This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/B1HLT6HVLwB92rstkDVPtGcJb6k.roa
File: B1HLT6HVLwB92rstkDVPtGcJb6k.roa (raw, json)
Hash identifier: BvAQr3GV41olKgINXAE1/bgcJFPiuKEnefG0tTP0pQg=
Subject key identifier: 07:51:CB:4F:A1:D5:2F:00:7D:DA:BB:2D:90:35:4F:B4:67:09:6F:A9
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019AA33A8F733463E84C5ADFF8CEE15972A1
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/B1HLT6HVLwB92rstkDVPtGcJb6k.roa
Signing time: Thu 20 Nov 2025 21:45:15 +0000
ROA not before: Thu 20 Nov 2025 21:45:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.8.0/23 maxlen: 24
82.206.16.0/22 maxlen: 22
82.206.16.0/23 maxlen: 23
82.206.16.0/24 maxlen: 24
82.206.18.0/24 maxlen: 24
82.206.81.0/24 maxlen: 24
82.206.82.0/23 maxlen: 23
82.206.84.0/22 maxlen: 24
82.206.88.0/21 maxlen: 21
82.206.96.0/21 maxlen: 21
82.206.104.0/22 maxlen: 22
82.206.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:a3:3a:8f:73:34:63:e8:4c:5a:df:f8:ce:e1:59:72:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Nov 20 21:45:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0751cb4fa1d52f007ddabb2d90354fb467096fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:12:05:80:7d:b4:ae:c2:03:ec:86:5e:e1:
5e:67:09:e6:2e:26:df:b2:e2:75:15:8c:18:f2:39:
9d:4b:0b:e2:d0:67:ee:74:4f:d9:8c:8e:dc:3d:f4:
89:15:80:d9:10:ef:95:cc:f2:bf:f9:7e:3b:0f:12:
d7:1c:a0:75:48:ef:18:6c:27:9c:4e:79:7e:31:d3:
3a:28:45:0e:ba:2a:61:9b:7b:4b:38:94:b9:71:24:
91:bb:9c:c5:0c:9c:28:5c:38:d1:44:4d:e3:b8:23:
82:33:5a:24:0e:61:3e:20:f5:bd:48:76:80:8b:62:
26:b7:9a:6f:c2:3b:2a:a4:21:d1:37:9d:b0:d5:b0:
63:4c:c7:f5:fb:fa:f5:da:11:d8:a3:e4:ed:0c:3f:
35:bb:49:34:5c:62:89:52:f5:63:c1:0a:a6:9e:ee:
a0:76:ee:d9:41:29:7a:57:67:ee:44:4e:f3:8d:84:
a0:cf:47:d3:e9:12:07:b1:44:65:4a:ea:2d:a3:cd:
5c:9c:50:fc:a6:6c:67:67:13:13:74:41:e8:ce:a1:
a8:6d:91:73:4b:23:84:5c:c4:85:76:b0:14:52:f5:
91:3c:98:2e:02:fb:48:e7:97:8d:e8:82:bb:ae:53:
3f:55:17:fa:89:76:56:42:8e:ae:9a:6e:3c:3e:aa:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:51:CB:4F:A1:D5:2F:00:7D:DA:BB:2D:90:35:4F:B4:67:09:6F:A9
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/B1HLT6HVLwB92rstkDVPtGcJb6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.9.255
82.206.16.0/22
82.206.81.0-82.206.107.255
82.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:6b:9b:f0:56:5d:ea:3f:80:c5:d8:84:63:e1:2d:9a:85:c9:
30:02:a5:ee:ff:09:56:d6:b6:7e:2e:fc:ab:ab:b7:1b:ac:1d:
b5:2b:a1:25:44:e6:a3:b4:4a:b4:ce:4d:8b:d2:9c:55:73:46:
63:e6:bf:b7:3a:c2:70:6f:c6:02:da:b8:4f:26:fb:26:29:93:
9a:e3:80:f0:d9:d3:ca:64:10:76:aa:c3:07:5b:a4:ee:17:b7:
e5:d5:2a:79:ea:85:1b:67:53:8d:3e:9a:01:2e:43:b1:cb:e1:
75:43:ca:c7:c4:1b:40:ee:38:79:11:d4:4e:63:f0:9e:30:e7:
7c:90:d4:4a:a1:0f:4b:12:e1:08:95:aa:80:2a:3a:f6:3d:5f:
b5:fc:4d:ab:e0:64:8d:d2:54:95:48:a2:d4:7c:db:84:96:79:
0f:ea:b8:bd:6e:f8:b2:27:2d:75:4e:83:01:44:19:a0:54:08:
6b:0a:6a:5f:3c:c9:10:99:e4:e5:1e:8a:48:5e:c3:1d:fd:97:
8e:27:59:51:94:b2:cf:78:a6:cf:d2:cd:11:ed:ea:d0:cc:bc:
6a:90:63:a5:4e:73:e2:bc:93:6e:5a:3b:20:b0:1b:54:a0:29:
48:4f:9f:35:85:7a:74:9b:f3:e5:a2:86:0f:36:c1:9d:83:21:
9c:4c:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:49:19 2025 by rpki-client