This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/au6l1R_D5TS70Po3ddjxh4jpsrw.roa
File: au6l1R_D5TS70Po3ddjxh4jpsrw.roa (raw, json)
Hash identifier: nF+JU9MjISfoV5j1pWIuixKzo4d4T8t4S6fvAEqKW0w=
Subject key identifier: 6A:EE:A5:D5:1F:C3:E5:34:BB:D0:FA:37:75:D8:F1:87:88:E9:B2:BC
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 019B76EB1232FE433DA7B1F9D23FAF1D40BC
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/au6l1R_D5TS70Po3ddjxh4jpsrw.roa
Signing time: Thu 01 Jan 2026 00:17:55 +0000
ROA not before: Thu 01 Jan 2026 00:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 37.153.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:12:32:fe:43:3d:a7:b1:f9:d2:3f:af:1d:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Jan 1 00:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aeea5d51fc3e534bbd0fa3775d8f18788e9b2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:e4:0c:17:60:6e:bb:75:b1:ff:b0:39:b9:
35:9c:af:f3:22:9a:1e:73:21:f4:69:3c:3e:e2:84:
49:32:b3:2d:70:d7:3f:26:4a:8a:07:c9:34:29:c8:
db:a8:ab:d7:97:00:b4:b3:e1:48:3c:2e:f3:64:67:
39:1a:7d:be:23:96:7b:13:0c:1d:b9:db:2a:69:2f:
51:7f:57:5c:61:b7:47:af:e0:f4:17:4d:56:b3:05:
79:75:07:cf:84:c6:e2:0d:ac:28:e8:4b:66:4d:87:
30:c9:e2:2d:56:76:37:5b:2e:f1:b1:3c:b3:bb:58:
69:b5:75:4c:be:60:9d:b6:7d:9b:6f:52:75:01:de:
2f:69:01:1f:e9:a7:14:ce:24:a2:10:f3:b2:96:bc:
de:31:46:f1:52:9c:01:69:68:34:81:b6:6a:2b:24:
c8:4e:8f:10:b6:47:f0:6a:4f:17:40:cd:54:fa:a8:
d9:89:62:50:72:7e:74:dd:07:b4:da:bc:78:ee:1c:
d4:c9:f2:da:78:57:43:10:92:07:1f:d7:14:58:e8:
5c:dd:c5:91:b1:bd:8c:a7:70:4a:d5:91:de:62:65:
07:40:22:0d:98:32:34:f1:22:e4:24:08:5f:70:0d:
73:09:b4:d2:04:06:3b:24:18:e3:04:11:4a:92:b9:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:A5:D5:1F:C3:E5:34:BB:D0:FA:37:75:D8:F1:87:88:E9:B2:BC
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/au6l1R_D5TS70Po3ddjxh4jpsrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2f:83:91:70:18:be:df:bf:ac:09:e8:ef:de:38:05:92:a7:
ea:d2:3b:8d:b4:4a:6a:4e:47:a3:22:5e:85:45:be:52:de:61:
de:33:d3:1f:32:67:33:f6:61:a0:06:1f:4e:5d:20:96:8d:97:
7c:46:1b:32:2f:96:06:ae:44:a6:cb:d2:18:7c:69:ba:62:44:
e0:9a:5f:c1:ae:ea:31:dd:ec:02:bb:c5:80:0c:5c:0c:39:ce:
49:a7:55:f0:c7:d3:57:a6:c1:bc:4a:14:03:87:39:95:01:3b:
0e:ee:3a:fc:66:bf:a2:38:af:3f:31:13:50:00:22:e2:bf:68:
f4:5f:e4:8d:b8:fd:4d:25:1d:18:20:55:99:71:da:e3:a1:ba:
d4:81:24:f6:d2:ae:e1:72:65:3b:52:34:a5:0b:f8:95:76:84:
10:3d:0e:ef:5c:05:65:9c:e3:9a:c4:4e:6b:06:45:7c:ea:9f:
8f:0b:80:8f:7e:f2:38:bf:5e:68:a5:1e:13:83:7b:6a:94:2f:
a2:80:26:21:c4:fe:0b:8a:38:a9:49:05:20:89:b1:12:d8:4f:
52:7b:36:13:98:a0:8d:ed:ac:2b:6f:2b:00:fa:a3:6a:bb:a2:
72:9e:3a:eb:1c:4b:bd:8a:15:4c:55:69:ab:c3:19:38:38:90:
68:ba:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 22:33:29 2026 by rpki-client