:45:
3b:67:0c:ae:89:59:3e:ed:cc:3c:57:66:53:91:f8:
d9:a7:4a:bd:ef:ea:ea:e8:28:6a:65:1f:69:b3:ad:
e2:2b:73:b2:32:1c:6c:36:ba:48:32:21:33:b0:d9:
d5:54:2a:4b:f1:57:55:20:ac:09:d8:77:8a:1b:9f:
c9:8e:79:5c:67:79:38:e2:16:c9:6c:fb:d4:21:1d:
9c:7e:64:6b:2a:9b:4b:59:90:d3:ee:12:b5:12:46:
38:e7:49:97:fa:94:f8:0d:59:cd:15:92:d6:59:dc:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:E9:03:B0:05:6E:0D:81:44:C8:55:4D:2D:AB:C4:FC:52:7A:55
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/w6TpA7AFbg2BRMhVTS2rxPxSelU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.254.0/24
Signature Algorithm: sha256WithRSAEncryption
13:63:f9:31:33:b9:d5:96:61:bb:8a:81:6d:d5:e9:cc:f4:c3:
54:a4:02:ea:01:dd:39:45:92:fb:98:ce:53:bc:e6:01:68:54:
85:76:ed:e1:e3:35:24:a5:50:87:40:0c:59:e9:23:73:9a:60:
9a:7c:96:0a:34:22:67:0b:70:ef:98:8f:2d:45:df:95:b0:d8:
d8:0a:e5:37:08:03:44:00:6b:4a:a0:ff:09:ef:75:87:6b:1d:
18:24:87:e3:29:90:dd:3e:94:89:63:99:35:5e:8a:7a:e8:b9:
47:3f:6f:2b:e6:c5:ee:f4:b6:89:89:59:3b:56:d2:dd:59:08:
c2:93:00:b8:db:a9:f6:39:f1:82:dc:06:c2:b6:03:9e:2a:79:
e8:24:79:03:ec:32:bd:37:84:bc:78:0f:db:48:1a:ec:ac:66:
7a:af:bf:c5:bf:b1:49:98:ea:fa:8e:24:3c:97:2b:0c:d9:77:
48:8a:3f:aa:12:23:3c:e0:ed:be:44:6e:dd:87:e7:70:21:da:
ba:cf:ce:80:e3:9d:43:50:54:1d:ca:ee:d7:1c:2b:8b:e7:a5:
d8:57:1e:b4:ce:d4:7a:49:a9:62:d5:be:58:41:b1:4f:9a:c7:
16:31:5c:f2:00:28:a5:da:8f:1b:b3:5d:4b:b4:4e:22:b0:6a:
cf:c6:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:13 2026 by rpki-client