This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/6jRqKVuODTj7RE21wNslnYzfKPk.roa
File: 6jRqKVuODTj7RE21wNslnYzfKPk.roa (raw, json)
Hash identifier: Zs62FflRnG2r2QTuVznrFZu5JhE4Zt4az6qrBtPJYrM=
Subject key identifier: EA:34:6A:29:5B:8E:0D:38:FB:44:4D:B5:C0:DB:25:9D:8C:DF:28:F9
Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial: 019B77596D89CF1918D74C3BA8962A125941
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/6jRqKVuODTj7RE21wNslnYzfKPk.roa
Signing time: Thu 01 Jan 2026 02:18:27 +0000
ROA not before: Thu 01 Jan 2026 02:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.34.188.0/24 maxlen: 24
185.34.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:6d:89:cf:19:18:d7:4c:3b:a8:96:2a:12:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Validity
Not Before: Jan 1 02:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea346a295b8e0d38fb444db5c0db259d8cdf28f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:73:05:eb:a6:a5:3f:8b:9e:1e:23:38:fd:
bb:1a:9d:22:e7:9a:43:b8:43:67:d1:ce:70:0f:c0:
4f:a8:f8:e1:d5:89:b4:3c:5e:fb:9d:5b:2d:15:41:
a1:80:6e:f4:b9:6f:7f:c1:b8:61:f6:a7:74:04:69:
37:2e:55:50:a5:85:18:ae:e6:01:87:03:5f:6b:15:
d2:a4:40:00:52:81:23:a0:94:65:d2:13:3b:43:47:
71:9b:42:16:3d:c5:a6:15:16:50:f8:eb:f9:69:cc:
37:08:50:a0:bf:13:18:a7:7e:06:b2:9c:94:ef:1b:
54:06:d5:87:8b:46:27:28:5e:7e:4e:e2:ee:dd:80:
76:f5:11:2b:57:8d:b0:1d:6c:5f:33:6d:b7:1a:aa:
72:70:36:5b:b0:38:9f:0e:b8:68:ac:f7:80:fa:6c:
54:c8:0b:59:8e:44:1b:8c:64:0d:f0:27:d1:0b:6f:
b1:98:ee:47:96:48:32:47:16:6f:7f:20:09:70:fb:
03:65:7d:6a:3d:6f:33:0f:9b:12:10:e2:c7:1f:f4:
69:4c:0f:03:40:e6:ad:fa:c4:d7:b5:04:14:91:3b:
57:5b:be:a6:dd:f0:66:44:d6:4a:08:ec:51:42:9c:
1e:0b:a8:7c:2c:42:53:ec:19:a0:c5:7e:ee:89:20:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:6A:29:5B:8E:0D:38:FB:44:4D:B5:C0:DB:25:9D:8C:DF:28:F9
X509v3 Authority Key Identifier:
keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/6jRqKVuODTj7RE21wNslnYzfKPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.188.0/24
185.34.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:86:48:d6:4e:bf:87:33:9d:5e:bb:33:03:a8:e9:ca:84:96:
47:e6:c0:e0:72:ff:6d:92:ae:6a:42:83:f7:a3:16:80:95:a9:
d8:af:ba:ab:04:3d:e5:51:b5:57:d5:f7:3a:f8:e2:33:6f:d8:
a9:d1:d3:7c:90:78:b9:c2:74:7a:5e:d4:3c:f5:fd:d9:64:14:
11:e8:c1:49:49:09:07:ee:06:75:34:da:ea:32:f0:09:9f:3c:
8d:2b:2d:a1:e9:2a:84:ec:fd:b9:ea:a3:2a:fc:26:c9:95:b3:
9c:7f:37:98:75:63:68:4d:b8:7a:46:47:d9:43:e1:96:cd:14:
81:e7:ec:8c:76:f1:52:4f:0a:a4:8b:36:20:cb:59:75:40:ff:
33:23:87:ed:6c:46:67:5f:45:a6:c0:f6:40:37:30:44:9d:95:
9b:28:b7:aa:f3:9a:b5:7d:47:45:c0:42:fa:15:b7:24:74:70:
43:d8:61:9b:92:42:c0:12:d4:90:9c:86:89:88:b1:f4:6f:d5:
9e:6f:d8:70:e5:86:ee:ff:7d:7f:ba:ca:e1:36:c6:1d:cf:4b:
89:d3:8d:8e:53:7b:2a:c9:a9:0a:4c:a7:8a:8c:4a:00:ef:cc:
db:c0:20:14:7d:7e:87:5c:2b:19:12:db:82:3c:10:e7:88:e5:
71:78:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:04:39 2026 by rpki-client