This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/FD6SignaLxU1mMOUn7_cvBf_Yic.roa
File: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (raw, json)
Hash identifier: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=
Subject key identifier: 14:3E:92:8A:09:DA:2F:15:35:98:C3:94:9F:BF:DC:BC:17:FF:62:27
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019B79ECC6F3D4EC3547A3016C92315E845A
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/FD6SignaLxU1mMOUn7_cvBf_Yic.roa
Signing time: Thu 01 Jan 2026 14:18:39 +0000
ROA not before: Thu 01 Jan 2026 14:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 93.190.72.0/21 maxlen: 24
185.70.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c6:f3:d4:ec:35:47:a3:01:6c:92:31:5e:84:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jan 1 14:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=143e928a09da2f153598c3949fbfdcbc17ff6227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:c4:74:7c:f0:41:e5:8c:53:95:13:26:2a:
86:10:0d:b4:0f:f3:eb:87:e8:a9:13:52:e5:b8:82:
3e:1d:1f:c2:e8:67:2e:bd:5f:96:16:3e:64:db:2c:
56:ee:06:83:80:97:47:a4:e4:01:ca:f5:c9:cc:2d:
e0:d2:6d:a4:f3:e4:64:20:6a:bf:48:93:1e:d4:1c:
78:a2:b6:f8:c3:d3:e6:9d:d8:5a:96:c2:c4:6a:06:
f0:79:7e:7a:34:55:28:c1:7a:61:b1:20:6d:b0:ea:
a8:b9:10:38:1f:a9:b8:1c:e2:e8:0f:5e:40:c9:8d:
5f:8f:35:02:72:19:62:af:a0:4c:b2:41:4c:d8:c7:
90:a6:46:f5:8b:3c:59:d2:6e:1c:bc:1f:f4:17:8a:
d0:37:94:88:8e:31:d8:d3:ed:ab:bc:18:2f:9c:0a:
29:92:c4:e0:ee:50:b6:50:fb:3e:d6:f2:e0:a7:0d:
13:61:17:29:29:dd:13:ed:cf:b7:c1:61:b8:cf:ab:
34:d4:db:81:7e:6b:cf:49:cd:1a:b4:22:40:05:61:
7a:28:2a:7f:40:5e:c4:7f:2f:d8:c4:9e:9a:3b:5a:
b4:61:22:57:74:fa:c1:b9:66:f3:15:9f:dd:3d:5d:
6b:9a:ad:01:d4:3f:6e:24:2b:46:35:4d:27:02:3b:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:92:8A:09:DA:2F:15:35:98:C3:94:9F:BF:DC:BC:17:FF:62:27
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/FD6SignaLxU1mMOUn7_cvBf_Yic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.72.0/21
185.70.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:76:f8:cc:21:be:6f:17:4a:e8:d3:62:db:c0:6a:f7:8f:58:
3a:4b:13:be:49:b5:f5:b7:30:b3:52:07:40:37:a1:ed:52:11:
4e:14:85:9b:33:d5:8c:4d:00:8a:4e:e3:bc:aa:24:f5:de:fc:
75:8a:13:83:03:11:5e:8b:0f:59:2e:f8:95:25:9f:f9:02:f3:
6c:5a:25:f9:c8:c8:0f:d0:0c:06:75:bf:49:85:18:a7:93:a3:
57:ef:b6:5a:6b:b0:14:3f:8f:77:5d:e4:b4:19:dd:e3:2d:0d:
be:40:4a:3a:25:4a:09:16:ab:0a:2d:16:a7:99:a3:a6:f3:52:
2e:1b:5e:4a:d5:c4:43:3d:cb:14:ba:bd:cc:06:d8:85:21:66:
58:a9:e4:be:82:60:a3:00:59:0d:94:ef:7a:4f:51:1c:05:e7:
e9:03:02:4b:35:00:70:a4:2f:95:a2:c0:3e:cb:16:3c:32:99:
b4:ea:fe:30:7e:40:73:d8:62:c5:9a:e7:9d:3c:93:e7:f8:88:
08:f7:5c:d2:f7:43:ec:08:31:90:02:b7:00:75:85:f8:1e:ae:
06:2e:85:91:4d:c1:c6:29:39:90:02:30:4a:84:67:2e:8c:c6:
44:be:17:40:71:f8:86:ee:41:d0:2e:c3:0e:f0:d4:d8:a4:f9:
87:be:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:22:15 2026 by rpki-client