This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/m6r9o3EuSXJct7DbkrfCUu4fQnA.roa
File: m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (raw, json)
Hash identifier: 0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=
Subject key identifier: 9B:AA:FD:A3:71:2E:49:72:5C:B7:B0:DB:92:B7:C2:52:EE:1F:42:70
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 019B7835359640A5DA39C46BB376B3F36F61
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/m6r9o3EuSXJct7DbkrfCUu4fQnA.roa
Signing time: Thu 01 Jan 2026 06:18:31 +0000
ROA not before: Thu 01 Jan 2026 06:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209453
IP address blocks: 213.167.229.0/24 maxlen: 24
213.167.230.0/24 maxlen: 24
217.70.179.0/24 maxlen: 24
217.70.187.0/24 maxlen: 24
2001:4b98:aaaa::/48 maxlen: 48
2001:4b98:aaab::/48 maxlen: 48
2001:4b98:abcb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:35:96:40:a5:da:39:c4:6b:b3:76:b3:f3:6f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Jan 1 06:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9baafda3712e49725cb7b0db92b7c252ee1f4270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:53:7a:33:26:dd:99:ef:48:4f:8a:05:86:
71:fe:a4:23:56:09:f6:fc:76:fc:94:2b:0e:9a:29:
a4:9f:89:f8:08:3b:89:bb:8f:f9:12:f4:21:94:14:
c5:dc:7c:b8:35:38:aa:96:74:28:86:35:6a:1d:7e:
b8:28:0b:c1:e5:00:67:ad:20:c0:77:01:69:32:e8:
34:c4:a3:76:88:7e:c6:b8:01:68:1e:db:eb:77:ef:
d1:f5:a9:c6:84:49:d0:a1:07:1b:87:a4:9d:b9:65:
33:e6:01:1a:e2:2b:b9:52:1d:a0:9b:8e:f8:5d:fc:
6a:c7:f9:b6:fe:52:1d:44:90:db:58:56:a3:1e:f7:
4c:c7:51:8b:61:ea:6a:dc:35:6d:95:45:6c:6e:37:
e3:22:0d:94:d5:7a:c4:43:24:b4:20:07:4f:51:49:
39:af:f9:17:28:a0:97:d6:ad:26:4e:e7:4f:5b:df:
c2:ec:39:00:45:82:41:81:9a:91:bb:2b:d8:ed:76:
a8:aa:e1:1c:76:fd:ed:ed:e5:a0:bf:b6:b3:4c:82:
02:80:e9:0d:13:43:0d:f7:03:2f:d7:ae:f4:21:1f:
82:36:17:f4:28:46:09:8a:5b:dd:0a:0c:dd:ab:b6:
b7:dc:a7:d5:49:d9:65:31:35:61:ee:dc:f3:00:a3:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:FD:A3:71:2E:49:72:5C:B7:B0:DB:92:B7:C2:52:EE:1F:42:70
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/m6r9o3EuSXJct7DbkrfCUu4fQnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.229.0-213.167.230.255
217.70.179.0/24
217.70.187.0/24
IPv6:
2001:4b98:aaaa::/47
2001:4b98:abcb::/48
Signature Algorithm: sha256WithRSAEncryption
72:5e:08:84:d9:ea:73:c2:09:a6:1a:0d:7b:a4:55:72:c1:ab:
49:55:7c:c3:8c:12:e4:0c:e2:b3:d5:f6:cf:b4:57:59:2a:ed:
f4:4a:f5:75:c3:09:a0:a0:13:ef:87:89:18:4e:8b:c7:70:29:
6d:3e:b0:58:bf:86:67:82:de:a8:84:8d:ed:28:a3:37:f4:da:
a2:71:e4:02:19:65:19:39:33:ad:e0:5d:bf:fa:44:75:76:7f:
bd:33:82:20:ea:71:3a:60:bc:33:f0:18:0f:e9:39:4f:9c:47:
bb:96:38:12:4a:0b:68:0e:af:d5:cc:a7:69:4a:de:1f:52:48:
f4:fa:c3:8b:d9:27:8a:20:f1:a7:6f:9b:9d:eb:99:fc:02:fd:
db:97:54:e6:63:23:a5:02:70:8d:80:34:08:e8:46:ed:43:61:
59:0a:41:c6:d4:84:8f:10:03:e7:aa:14:80:a6:58:3b:12:bd:
74:df:82:15:f9:41:88:b0:97:df:56:4d:c7:93:96:78:58:89:
2c:be:c4:26:4f:5e:07:25:cd:f0:69:cf:ec:6c:a0:3b:a5:54:
29:c9:2f:94:90:88:01:35:f8:be:66:61:ac:2d:9e:87:35:86:
14:d2:aa:3d:76:6b:db:2c:4a:d4:0a:df:4e:8f:20:af:37:7d:
2d:5d:2d:47
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZt4NTWWQKXaOcRrs3az829hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTBlYzU5NTY0MzI0MjM3NDIwZDUwNmI5YjQ5OGQ3NTJl
ZTIxNjgwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmFhZmRhMzcxMmU0OTcyNWNiN2IwZGI5MmI3YzI1MmVlMWY0MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXZTejMm3ZnvSE+KBYZx/qQjVgn2
/Hb8lCsOmimkn4n4CDuJu4/5EvQhlBTF3Hy4NTiqlnQohjVqHX64KAvB5QBnrSDA
dwFpMug0xKN2iH7GuAFoHtvrd+/R9anGhEnQoQcbh6SduWUz5gEa4iu5Uh2gm474
Xfxqx/m2/lIdRJDbWFajHvdMx1GLYepq3DVtlUVsbjfjIg2U1XrEQyS0IAdPUUk5
r/kXKKCX1q0mTudPW9/C7DkARYJBgZqRuyvY7XaoquEcdv3t7eWgv7azTIICgOkN
E0MN9wMv1670IR+CNhf0KEYJilvdCgzdq7a33KfVSdllMTVh7tzzAKNrhQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFJuq/aNxLklyXLew25K3wlLuH0JwMB8GA1UdIwQY
MBaAFLyg7FlWQyQjdCDVBrm0mNdS7iFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMt
N2M1NDlmMWVkMTZjLzEvbTZyOW8zRXVTWEpjdDdEYmtyZkNVdTRmUW5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMtN2M1NDlmMWVkMTZj
LzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAgBAIAATAaMAwDBADVp+UD
BADVp+YDBADZRrMDBADZRrswGAQCAAIwEgMHASABS5iqqgMHACABS5iryzANBgkq
hkiG9w0BAQsFAAOCAQEAcl4IhNnqc8IJphoNe6RVcsGrSVV8w4wS5Azis9X2z7RX
WSrt9Er1dcMJoKAT74eJGE6Lx3ApbT6wWL+GZ4LeqISN7SijN/TaonHkAhllGTkz
reBdv/pEdXZ/vTOCIOpxOmC8M/AYD+k5T5xHu5Y4EkoLaA6v1cynaUreH1JI9PrD
i9kniiDxp2+bneuZ/AL925dU5mMjpQJwjYA0COhG7UNhWQpBxtSEjxAD56oUgKZY
OxK9dN+CFflBiLCX31ZNx5OWeFiJLL7EJk9eByXN8GnP7GygO6VUKckvlJCIATX4
vmZhrC2ehzWGFNKqPXZr2yxK1ArfTo8grzd9LV0tRw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:29 2026 by rpki-client