This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/xL6i2okIA7E9ZhMsKSID_sgUCVc.roa
File: xL6i2okIA7E9ZhMsKSID_sgUCVc.roa (raw, json)
Hash identifier: Ln2YKmCSYKPNy9YX53PAB4mSncMVxGb9NZGTbUGweTU=
Subject key identifier: C4:BE:A2:DA:89:08:03:B1:3D:66:13:2C:29:22:03:FE:C8:14:09:57
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 019B7835606522866B382434932212D78F55
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/xL6i2okIA7E9ZhMsKSID_sgUCVc.roa
Signing time: Thu 01 Jan 2026 06:18:42 +0000
ROA not before: Thu 01 Jan 2026 06:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201397
IP address blocks: 194.116.226.0/24 maxlen: 24
2a12:a9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:60:65:22:86:6b:38:24:34:93:22:12:d7:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Jan 1 06:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4bea2da890803b13d66132c292203fec8140957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:74:b9:56:0e:d7:a5:c9:74:1c:3d:88:01:e8:
b0:4a:e8:66:c3:e4:d5:62:3f:25:62:c9:8a:25:89:
54:07:12:b6:20:a6:90:23:e8:4f:a9:e0:ff:be:5e:
34:0b:fa:f5:e1:9f:0f:60:99:3e:15:41:a1:5e:6a:
9e:19:d9:79:51:d8:14:fe:ea:8e:34:a8:28:28:5a:
21:e0:7b:c3:8d:36:99:1d:0c:53:c1:a0:a4:54:ac:
31:35:00:93:e7:99:38:27:cb:ad:71:ff:01:46:0c:
51:6e:cd:59:54:e2:0b:76:b5:c6:79:b0:62:67:68:
9d:3d:fa:1a:12:d1:ef:ee:44:8e:21:ab:b9:9a:44:
4b:a0:5d:2e:12:4f:47:eb:2c:08:d0:03:38:91:d4:
5f:63:d9:07:43:ad:72:f8:52:71:35:1b:1b:3b:05:
18:c7:62:4d:bc:0d:33:c9:6f:52:2b:9c:45:38:d9:
a7:b8:a6:02:64:8e:40:82:c2:ff:f4:6f:5b:24:5c:
de:5d:3f:e8:1d:58:29:81:6f:1e:46:4d:8a:4c:67:
a3:1e:01:1f:be:ba:5e:f7:84:64:a2:8a:3e:d9:9a:
1a:04:13:59:c1:ad:d6:43:96:52:68:69:f2:60:27:
5f:e9:09:59:5c:ba:7c:76:32:98:49:83:7a:e3:c3:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:A2:DA:89:08:03:B1:3D:66:13:2C:29:22:03:FE:C8:14:09:57
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/xL6i2okIA7E9ZhMsKSID_sgUCVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.226.0/24
IPv6:
2a12:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:7b:05:60:03:d5:a1:d6:f6:1d:9a:6b:98:9f:5d:36:bf:23:
3b:e4:59:c6:dd:6c:be:2a:31:0e:58:83:99:bc:af:ce:f9:8c:
8a:48:d7:3c:5e:cc:76:c5:d5:b5:9e:6f:06:58:ae:98:d0:88:
49:e9:27:e5:45:52:be:0f:4b:6a:29:4a:ba:5b:83:87:af:17:
15:40:67:af:31:fd:3a:9f:3c:49:55:76:56:7a:d4:00:26:de:
1f:b2:9a:24:da:80:22:db:11:be:ba:69:1d:d4:4b:d2:94:df:
93:e3:3b:09:aa:47:08:84:0c:c8:98:9b:08:4a:80:45:ab:dc:
85:b8:8b:aa:01:96:1e:01:83:e7:cc:9a:99:04:48:79:dd:93:
ba:d1:54:a9:d5:81:80:db:96:28:30:e6:04:01:2e:8e:96:17:
e6:0c:16:6e:d1:ab:bb:8f:54:61:18:31:d8:ab:de:cd:a4:38:
a4:30:f5:fb:1e:3b:07:94:a8:8a:35:54:b2:b7:c5:c8:83:44:
4e:7d:4e:8c:8d:88:dd:f5:74:9c:83:e5:79:7c:76:cd:5c:92:
ea:b6:b0:db:10:0c:d2:cd:db:35:68:17:f9:82:86:21:fe:c6:
55:b8:ad:2d:ef:90:f0:54:40:6f:b3:69:93:dc:ac:d0:6a:dd:
7e:84:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:51 2026 by rpki-client