This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/V6lGWiZ2jVo3s83BAWD9qzymG-M.roa
File: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (raw, json)
Hash identifier: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=
Subject key identifier: 57:A9:46:5A:26:76:8D:5A:37:B3:CD:C1:01:60:FD:AB:3C:A6:1B:E3
Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial: 019B77C6F1629452A9437A4DF39088B7CD55
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/V6lGWiZ2jVo3s83BAWD9qzymG-M.roa
Signing time: Thu 01 Jan 2026 04:18:05 +0000
ROA not before: Thu 01 Jan 2026 04:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3214
IP address blocks: 89.106.207.0/24 maxlen: 24
192.109.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:f1:62:94:52:a9:43:7a:4d:f3:90:88:b7:cd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Validity
Not Before: Jan 1 04:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57a9465a26768d5a37b3cdc10160fdab3ca61be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:a4:5b:f5:71:72:fe:9e:02:d2:c7:6c:6b:
23:cf:56:b2:b1:13:5a:6b:a4:09:34:42:f3:e6:d2:
8a:0e:8f:89:ef:90:0d:62:40:30:c7:68:f8:18:b9:
e9:de:86:8b:5e:91:ce:15:64:4d:40:96:14:73:cc:
d1:27:8d:cc:e6:58:09:6b:13:1c:cb:e2:b0:cd:41:
f5:d7:9b:55:73:13:67:32:d0:fc:b3:ee:ab:1e:d1:
8c:ad:a5:f0:73:63:7d:13:38:cc:61:60:72:f9:00:
78:4e:01:d6:e4:0b:14:c1:af:3e:7c:f1:6a:07:da:
55:d8:62:bd:88:61:78:c8:9b:18:f4:58:d5:2a:04:
b6:90:79:4a:63:de:69:9b:a9:c0:53:37:e0:34:15:
8f:89:a8:38:24:fd:0b:4b:5e:f1:c4:2d:9c:ac:91:
b8:73:d1:be:ef:71:7a:11:36:f1:ab:a1:cf:9d:d7:
46:7a:75:e7:5b:bf:f7:89:77:9d:1a:f8:20:97:07:
c9:72:21:b8:c2:b8:21:c7:89:98:60:55:11:29:74:
77:29:38:e3:3a:20:26:7a:76:7b:06:be:df:d8:56:
40:f6:49:dc:d7:30:ad:28:2d:1b:bc:6c:24:52:dc:
fc:45:54:76:6f:66:47:61:fb:b3:02:de:15:cf:83:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:46:5A:26:76:8D:5A:37:B3:CD:C1:01:60:FD:AB:3C:A6:1B:E3
X509v3 Authority Key Identifier:
keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/V6lGWiZ2jVo3s83BAWD9qzymG-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.207.0/24
192.109.228.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0b:af:26:3e:f8:01:01:59:14:14:c2:d5:0d:06:44:75:5f:
10:27:3c:f8:16:f6:70:b5:92:80:6e:e4:e7:47:98:40:f4:fd:
72:98:05:3d:56:19:db:d5:e1:b5:34:d6:a3:a4:7b:f1:04:c2:
e1:fd:82:5e:b0:ab:7a:8e:aa:36:d2:c8:be:a9:9e:f2:99:b1:
2d:fd:54:3d:93:82:0a:6f:6a:f7:ed:e9:2e:37:a8:dc:61:b1:
7b:d9:14:24:e4:3c:b4:ce:d4:d7:71:8e:4c:db:55:7f:09:d0:
32:95:6e:96:b7:73:d7:f1:88:b1:9e:fa:b9:ba:f6:81:6d:7b:
2b:9e:e2:ce:85:3c:37:4c:22:8f:44:ca:bb:1c:b5:4e:bf:c0:
9d:04:7e:1e:1f:ad:4f:d2:c4:0e:e0:18:90:99:68:60:86:eb:
19:76:18:11:d8:e6:09:a1:db:d7:35:01:e7:f7:4b:19:45:39:
c8:94:d9:cf:e2:ee:d3:33:a3:f7:e9:20:1c:5e:a2:40:60:65:
6a:f9:4c:ee:79:4e:a1:89:6e:a0:3c:d9:41:df:fa:d7:c0:46:
64:35:f0:ee:35:ed:37:f0:5e:c6:ff:6b:2e:f4:2c:79:09:3a:
32:22:2d:6d:6c:5e:9a:af:c3:06:99:3d:7b:34:8c:39:a7:f1:
77:21:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:32:55 2026 by rpki-client