This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/6NomImNZWaHi6JxMplj9lMIruGU.roa
File: 6NomImNZWaHi6JxMplj9lMIruGU.roa (raw, json)
Hash identifier: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=
Subject key identifier: E8:DA:26:22:63:59:59:A1:E2:E8:9C:4C:A6:58:FD:94:C2:2B:B8:65
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019B76EAFE9AD7FE59D4545CDE25808B4719
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/6NomImNZWaHi6JxMplj9lMIruGU.roa
Signing time: Thu 01 Jan 2026 00:17:50 +0000
ROA not before: Thu 01 Jan 2026 00:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 158.94.80.0/20 maxlen: 20
158.94.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:fe:9a:d7:fe:59:d4:54:5c:de:25:80:8b:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Jan 1 00:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8da2622635959a1e2e89c4ca658fd94c22bb865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:cc:d6:dd:e4:cf:8c:8d:11:dd:fd:a1:6b:
5e:eb:6a:7e:7b:56:73:ba:28:5d:03:b1:b3:de:9d:
e9:74:e2:6f:c0:85:2e:dd:a5:7a:33:7e:0c:44:12:
7b:ca:ef:f0:e8:31:4b:83:11:f3:f2:c1:fe:a4:0a:
3f:e9:68:28:44:67:9c:0e:3a:dc:2f:60:7d:77:78:
bb:6c:f7:30:7a:6a:e6:42:2e:d9:0d:f9:8d:22:44:
a9:74:6f:14:ca:ac:03:ca:bf:36:2a:96:de:85:bb:
b3:1a:20:79:fe:16:92:0f:54:94:23:4c:b1:fd:8e:
91:14:db:be:7a:9e:2a:c6:be:c7:57:7d:0d:28:e3:
45:03:6f:4f:02:44:49:e8:e7:00:19:8d:d8:f5:0f:
76:31:0c:ec:2e:29:19:ce:b8:0c:ad:2a:ea:c1:dd:
72:55:fe:a2:34:53:5b:3d:ff:aa:56:df:82:fc:72:
87:fa:6d:b7:54:67:10:7f:e3:0f:47:92:97:79:c6:
dc:03:e5:90:fb:8b:4f:ae:a0:55:31:b7:6e:1a:8d:
94:67:47:f6:ab:1a:24:f6:0b:51:86:7b:59:a7:e1:
3b:c7:2b:f4:69:90:0b:4a:9e:78:b8:41:d9:06:04:
ef:b1:34:fb:8f:0b:ad:cb:1e:d5:9c:4a:c3:ba:a2:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:26:22:63:59:59:A1:E2:E8:9C:4C:A6:58:FD:94:C2:2B:B8:65
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/6NomImNZWaHi6JxMplj9lMIruGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.80.0-158.94.127.255
Signature Algorithm: sha256WithRSAEncryption
51:b0:92:af:59:0e:08:97:2c:13:c0:a3:a1:f1:21:6f:56:cf:
86:ea:dc:a4:c6:71:7a:e6:10:c5:17:e1:f5:04:97:3c:8b:7f:
5c:b1:8a:0d:f4:51:67:55:15:aa:81:15:a4:98:85:a9:77:ea:
52:97:dd:ae:87:34:5d:76:4f:c6:25:bf:db:a1:7b:76:f5:a8:
0b:ef:cc:55:a0:2a:68:ca:20:8d:df:6d:34:3f:48:4e:94:89:
35:6f:04:bd:58:de:0f:c9:1f:52:ac:72:64:e5:24:d1:3a:7b:
da:12:d5:95:67:97:b0:b8:72:d2:bb:0a:69:e3:6b:08:08:03:
d2:a8:6f:94:21:d6:71:5b:e7:2e:1a:8f:db:4c:5b:be:4c:19:
6a:1c:d7:f9:3e:04:eb:c8:23:a6:1b:0c:0b:b9:fb:67:f7:82:
29:c3:5c:5b:2d:bf:01:14:91:49:a2:ae:8b:c9:1d:56:30:df:
9a:f3:d9:66:41:d2:9b:57:e8:d3:f7:30:37:12:e8:e7:0b:0e:
74:fc:33:8c:31:7a:1f:58:73:14:a7:c9:a2:3c:3f:75:c4:c0:
93:f6:9b:c2:87:c0:cf:c4:69:bd:c3:8e:e2:cb:a4:a0:1d:ee:
26:bf:6b:de:6e:a3:9f:be:d8:6e:6f:1d:0b:45:ae:5f:ce:ce:
27:bf:4c:ad
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZt26v6a1/5Z1FRc3iWAi0cZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw
ODUzYTEwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGRhMjYyMjYzNTk1OWExZTJlODljNGNhNjU4ZmQ5NGMyMmJiODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8LM1t3kz4yNEd39oWte62p+e1Zz
uihdA7Gz3p3pdOJvwIUu3aV6M34MRBJ7yu/w6DFLgxHz8sH+pAo/6WgoRGecDjrc
L2B9d3i7bPcwemrmQi7ZDfmNIkSpdG8UyqwDyr82KpbehbuzGiB5/haSD1SUI0yx
/Y6RFNu+ep4qxr7HV30NKONFA29PAkRJ6OcAGY3Y9Q92MQzsLikZzrgMrSrqwd1y
Vf6iNFNbPf+qVt+C/HKH+m23VGcQf+MPR5KXecbcA+WQ+4tPrqBVMbduGo2UZ0f2
qxok9gtRhntZp+E7xyv0aZALSp54uEHZBgTvsTT7jwutyx7VnErDuqJahwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOjaJiJjWVmh4uicTKZY/ZTCK7hlMB8GA1UdIwQY
MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt
YzRiZWZiMjU2MjJjLzEvNk5vbUltTlpXYUhpNkp4TXBsajlsTUlydUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj
LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASeXlAD
BAeeXgAwDQYJKoZIhvcNAQELBQADggEBAFGwkq9ZDgiXLBPAo6HxIW9Wz4bq3KTG
cXrmEMUX4fUElzyLf1yxig30UWdVFaqBFaSYhal36lKX3a6HNF12T8Ylv9uhe3b1
qAvvzFWgKmjKII3fbTQ/SE6UiTVvBL1Y3g/JH1KscmTlJNE6e9oS1ZVnl7C4ctK7
CmnjawgIA9Kob5Qh1nFb5y4aj9tMW75MGWoc1/k+BOvII6YbDAu5+2f3ginDXFst
vwEUkUmirovJHVYw35rz2WZB0ptX6NP3MDcS6OcLDnT8M4wxeh9YcxSnyaI8P3XE
wJP2m8KHwM/Eab3DjuLLpKAd7ia/a95uo5++2G5vHQtFrl/Ozie/TK0=
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:55 2026 by rpki-client