This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6aPdX-3WesDpZ3xd22QjXMYydYw.roa
File: 6aPdX-3WesDpZ3xd22QjXMYydYw.roa (raw, json)
Hash identifier: nROJYToVCZv8r7RswKCuNMJTkJLCtwh6/qK+i1wQYhk=
Subject key identifier: E9:A3:DD:5F:ED:D6:7A:C0:E9:67:7C:5D:DB:64:23:5C:C6:32:75:8C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019B7E37E7F6B16B3B2A38D5BA9B71AFAD67
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6aPdX-3WesDpZ3xd22QjXMYydYw.roa
Signing time: Fri 02 Jan 2026 10:19:11 +0000
ROA not before: Fri 02 Jan 2026 10:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58030
IP address blocks: 185.243.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:e7:f6:b1:6b:3b:2a:38:d5:ba:9b:71:af:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 10:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9a3dd5fedd67ac0e9677c5ddb64235cc632758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:c9:ee:f6:f8:40:89:9a:4a:ef:57:fc:ab:
7b:91:8b:18:7d:f0:19:20:8a:d5:c6:cd:f4:d2:3d:
1d:4e:6f:ef:7e:43:66:c3:c0:33:ee:aa:4c:81:e6:
84:2d:a8:d6:98:dc:b9:01:34:b0:4a:ed:3a:19:6d:
86:be:32:ea:63:89:d5:5b:c0:86:cf:21:8c:5f:7b:
d6:2a:07:e1:84:08:33:2b:68:6b:01:24:04:63:a5:
ec:c5:08:2b:32:5a:d0:c3:e9:eb:79:b6:1c:9f:31:
44:25:25:66:44:98:08:a6:75:0f:d5:40:26:4e:73:
34:6f:41:b0:8a:6b:e3:16:ca:cd:5d:01:2f:df:21:
f8:5e:91:38:ab:1a:ad:74:77:49:b1:5c:40:e7:94:
f5:5e:77:e8:2c:1b:a8:b3:47:db:1b:78:40:65:f3:
e3:a1:16:b9:36:fb:45:18:ba:84:aa:09:b6:a0:da:
93:7e:00:3a:f6:f9:9b:55:5d:38:8a:34:5d:64:21:
cb:24:2d:d2:66:16:d0:d0:76:9a:be:b8:83:8b:a5:
2a:11:d5:1f:b1:b7:45:57:84:70:85:00:73:10:fa:
20:ab:86:b9:13:60:8b:db:cb:88:d7:45:da:f3:12:
62:b2:f3:c1:58:8b:f9:fa:86:5a:a1:4b:0d:0b:47:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:DD:5F:ED:D6:7A:C0:E9:67:7C:5D:DB:64:23:5C:C6:32:75:8C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6aPdX-3WesDpZ3xd22QjXMYydYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.50.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:95:e3:66:d0:1e:75:e4:92:e6:11:49:a1:b6:9f:97:da:68:
64:a7:28:d2:5c:23:4a:d1:6d:df:a4:db:97:c2:3f:ad:c2:3d:
a8:af:c6:0f:8d:19:d4:7c:a2:6d:e2:1d:68:a3:48:05:3a:22:
e0:3f:d2:17:35:66:fd:37:4d:80:8e:97:54:07:42:33:88:0f:
3d:7b:63:29:2b:29:fb:8b:08:ca:52:4f:e6:20:56:be:73:36:
0e:9d:a7:54:23:fd:42:65:8c:69:d8:e2:d1:21:58:b9:0d:87:
74:97:31:ed:94:ff:c3:f6:dd:d6:1e:2a:59:c3:bc:04:20:da:
a3:97:7b:f4:37:a3:f2:5e:92:00:e9:bf:62:57:7f:e4:b8:53:
27:fb:47:24:64:25:5a:5f:01:46:0c:9f:ac:10:8d:ce:7c:0a:
1d:09:aa:b6:46:87:2b:c4:df:2a:7b:ad:ab:fa:d6:ee:31:67:
32:a6:50:a0:af:3c:57:2e:a3:bb:a4:94:e7:9d:53:9d:a6:44:
2d:3d:b0:e6:21:be:d8:f0:12:7d:eb:94:ad:ec:4b:a5:84:68:
14:10:14:61:83:a5:10:4a:8d:51:e1:76:3f:ad:d7:ff:1f:b0:
e0:61:f1:c0:fc:60:a6:0e:5b:9b:26:bd:07:4a:77:22:c3:b8:
8d:9b:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:33:26 2026 by rpki-client