This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa
File: l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa (raw, json)
Hash identifier: mR/Sx8Gef6jaLXJaUX0OcwA84CHIBBS3pL7jXOr7b50=
Subject key identifier: 97:A7:43:EB:F6:30:60:6D:86:A0:0C:82:C1:53:48:19:32:16:C8:5D
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 019B7C7FEE85F73F36DF140155AC8F2E1899
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa
Signing time: Fri 02 Jan 2026 02:18:37 +0000
ROA not before: Fri 02 Jan 2026 02:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56958
IP address blocks: 45.130.16.0/22 maxlen: 22
45.142.228.0/22 maxlen: 22
178.211.133.0/24 maxlen: 24
185.237.234.0/23 maxlen: 23
201.46.112.0/23 maxlen: 23
2a12:d280::/31 maxlen: 31
2a12:d282::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:ee:85:f7:3f:36:df:14:01:55:ac:8f:2e:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jan 2 02:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97a743ebf630606d86a00c82c15348193216c85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:db:4a:79:41:bb:19:46:6c:a8:11:c1:07:
d4:bd:7e:5a:fd:52:11:c3:24:dd:e3:73:00:8d:33:
75:63:ba:9a:68:fe:3a:8d:71:22:36:c5:2c:f3:50:
c0:f2:dc:5d:a1:2e:89:41:80:f2:35:a5:80:12:78:
e6:d3:22:a0:2c:35:94:44:e0:cb:f3:1a:fd:bb:cb:
de:40:0f:d9:51:f5:b4:db:ca:00:01:46:79:1c:07:
bd:c6:35:aa:f6:e2:55:46:2a:d3:12:72:40:91:64:
c7:95:70:c1:e6:ed:16:e4:2b:ea:4f:24:ba:e3:8c:
6a:02:04:a3:56:4e:80:2d:5e:46:b5:4e:d9:48:66:
11:70:1e:a2:34:cb:3b:93:4f:c4:4c:c0:de:d7:39:
44:45:34:b9:e7:77:fe:b2:55:c5:71:ae:c3:67:04:
1c:d2:bc:5c:89:34:b6:25:20:be:4b:82:2a:2d:d2:
1a:4c:f2:4a:b8:7a:3c:0a:4c:4d:ac:f0:6a:da:60:
16:0a:88:78:f4:81:85:a4:48:b1:79:2b:58:29:3a:
f4:d7:64:65:96:c8:b3:70:37:56:c5:49:63:31:76:
7d:33:bd:3a:c0:4e:23:65:7a:87:03:27:bb:8f:ff:
f7:f4:d4:06:ef:37:f4:3e:95:45:fa:06:01:55:c2:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:43:EB:F6:30:60:6D:86:A0:0C:82:C1:53:48:19:32:16:C8:5D
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.16.0/22
45.142.228.0/22
178.211.133.0/24
185.237.234.0/23
201.46.112.0/23
IPv6:
2a12:d280::/30
Signature Algorithm: sha256WithRSAEncryption
a3:c2:18:18:5c:08:e7:e6:dc:67:29:b8:6d:ca:f6:04:0c:b0:
3a:21:ef:4a:9e:5f:2e:2b:ff:5b:65:5f:66:f7:bb:f5:7d:b5:
b8:dd:6b:45:bb:fa:f5:6f:5c:18:9e:e3:28:2c:d6:77:0d:48:
93:76:44:c0:46:1c:b4:ca:08:21:df:6b:09:a1:a8:f3:51:f5:
58:11:44:ea:db:5a:8e:28:4e:80:7f:7d:81:96:e6:54:30:fa:
fa:97:2a:f6:76:3c:a7:2a:2a:9e:bf:b4:1b:13:d3:58:eb:3b:
56:2a:b4:15:b9:09:c5:57:c2:0b:3e:56:b4:27:f8:ff:66:90:
36:48:3c:bb:bf:13:89:3f:58:51:50:7d:4a:cc:a8:78:aa:4b:
1c:29:b6:b1:13:5f:4e:08:35:4b:ed:4d:a2:ab:f3:82:6d:88:
f5:50:f3:04:5d:fb:36:6a:20:39:b1:67:2f:5a:44:1f:c9:a6:
0f:81:0e:3f:64:3c:e1:f0:17:39:b9:72:a7:49:f6:0c:eb:13:
4b:bc:05:dc:09:de:29:9c:cc:cf:fd:c7:78:dc:2b:2d:f5:9f:
6a:9c:91:0a:ce:1d:c6:c3:dc:06:e8:e8:57:d8:e4:45:87:92:
10:fa:19:ac:8a:f9:e7:7a:a6:6a:cd:2a:45:32:29:ab:c7:fb:
f5:fb:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:42 2026 by rpki-client