This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0p6RxjBfxoQLWr8knBK5cbdgRVw.roa
File: 0p6RxjBfxoQLWr8knBK5cbdgRVw.roa (raw, json)
Hash identifier: dI5i12OOBcX/mzaIQAKoixo8L72IU5/9stUyc/fx/gY=
Subject key identifier: D2:9E:91:C6:30:5F:C6:84:0B:5A:BF:24:9C:12:B9:71:B7:60:45:5C
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019B7F159B098C6025422A31B063F8C2AB1A
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0p6RxjBfxoQLWr8knBK5cbdgRVw.roa
Signing time: Fri 02 Jan 2026 14:21:20 +0000
ROA not before: Fri 02 Jan 2026 14:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12222
IP address blocks: 2.16.36.0/24 maxlen: 24
2.16.37.0/24 maxlen: 24
2.22.60.0/24 maxlen: 24
2.22.226.0/24 maxlen: 24
2.22.227.0/24 maxlen: 24
80.67.64.0/24 maxlen: 24
80.67.65.0/24 maxlen: 24
80.67.70.0/24 maxlen: 24
80.67.73.0/24 maxlen: 24
88.221.208.0/24 maxlen: 24
88.221.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 07:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:9b:09:8c:60:25:42:2a:31:b0:63:f8:c2:ab:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 14:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d29e91c6305fc6840b5abf249c12b971b760455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:81:1c:3c:82:51:b9:61:ae:4b:24:6c:c3:
7a:c9:a5:53:7b:d1:0d:a1:ab:e9:de:31:55:43:6b:
8d:1f:80:39:6c:89:56:b1:7b:b9:b2:b9:ff:0e:36:
26:66:68:5f:cf:30:09:e7:c7:c4:b8:63:f7:e7:13:
55:fb:8e:26:f2:ea:aa:47:4a:7a:95:c0:78:63:c3:
bc:8a:e1:15:24:66:80:d4:56:ae:f5:f7:d9:97:d1:
3f:23:bf:9c:fe:2a:69:f0:6f:70:a9:b4:14:91:7e:
d8:5c:66:81:f1:24:70:8d:29:73:ee:07:ff:54:3d:
9b:11:18:f2:aa:bb:79:9e:b9:c0:50:92:8b:89:9a:
b1:08:de:48:5a:c4:03:cf:a8:e1:e7:8d:41:17:8f:
22:c6:71:5e:4b:ed:42:51:40:05:8f:2a:dc:d1:f5:
fb:ea:44:1b:48:68:02:c7:66:32:a8:38:ce:1e:4e:
47:1f:c2:92:a7:6a:99:0b:3d:5d:00:6c:93:21:f2:
67:91:6f:83:38:a4:43:af:80:60:3e:68:7d:a2:a9:
ef:dd:18:05:6f:b8:60:14:7f:0c:3e:d3:5e:a4:f2:
6e:e3:f2:c0:b0:2a:2e:b3:ee:d4:b0:c0:e7:eb:2a:
10:8f:93:ab:a3:09:eb:de:34:8f:71:b0:ec:30:96:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:91:C6:30:5F:C6:84:0B:5A:BF:24:9C:12:B9:71:B7:60:45:5C
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0p6RxjBfxoQLWr8knBK5cbdgRVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.36.0/23
2.22.60.0/24
2.22.226.0/23
80.67.64.0/23
80.67.70.0/24
80.67.73.0/24
88.221.208.0/23
Signature Algorithm: sha256WithRSAEncryption
14:b6:62:fb:de:9e:e6:7c:10:f1:2f:1f:15:00:c5:c8:80:c2:
bb:34:93:c3:25:97:ad:57:5b:9c:44:cc:5b:c8:67:20:f6:04:
82:b8:08:3d:23:fc:6b:72:e4:37:13:df:0c:43:ab:ad:8a:9d:
de:82:7a:8f:db:73:99:55:e7:20:4a:3a:d7:17:bd:5d:d1:89:
73:28:ea:3e:00:88:2f:0d:b7:6f:5d:49:f3:be:24:ab:3a:52:
07:af:7a:9f:8f:af:06:24:10:e3:9a:13:6c:0d:21:ed:ea:79:
de:64:6a:c4:66:f0:7b:10:b6:85:49:8d:dc:b4:19:fd:39:f3:
02:26:fb:95:d6:e3:0e:9c:bc:5d:b6:61:6e:fc:be:6b:3c:7e:
e8:e3:17:67:2f:ee:3a:2c:99:a7:f1:a1:3b:6e:62:a5:69:a5:
04:34:a8:2f:d8:1c:f5:6d:a3:6e:a0:b6:a4:a7:e8:42:0b:6c:
5c:22:38:4c:1d:7d:51:bd:ff:08:b8:f2:5b:e1:7c:b4:c6:e8:
5c:f9:6a:c5:3d:ad:84:d6:85:1f:a5:e0:d6:b6:44:b3:4f:38:
45:7d:9c:a5:60:6c:3a:77:4f:62:fd:83:da:8e:a8:0f:56:a1:
9b:ec:97:ce:6b:59:34:75:17:00:df:4d:18:38:e2:84:6f:50:
93:a4:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:46 2026 by rpki-client