This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6TlBE3Vor-0txnW7KOEHA-h2gk.roa
File: n6TlBE3Vor-0txnW7KOEHA-h2gk.roa (raw, json)
Hash identifier: 4BEPymBojmvi3OndswIxpgqszPnRiaPgR1A0j5TMSlc=
Subject key identifier: 9F:A4:E5:04:4D:D5:A2:BF:B4:B7:19:D6:EC:A3:84:1C:0F:A1:DA:09
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84BEFE78B1F953611C8C2D349348FC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6TlBE3Vor-0txnW7KOEHA-h2gk.roa
Signing time: Fri 02 Jan 2026 16:22:44 +0000
ROA not before: Fri 02 Jan 2026 16:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214184
IP address blocks: 94.183.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:be:fe:78:b1:f9:53:61:1c:8c:2d:34:93:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fa4e5044dd5a2bfb4b719d6eca3841c0fa1da09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:7b:4d:27:05:52:15:e5:04:43:44:89:21:
0b:17:66:f6:64:73:66:87:b2:ea:be:33:fa:21:51:
78:25:89:26:48:38:dc:47:68:c1:79:e4:ac:f0:cc:
d9:08:da:4a:ab:79:90:db:d9:ed:92:2a:55:d5:ad:
c1:8e:b0:71:84:10:66:e8:a6:9f:7c:bc:28:2b:2e:
9f:bf:52:e6:4b:cf:0a:21:b1:18:e1:09:58:02:20:
59:02:51:f7:24:db:08:54:d9:16:ce:d2:03:0b:82:
fd:8e:43:86:f0:3f:49:f0:ea:91:e0:ff:c3:5b:9f:
2a:f2:19:91:2f:09:48:15:40:87:d6:13:9d:b4:48:
fa:35:f6:0a:56:ce:65:c5:ff:ca:6a:4e:95:c5:d3:
be:17:0e:47:d8:76:86:63:8b:28:ba:b9:70:6a:29:
77:d1:3e:11:2a:01:fd:d7:c1:04:13:61:ae:2d:d4:
f1:c3:ba:25:23:04:7a:a0:e6:7c:a1:23:37:c8:76:
a4:de:56:1b:e4:18:bf:a6:b8:5a:10:cf:91:15:25:
ce:83:79:32:2e:9c:d6:76:28:73:3c:c6:1d:4d:ab:
77:39:f2:1c:bb:e2:ad:cf:26:80:c6:14:11:02:20:
4f:1f:42:53:bb:9b:3f:90:de:69:bc:5b:80:80:ef:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A4:E5:04:4D:D5:A2:BF:B4:B7:19:D6:EC:A3:84:1C:0F:A1:DA:09
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6TlBE3Vor-0txnW7KOEHA-h2gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ef:40:17:39:f2:47:46:cd:e6:6f:c5:00:ca:29:19:ea:17:
93:6b:21:ac:ee:1f:b4:e2:f2:72:74:88:5d:ac:67:8b:5d:1c:
1e:a1:2e:05:98:df:b8:f5:51:61:16:da:56:2f:ef:f8:b3:e8:
88:ca:53:34:a6:08:14:74:ba:61:3a:f0:e9:9e:1a:33:50:16:
9c:1f:57:4e:c7:e1:47:0d:5d:1c:5d:3d:8e:b0:ac:8c:3f:10:
ca:d3:72:f8:b1:ac:7f:4d:e7:92:30:1f:2a:60:55:7c:38:c8:
f0:7c:ef:07:b6:4a:25:38:26:4e:1c:f4:85:4b:3b:9a:2e:e4:
6e:4b:11:95:c4:8e:91:38:3d:ab:72:ca:57:53:d8:d8:ff:ba:
80:f2:23:ed:89:fa:67:01:fa:f7:a5:7d:1e:76:1a:a5:bf:78:
bc:f9:0c:90:bd:5e:91:6f:79:1b:bf:d1:8b:8a:92:5a:ad:0b:
ce:bc:0e:2f:6c:e4:46:d1:61:12:ce:2c:53:f1:95:39:a4:57:
ed:5c:a4:07:b3:db:91:1b:a8:54:37:b5:69:fa:12:81:42:cd:
c2:69:07:32:21:80:0f:16:30:20:4b:bd:50:00:c0:54:88:b6:
4d:41:c5:03:46:69:8b:24:b4:26:56:93:13:d3:f9:59:6a:b8:
4d:14:66:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hL7+eLH5U2EcjC00k0j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmE0ZTUwNDRkZDVhMmJmYjRiNzE5ZDZlY2EzODQxYzBmYTFkYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTd7TScFUhXlBENEiSELF2b2ZHNm
h7LqvjP6IVF4JYkmSDjcR2jBeeSs8MzZCNpKq3mQ29ntkipV1a3BjrBxhBBm6Kaf
fLwoKy6fv1LmS88KIbEY4QlYAiBZAlH3JNsIVNkWztIDC4L9jkOG8D9J8OqR4P/D
W58q8hmRLwlIFUCH1hOdtEj6NfYKVs5lxf/Kak6VxdO+Fw5H2HaGY4sourlwail3
0T4RKgH918EEE2GuLdTxw7olIwR6oOZ8oSM3yHak3lYb5Bi/prhaEM+RFSXOg3ky
LpzWdihzPMYdTat3OfIcu+KtzyaAxhQRAiBPH0JTu5s/kN5pvFuAgO9HRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+k5QRN1aK/tLcZ1uyjhBwPodoJMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbjZUbEJFM1Zvci0wdHhuVzdLT0VIQS1oMmdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrerMA0G
CSqGSIb3DQEBCwUAA4IBAQAs70AXOfJHRs3mb8UAyikZ6heTayGs7h+04vJydIhd
rGeLXRweoS4FmN+49VFhFtpWL+/4s+iIylM0pggUdLphOvDpnhozUBacH1dOx+FH
DV0cXT2OsKyMPxDK03L4sax/TeeSMB8qYFV8OMjwfO8HtkolOCZOHPSFSzuaLuRu
SxGVxI6ROD2rcspXU9jY/7qA8iPtifpnAfr3pX0edhqlv3i8+QyQvV6Rb3kbv9GL
ipJarQvOvA4vbORG0WESzixT8ZU5pFftXKQHs9uRG6hUN7Vp+hKBQs3CaQcyIYAP
FjAgS71QAMBUiLZNQcUDRmmLJLQmVpMT0/lZarhNFGZn
-----END CERTIFICATE-----
Generated at Mon Jan 5 14:36:42 2026 by rpki-client