This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa
File: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (raw, json)
Hash identifier: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=
Subject key identifier: 0B:EE:BE:5D:3F:AD:5E:3A:60:BF:34:41:99:04:55:5D:A2:6F:55:D2
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019B783524C1CBEFE5D649E108F98B4FCFB8
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa
Signing time: Thu 01 Jan 2026 06:18:27 +0000
ROA not before: Thu 01 Jan 2026 06:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401443
IP address blocks: 45.145.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:24:c1:cb:ef:e5:d6:49:e1:08:f9:8b:4f:cf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 1 06:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0beebe5d3fad5e3a60bf34419904555da26f55d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:ff:3b:80:1b:df:cf:7e:3e:bd:57:94:09:
96:38:6a:80:bf:25:72:f7:b5:c9:46:32:72:96:4d:
d8:75:bc:6b:33:80:86:b7:3e:87:ee:cd:d8:28:3f:
f6:c4:f3:d3:6f:69:1a:2a:24:31:a1:91:c2:3c:77:
ed:87:5c:ce:05:78:cd:78:c4:c6:df:d1:5e:cd:e6:
20:46:05:5d:8e:2e:66:65:9b:b4:76:7e:b0:ab:ac:
b4:db:cf:af:15:e2:b2:89:7c:26:ff:70:58:da:3f:
f2:14:33:db:f3:68:a8:a2:ba:31:c7:46:e6:45:38:
a6:02:88:99:00:99:34:eb:55:01:0d:68:e3:1e:bc:
18:e6:9f:32:e3:2b:76:ee:b4:98:53:8a:c8:4b:9d:
f5:20:e6:f8:4b:0e:5e:69:b7:e9:9a:ca:72:b3:57:
81:08:bd:59:ae:a8:ac:65:7e:e0:dd:8d:52:3d:af:
24:30:96:31:2a:52:61:e8:f7:0f:1c:f5:10:69:a8:
ff:ec:77:d1:74:b1:a8:84:65:53:05:28:c0:b1:8b:
59:33:a3:f0:77:a9:54:c4:a2:49:ae:47:58:2d:3f:
40:65:f3:92:69:5f:00:d9:c4:9b:1f:7f:97:00:b8:
d7:79:5b:16:ce:5e:86:51:3c:3f:5e:a7:3b:25:e4:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:BE:5D:3F:AD:5E:3A:60:BF:34:41:99:04:55:5D:A2:6F:55:D2
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/24
Signature Algorithm: sha256WithRSAEncryption
11:be:19:95:c8:ac:11:75:ac:a2:a9:46:d1:e0:36:10:de:6f:
83:63:7c:07:34:17:e6:17:cb:39:bd:cf:15:1f:2c:a3:85:8a:
49:67:54:aa:70:d3:00:d8:4a:0e:e5:66:2b:5a:dd:3d:1a:88:
03:29:26:7f:c4:3d:ee:1b:5a:15:de:f4:dd:af:7d:d1:14:63:
08:63:a2:a8:c4:e0:64:4b:9e:d0:21:63:7f:3d:ec:45:76:54:
d1:27:dd:82:40:15:6d:35:4a:29:cf:dd:d8:7e:dd:c7:b6:d8:
87:fa:81:ac:3d:56:51:8f:87:d1:2a:df:38:82:1c:b1:a5:c4:
3c:81:0f:18:ac:8b:3d:2d:4d:26:62:54:17:77:3a:8b:98:6d:
94:c8:03:62:0c:58:03:05:81:94:71:4b:e8:53:a8:af:dd:40:
88:1f:f8:76:74:cd:b7:61:5c:8d:24:ce:11:67:83:be:a7:ae:
6b:ba:79:1d:a7:3b:76:44:19:cc:3e:19:71:41:83:03:c4:51:
9e:1e:8e:81:c7:c3:7c:96:1e:88:20:9e:0b:05:37:24:71:b5:
9c:fd:68:12:95:dc:2a:eb:52:45:af:22:0f:d9:f4:e1:d4:eb:
b1:e3:3f:0d:6e:a9:bc:94:b7:b8:83:aa:66:8c:56:30:a6:fb:
09:ec:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:13:09 2026 by rpki-client