This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6d1tGThrRfKbnRrEiW-QlMUizF4.roa
File: 6d1tGThrRfKbnRrEiW-QlMUizF4.roa (raw, json)
Hash identifier: 5ooIKsckvhIwG2sF6H2E7dFHh4ksHZwdOUkrFpZE27k=
Subject key identifier: E9:DD:6D:19:38:6B:45:F2:9B:9D:1A:C4:89:6F:90:94:C5:22:CC:5E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB398D2B63EF125AD882BC6A836455
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6d1tGThrRfKbnRrEiW-QlMUizF4.roa
Signing time: Fri 02 Jan 2026 08:20:29 +0000
ROA not before: Fri 02 Jan 2026 08:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53616
IP address blocks: 151.242.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:39:8d:2b:63:ef:12:5a:d8:82:bc:6a:83:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9dd6d19386b45f29b9d1ac4896f9094c522cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:49:ec:ed:bc:31:1f:0a:26:b8:a7:61:ee:
2f:ec:bc:46:e5:d0:12:f0:5c:bc:19:81:a6:7e:6e:
d8:f1:86:1d:71:6c:16:0d:65:22:c0:b5:47:86:58:
8f:36:c0:ef:5e:f6:56:46:18:2e:55:52:f6:b3:43:
c6:30:3b:fa:1a:5b:78:e4:4a:92:b7:2d:f1:3a:b3:
11:84:1a:96:0c:92:86:ff:0d:68:08:46:86:6c:5a:
10:13:ce:94:8f:f3:73:8e:30:94:ca:a0:30:2f:40:
36:0b:b6:dc:11:8c:20:c5:37:a7:fb:2d:a3:7e:c1:
3c:2c:dc:67:7a:3f:82:fe:30:39:a2:b8:9c:32:8e:
54:78:7f:25:6f:87:35:ff:14:83:8b:53:1e:5c:88:
8c:ab:b0:26:25:bb:2e:ba:f1:47:91:73:c7:a2:b6:
2a:00:27:1d:d9:a0:32:56:16:0c:0c:e9:8d:d4:72:
80:22:da:a1:61:5d:89:1b:4d:26:31:3a:90:eb:1b:
8f:fe:c4:44:a6:04:8a:23:ba:80:23:0e:12:db:02:
ff:a8:5d:a0:bd:ed:f7:e1:a2:5c:16:05:ec:be:4c:
eb:00:d5:5e:00:c1:5d:ff:a9:43:bb:e7:37:a5:b0:
a7:5c:d9:e5:a2:45:43:60:e9:13:d5:83:33:a2:e2:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:6D:19:38:6B:45:F2:9B:9D:1A:C4:89:6F:90:94:C5:22:CC:5E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6d1tGThrRfKbnRrEiW-QlMUizF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.64.0/24
Signature Algorithm: sha256WithRSAEncryption
26:63:22:7d:5e:4d:9f:bb:86:62:67:bc:39:86:ce:23:e8:b3:
57:ac:46:1b:d3:d8:4a:2f:d8:10:b6:5e:e6:fe:fd:79:97:eb:
71:a0:29:e9:f3:57:0c:11:57:97:15:ff:3c:aa:a2:45:2c:02:
0e:16:ff:98:39:7f:c0:c9:d8:fe:6e:ff:2f:4b:74:36:79:9b:
ed:cd:0b:b9:de:fb:b6:b6:67:2d:9e:3b:7b:bf:79:60:30:55:
2f:77:21:c5:23:7d:55:43:be:ae:9c:7f:19:20:35:3f:12:75:
83:81:ec:3d:4c:72:a5:f1:1f:5f:49:79:bb:e9:9e:28:1a:18:
1c:38:f5:4c:ef:a4:7e:a4:96:9d:d7:7c:63:68:a5:25:16:94:
d1:a6:6a:1d:8c:39:44:38:5b:a0:fb:78:47:54:c3:bd:92:30:
fb:58:2b:c7:3f:b5:87:cc:8e:bc:7e:ec:7e:ac:89:47:15:7d:
6f:a5:12:76:c2:f7:60:9e:7e:9a:46:38:2f:d2:da:de:e5:6e:
79:cd:e4:97:88:bb:ff:af:29:30:a4:e7:c5:22:e0:35:31:3c:
c8:d9:3e:c3:72:86:8c:de:a2:23:03:62:c2:c4:6b:15:48:b8:
7d:9c:21:46:0a:d7:10:a3:6e:a3:f9:ff:49:28:c9:1b:83:67:
b4:29:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:31:40 2026 by rpki-client