This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/dn6G1pY2LNbKrUDJw7SxMUtrFAI.roa
File: dn6G1pY2LNbKrUDJw7SxMUtrFAI.roa (raw, json)
Hash identifier: wPo7zgIgs1nz24VCLDjd5mZqRSRNNELTR2RI/qtTA14=
Subject key identifier: 76:7E:86:D6:96:36:2C:D6:CA:AD:40:C9:C3:B4:B1:31:4B:6B:14:02
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019B7B3663652925BC6EEDB20BF17B418C27
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/dn6G1pY2LNbKrUDJw7SxMUtrFAI.roa
Signing time: Thu 01 Jan 2026 20:18:40 +0000
ROA not before: Thu 01 Jan 2026 20:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 144.56.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:63:65:29:25:bc:6e:ed:b2:0b:f1:7b:41:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jan 1 20:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=767e86d696362cd6caad40c9c3b4b1314b6b1402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:de:0f:ed:b5:eb:3f:cc:66:0f:86:c1:9a:
79:6e:57:4a:80:b0:4b:4a:18:1e:85:c0:1c:d7:b5:
6a:7a:2a:fc:d1:69:c6:0e:33:04:e1:23:31:ec:54:
2c:1e:76:2b:5b:12:7b:75:95:30:64:30:aa:0d:23:
b5:6b:d7:c3:56:c3:99:58:9b:a9:9d:7f:d9:37:9b:
1c:28:a5:20:14:36:5c:39:3d:da:0f:81:4a:63:49:
a9:b0:e9:6d:e2:7b:e0:e3:c6:e8:02:44:fa:17:63:
6c:bb:5d:d3:2f:b5:4b:3e:99:60:85:c3:26:24:ab:
6d:bc:76:fd:24:f4:fc:4d:d1:62:25:12:15:47:83:
74:15:92:28:0e:09:28:0a:4d:75:35:cd:78:05:0d:
98:32:82:13:8e:e7:13:c9:93:e7:15:be:ea:b2:55:
df:01:90:7d:2b:d5:27:fa:73:83:ce:cf:d6:51:8a:
5c:47:7c:9e:6c:19:62:b3:d4:de:dc:56:24:2b:2e:
7c:cd:12:a8:b7:6f:98:ec:7e:2b:4f:11:f0:57:52:
0b:3b:1c:7f:f8:f3:4b:b3:32:fe:3e:5e:62:d3:b1:
2f:6a:7f:ad:b8:68:e3:67:81:94:f8:23:8e:ea:7b:
ff:db:12:ac:43:17:42:de:8d:6d:7c:cb:5c:62:60:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7E:86:D6:96:36:2C:D6:CA:AD:40:C9:C3:B4:B1:31:4B:6B:14:02
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/dn6G1pY2LNbKrUDJw7SxMUtrFAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.7.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2e:37:2b:5c:29:83:5d:61:20:53:15:1f:73:f1:11:4d:89:
de:f6:75:66:14:ac:e5:35:f9:1d:2d:57:c8:f8:90:37:15:83:
b9:15:02:5d:4d:b4:0b:f9:98:f4:4a:d2:b0:92:b2:56:9d:b2:
32:07:13:dd:7b:76:6f:41:10:90:f4:12:bd:e5:04:f4:8b:54:
40:3e:f1:0d:80:3f:ac:96:36:12:64:6c:1b:55:e9:13:52:28:
00:5f:58:f1:f2:3f:84:2f:a6:0e:ce:0d:29:cc:22:30:c2:04:
0d:72:84:9b:1a:f0:f8:b2:c5:0b:3f:01:d4:fc:e6:f1:0c:11:
83:19:9c:b0:50:de:59:69:85:e6:de:c0:73:a2:a6:d4:d0:c2:
03:c5:31:a9:f8:ab:b9:cb:cd:42:49:3d:9b:2c:06:3b:ef:cc:
64:86:a0:6b:17:44:01:dc:56:23:80:ec:7f:fc:f1:d6:b2:6e:
a5:ef:8b:14:83:d7:0a:e7:00:8d:ed:cf:a5:1e:02:c8:2b:6c:
c9:2d:39:e2:a5:7b:87:c0:c4:7d:a4:50:a7:64:35:d5:5d:c5:
50:8b:83:50:c7:32:65:89:82:7a:4f:81:bc:de:ea:99:8e:e7:
a1:fb:ac:1d:9d:af:27:e3:91:ba:99:17:7c:c3:57:c2:fa:a2:
54:25:2d:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NmNlKSW8bu2yC/F7QYwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjdlODZkNjk2MzYyY2Q2Y2FhZDQwYzljM2I0YjEzMTRiNmIxNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtbeD+216z/MZg+GwZp5bldKgLBL
ShgehcAc17Vqeir80WnGDjME4SMx7FQsHnYrWxJ7dZUwZDCqDSO1a9fDVsOZWJup
nX/ZN5scKKUgFDZcOT3aD4FKY0mpsOlt4nvg48boAkT6F2Nsu13TL7VLPplghcMm
JKttvHb9JPT8TdFiJRIVR4N0FZIoDgkoCk11Nc14BQ2YMoITjucTyZPnFb7qslXf
AZB9K9Un+nODzs/WUYpcR3yebBlis9Te3FYkKy58zRKot2+Y7H4rTxHwV1ILOxx/
+PNLszL+Pl5i07Evan+tuGjjZ4GU+COO6nv/2xKsQxdC3o1tfMtcYmDhawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZ+htaWNizWyq1AycO0sTFLaxQCMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvZG42RzFwWTJMTmJLclVESnc3U3hNVXRyRkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgHMA0G
CSqGSIb3DQEBCwUAA4IBAQBDLjcrXCmDXWEgUxUfc/ERTYne9nVmFKzlNfkdLVfI
+JA3FYO5FQJdTbQL+Zj0StKwkrJWnbIyBxPde3ZvQRCQ9BK95QT0i1RAPvENgD+s
ljYSZGwbVekTUigAX1jx8j+EL6YOzg0pzCIwwgQNcoSbGvD4ssULPwHU/ObxDBGD
GZywUN5ZaYXm3sBzoqbU0MIDxTGp+Ku5y81CST2bLAY778xkhqBrF0QB3FYjgOx/
/PHWsm6l74sUg9cK5wCN7c+lHgLIK2zJLTnipXuHwMR9pFCnZDXVXcVQi4NQxzJl
iYJ6T4G83uqZjueh+6wdna8n45G6mRd8w1fC+qJUJS3D
-----END CERTIFICATE-----
Generated at Mon Jan 19 22:33:28 2026 by rpki-client