This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/as6r6Ztzl3B5GCKyaxwnI7TOofc.roa
File: as6r6Ztzl3B5GCKyaxwnI7TOofc.roa (raw, json)
Hash identifier: S7tlPr+W8+3NDnkxulAni5wKPaNd4l94BgIzDodWjyw=
Subject key identifier: 6A:CE:AB:E9:9B:73:97:70:79:18:22:B2:6B:1C:27:23:B4:CE:A1:F7
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019BCDED4B03151CB06D0D8BCDF21AAE4B6F
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/as6r6Ztzl3B5GCKyaxwnI7TOofc.roa
Signing time: Sat 17 Jan 2026 21:47:19 +0000
ROA not before: Sat 17 Jan 2026 21:47:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208434
IP address blocks: 2a06:e881:6900::/48 maxlen: 48
2a06:e881:6902::/48 maxlen: 48
2a06:e881:6903::/48 maxlen: 48
2a06:e881:690c::/48 maxlen: 48
2a06:e881:690f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:cd:ed:4b:03:15:1c:b0:6d:0d:8b:cd:f2:1a:ae:4b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 17 21:47:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aceabe99b739770791822b26b1c2723b4cea1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:93:27:54:aa:d0:0c:a5:23:8f:76:60:ab:
78:c9:85:67:25:9a:43:de:e2:d1:62:82:18:69:93:
44:5c:73:35:f4:33:43:12:23:f0:93:28:1f:f1:80:
56:81:df:2e:06:1e:e8:55:bb:16:48:4b:31:58:d4:
dd:04:8d:53:d0:03:52:5a:a4:8e:12:61:d0:19:4a:
22:81:07:42:12:67:93:dd:3a:3c:f6:84:34:c3:03:
91:d9:0e:b8:f6:f5:c1:43:f9:18:37:40:5a:24:b9:
a1:c8:c2:ed:62:6d:83:bd:8e:71:ac:77:28:e2:e3:
d7:37:15:09:e3:37:dc:b9:32:57:a3:15:af:f6:e7:
67:86:0d:fd:89:c3:57:23:09:cd:57:a5:24:53:72:
36:56:02:47:cc:4d:c6:ad:23:6e:92:37:8a:88:96:
45:bb:2f:16:cb:18:3a:f0:56:e3:3e:98:d0:40:51:
e9:1c:f6:98:e8:94:fc:3f:5b:ef:fa:93:e0:bd:94:
a6:47:f8:9a:bd:30:70:fe:ed:07:cb:1e:93:1f:c3:
e4:cc:28:b0:ac:f7:ec:f4:2b:2d:ee:06:24:69:7b:
ff:94:f0:e5:db:13:03:4d:a4:f4:6a:69:31:1b:bb:
38:28:da:79:3e:95:14:8a:5b:53:f5:0a:04:ff:52:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:AB:E9:9B:73:97:70:79:18:22:B2:6B:1C:27:23:B4:CE:A1:F7
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/as6r6Ztzl3B5GCKyaxwnI7TOofc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6900::/48
2a06:e881:6902::/47
2a06:e881:690c::/48
2a06:e881:690f::/48
Signature Algorithm: sha256WithRSAEncryption
34:98:c4:f8:c1:ad:0e:95:e3:1e:59:0b:61:01:6a:f1:cd:56:
a6:74:2b:3b:f0:62:5e:67:13:2d:64:c8:b0:95:40:59:fc:10:
b7:91:ad:7e:cf:f8:cd:b5:4a:91:9c:d0:7a:3d:c5:f1:9a:88:
01:03:e9:8a:8b:9d:0d:94:61:9d:fa:ce:15:94:3a:e2:f3:77:
1c:a1:67:c2:d2:90:ba:79:c0:8c:ee:b6:73:f9:9a:7f:51:18:
54:c6:8e:5f:65:8f:af:0d:48:86:77:7f:f2:73:c0:0f:c5:be:
70:18:22:0d:27:8f:fa:8b:62:4d:ef:42:57:67:38:4e:82:34:
9f:d8:f5:71:30:e4:60:a8:6c:7e:d1:1d:37:b4:e8:a3:4b:ab:
bf:06:50:74:b1:06:95:29:ee:96:93:75:06:ae:ce:7e:fe:df:
7f:a2:31:53:9d:22:76:1a:9c:f4:e3:35:cb:00:fc:13:90:5b:
12:31:e6:0a:a0:76:0d:5b:9e:42:be:c9:65:a8:49:45:67:30:
e6:d0:ae:73:f1:12:ba:3f:81:d3:3c:ff:ca:bd:da:86:f1:6e:
94:c1:64:e5:9b:a0:cd:6a:95:18:f2:89:92:c2:1b:1a:c9:57:
13:8e:d1:05:59:7f:70:9a:23:0f:f2:2a:a8:88:36:7a:fa:96:
52:e4:f6:00
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZvN7UsDFRywbQ2LzfIarktvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjYwMTE3MjE0NzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWNlYWJlOTliNzM5NzcwNzkxODIyYjI2YjFjMjcyM2I0Y2VhMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvGTJ1Sq0AylI492YKt4yYVnJZpD
3uLRYoIYaZNEXHM19DNDEiPwkygf8YBWgd8uBh7oVbsWSEsxWNTdBI1T0ANSWqSO
EmHQGUoigQdCEmeT3To89oQ0wwOR2Q649vXBQ/kYN0BaJLmhyMLtYm2DvY5xrHco
4uPXNxUJ4zfcuTJXoxWv9udnhg39icNXIwnNV6UkU3I2VgJHzE3GrSNukjeKiJZF
uy8Wyxg68FbjPpjQQFHpHPaY6JT8P1vv+pPgvZSmR/iavTBw/u0Hyx6TH8PkzCiw
rPfs9Cst7gYkaXv/lPDl2xMDTaT0amkxG7s4KNp5PpUUiltT9QoE/1IyGQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGrOq+mbc5dweRgismscJyO0zqH3MB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvYXM2cjZadHpsM0I1R0NLeWF4d25JN1RPb2ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgbogWkA
AwcBKgbogWkCAwcAKgbogWkMAwcAKgbogWkPMA0GCSqGSIb3DQEBCwUAA4IBAQA0
mMT4wa0OleMeWQthAWrxzVamdCs78GJeZxMtZMiwlUBZ/BC3ka1+z/jNtUqRnNB6
PcXxmogBA+mKi50NlGGd+s4VlDri83ccoWfC0pC6ecCM7rZz+Zp/URhUxo5fZY+v
DUiGd3/yc8APxb5wGCINJ4/6i2JN70JXZzhOgjSf2PVxMORgqGx+0R03tOijS6u/
BlB0sQaVKe6Wk3UGrs5+/t9/ojFTnSJ2Gpz04zXLAPwTkFsSMeYKoHYNW55Cvsll
qElFZzDm0K5z8RK6P4HTPP/KvdqG8W6UwWTlm6DNapUY8omSwhsayVcTjtEFWX9w
miMP8iqoiDZ6+pZS5PYA
-----END CERTIFICATE-----
Generated at Tue Jan 20 22:47:37 2026 by rpki-client