This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6ZLGEmlJ6DwAUlFondk7yEp0gks.roa
File: 6ZLGEmlJ6DwAUlFondk7yEp0gks.roa (raw, json)
Hash identifier: KNzkS/ql4oLdu1Nmwyz2gOHi/LDOBE7tNaxOTn7ICv0=
Subject key identifier: E9:92:C6:12:69:49:E8:3C:00:52:51:68:9D:D9:3B:C8:4A:74:82:4B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019B7BA53CE47D2A2843B7B9EB5A9AE7EEBE
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6ZLGEmlJ6DwAUlFondk7yEp0gks.roa
Signing time: Thu 01 Jan 2026 22:19:45 +0000
ROA not before: Thu 01 Jan 2026 22:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59620
IP address blocks: 90.154.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:3c:e4:7d:2a:28:43:b7:b9:eb:5a:9a:e7:ee:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 22:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e992c6126949e83c005251689dd93bc84a74824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:c4:85:12:87:90:84:c9:1b:be:1d:74:91:
32:75:57:c4:a8:62:cc:e9:54:43:c3:78:23:d5:5e:
cf:aa:b8:7d:e2:38:48:53:71:cd:f3:1d:19:47:fc:
bf:a9:3f:df:9a:3b:9a:19:15:fb:23:47:ed:63:2f:
ef:fb:24:2c:78:e6:2a:4b:6f:67:56:aa:a8:31:68:
59:d4:ab:a3:16:07:de:88:64:d9:8f:e7:a4:3a:be:
96:09:68:b9:54:dd:b0:d7:f2:fa:7a:80:72:cf:6c:
ab:00:c9:fc:23:7f:71:67:16:9f:02:9b:58:e5:0d:
9a:1f:85:e8:cb:19:ec:75:9f:56:6e:5e:e4:68:f5:
53:42:67:22:26:e9:b8:04:3f:39:4b:a8:c0:38:6f:
2a:3c:0e:e0:08:4a:09:f8:ad:d4:dd:d8:ab:4f:7a:
1a:3a:04:e2:00:21:87:ea:ac:48:98:28:9c:0c:ea:
7c:55:d9:f9:06:bd:98:86:91:fc:25:16:c7:8c:47:
d9:53:50:a1:76:6f:83:dc:73:1d:fc:77:95:eb:39:
8f:cb:25:23:73:e7:a3:87:31:f0:13:55:bb:7b:ab:
9a:82:61:10:1b:6e:81:f4:5b:da:fb:50:86:cf:d2:
b6:6e:0d:6e:be:f2:50:00:84:be:f5:5f:79:cf:68:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:C6:12:69:49:E8:3C:00:52:51:68:9D:D9:3B:C8:4A:74:82:4B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6ZLGEmlJ6DwAUlFondk7yEp0gks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.154.224.0/24
Signature Algorithm: sha256WithRSAEncryption
45:49:ee:83:c4:f9:4e:28:c3:8a:b4:c9:57:05:ee:f5:81:4c:
47:df:5f:49:80:16:c3:ec:8c:cf:f6:5f:1d:1e:3b:9e:87:e7:
ed:1a:42:4d:1b:96:7c:1c:ca:19:c5:c8:e1:8d:3e:c9:7e:51:
c6:3a:99:f1:b7:6a:33:95:30:b5:a6:89:dc:46:10:93:57:45:
a2:35:f5:eb:52:70:30:da:af:55:c3:03:d3:0f:6d:ee:32:1b:
9f:35:18:c0:07:70:ab:ed:7d:ee:20:0a:1d:17:1b:4f:f0:f8:
5e:53:07:37:37:e3:59:40:6a:0a:c4:97:bb:4f:58:45:7e:b0:
86:a1:91:5e:e5:ed:1f:e7:2e:84:e6:67:10:99:fc:b0:3c:f4:
f0:f7:d1:d6:d8:29:e4:3b:63:f3:46:31:a6:38:89:2c:04:31:
05:97:57:06:4e:fd:d9:7c:28:b7:78:89:c0:d6:d2:04:a1:16:
26:c9:81:c2:13:93:60:5a:8c:a1:aa:48:e2:07:d5:74:30:ec:
f4:de:8e:23:6d:90:d4:f5:c5:f0:0c:0b:71:e4:00:e0:9c:c7:
9f:81:99:bc:1a:09:aa:70:b9:17:67:91:cb:f6:f0:c2:1a:94:
34:7e:ba:21:64:c7:43:b4:ba:ea:a6:19:49:21:0a:b3:cd:cc:
70:31:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:54 2026 by rpki-client