This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa
File: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (raw, json)
Hash identifier: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=
Subject key identifier: EA:D5:AD:69:B7:6D:E5:B4:AB:B6:C6:87:43:D4:01:A3:82:02:C9:C4
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019B7E3865140EE24B3B243E817553D2559A
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa
Signing time: Fri 02 Jan 2026 10:19:43 +0000
ROA not before: Fri 02 Jan 2026 10:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28853
IP address blocks: 193.138.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:65:14:0e:e2:4b:3b:24:3e:81:75:53:d2:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Jan 2 10:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ead5ad69b76de5b4abb6c68743d401a38202c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:18:72:31:9a:fc:17:aa:53:f3:fd:e4:e9:
05:33:30:a6:e6:01:24:3c:d9:6a:30:a0:7b:6b:20:
4a:24:62:32:06:0c:b0:22:2e:77:fb:95:a6:7a:ea:
ce:f6:3c:cd:05:e4:fc:d3:4c:c9:35:30:bf:ba:0e:
c9:ef:02:b9:43:d3:f5:d5:16:48:b1:cf:67:fd:9c:
40:9f:5e:8b:a4:e8:44:bd:75:33:fd:27:30:06:b2:
84:27:52:d0:92:47:f1:52:f5:70:dc:d4:2f:e1:84:
4e:ec:79:9a:eb:65:97:a5:e7:0d:0e:8b:f2:be:bb:
11:13:2c:06:1b:79:3f:78:69:9f:12:eb:33:ef:23:
e7:7f:c3:a7:8f:05:0c:1a:39:1a:87:3c:55:9a:81:
39:07:1d:dd:d0:1d:89:64:cd:5f:e9:cd:91:0c:89:
9b:65:a9:8a:92:95:ac:6e:0c:23:26:b3:5d:ed:8b:
7c:03:ab:64:4d:fe:20:a1:24:9c:ce:4f:61:9a:1f:
ac:a0:b1:8a:d2:41:cc:82:c8:aa:54:b6:70:57:2f:
d6:b4:40:90:fb:62:b0:95:4e:ea:7c:f1:42:11:a5:
89:c5:0f:34:f2:7e:6c:c2:ce:60:27:76:43:8b:f8:
bd:34:24:6d:e8:c0:dc:b3:89:5e:be:5a:d9:c3:bd:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:AD:69:B7:6D:E5:B4:AB:B6:C6:87:43:D4:01:A3:82:02:C9:C4
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.103.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ae:16:4a:08:b7:12:7d:8d:2e:73:9e:e4:c2:fa:08:7f:e4:
b2:ab:89:64:e9:bd:af:e2:ce:37:07:a1:47:23:38:82:d7:0c:
be:e7:fc:f0:17:28:4c:9a:97:96:ce:5c:6e:53:29:4d:44:4d:
5d:83:05:7d:ea:55:52:b6:87:34:7b:6b:1d:ea:cd:af:d4:5b:
32:96:e4:cb:50:71:46:81:b9:96:1b:f0:90:a4:b3:72:54:7c:
ff:12:5f:87:f1:12:77:b1:3b:dc:59:b1:a8:75:30:f0:27:3c:
50:b2:20:5a:05:16:a4:0b:b8:c8:7c:aa:a5:30:2b:f8:78:c7:
58:71:eb:f7:11:d8:86:95:78:2a:42:59:f4:ce:61:f2:2a:cb:
b2:dd:da:4a:ed:86:3a:62:70:b3:db:02:d0:5e:74:ab:36:f4:
c3:c3:71:a6:e1:8e:f2:95:0d:e7:c4:74:ae:52:8a:4a:a5:3e:
1a:1e:73:98:ce:fd:5a:c4:92:ee:a6:72:ef:0e:f6:a3:61:31:
00:87:53:dc:ee:42:0b:58:bf:66:4c:48:8e:d8:50:6f:cc:d7:
3a:1a:ad:74:89:01:5a:66:fb:69:cb:0c:b0:4e:4e:ba:09:1b:
e6:0f:49:54:8a:40:c9:93:75:5b:7d:ac:57:f4:25:32:ed:70:
5c:52:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:44:49 2026 by rpki-client