This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/aiNfAtwLgUKsL4qA7akVZhQU1bA.roa
File: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (raw, json)
Hash identifier: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=
Subject key identifier: 6A:23:5F:02:DC:0B:81:42:AC:2F:8A:80:ED:A9:15:66:14:14:D5:B0
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 019B775901327EC9D8F316C3AEC2FB1BE84A
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/aiNfAtwLgUKsL4qA7akVZhQU1bA.roa
Signing time: Thu 01 Jan 2026 02:18:00 +0000
ROA not before: Thu 01 Jan 2026 02:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215359
IP address blocks: 2001:67c:1858::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:01:32:7e:c9:d8:f3:16:c3:ae:c2:fb:1b:e8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Jan 1 02:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a235f02dc0b8142ac2f8a80eda915661414d5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:e9:0d:ed:71:7a:5e:75:10:60:67:b5:aa:
ef:f9:8c:1a:a6:75:fa:be:a6:56:4e:19:69:ee:2c:
db:95:1f:3f:35:a3:99:25:db:8b:94:68:4f:7c:5c:
b6:3b:c0:e9:18:e9:e1:61:e2:5b:6d:2d:0f:f5:5e:
d1:2d:c0:d1:4e:be:19:fe:e2:f2:d7:0f:e2:e7:d7:
2e:09:e0:42:85:0c:a3:ef:d4:31:f1:fe:87:f1:52:
ea:3c:a4:ae:c8:c3:98:90:30:50:fe:e7:95:b2:7e:
d5:e9:60:24:7a:26:96:e6:37:a4:21:b7:af:93:97:
cd:71:59:1c:26:ae:21:f8:1a:d4:97:76:4b:71:6c:
b2:06:e5:a0:b3:f3:a3:be:8e:73:9e:a6:12:d1:fb:
3f:99:49:09:c5:cf:8e:60:5c:9d:ea:5b:71:df:69:
5d:83:fe:9f:66:6d:56:65:83:49:59:30:d1:26:69:
37:9d:92:2d:e0:4b:8d:e6:e5:d2:0e:8c:d9:65:1b:
4a:a7:6e:f5:49:ab:93:a2:14:f4:c7:26:34:88:6a:
46:0d:1e:57:f9:a2:7d:09:b0:35:d8:b1:cf:5d:21:
ed:49:bd:37:ba:5b:23:74:70:dd:44:f2:b1:15:31:
fb:93:a7:33:a6:74:6c:a4:07:20:02:46:9d:9f:69:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:5F:02:DC:0B:81:42:AC:2F:8A:80:ED:A9:15:66:14:14:D5:B0
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/aiNfAtwLgUKsL4qA7akVZhQU1bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1858::/48
Signature Algorithm: sha256WithRSAEncryption
a6:b1:d4:e9:11:9c:4a:6b:d3:09:b4:af:69:d6:bf:61:e8:9a:
33:e4:a1:eb:ce:8b:91:32:5c:e5:97:d2:3b:d8:09:38:97:29:
f5:98:e3:11:aa:d1:bb:f9:09:6d:c8:fd:40:1b:0d:ef:e5:c2:
83:9c:53:3e:c6:80:1c:9e:8d:a5:5f:c1:72:f9:52:4e:25:98:
2f:3f:90:6a:42:92:08:56:e4:cc:bf:ea:dc:fe:c7:74:ba:28:
e6:b2:54:b6:a1:9a:97:50:e9:f2:d2:55:24:44:51:2a:6c:b0:
9e:58:7b:b0:c1:54:0c:25:ee:b8:66:25:79:d5:a8:89:6c:87:
9f:af:30:1f:eb:d2:f3:23:b6:dc:56:0e:01:f7:a4:92:0d:5a:
3e:47:a8:58:aa:ae:8f:b1:18:26:8c:d4:1d:82:94:ba:ca:78:
93:ad:f6:95:42:7a:3f:b4:c5:0f:64:ac:3c:ca:c1:0f:c1:e3:
b2:62:8e:4a:a8:52:5b:2a:8a:3c:f4:c0:01:71:24:c8:ee:21:
bb:d7:10:28:03:4b:79:4c:83:56:6f:ec:4f:cf:84:3f:2a:09:
52:68:c1:eb:55:47:bc:46:ec:25:e0:59:13:31:24:6d:82:54:
d4:a2:12:48:09:a9:7f:c4:6b:32:49:79:7e:42:5e:b0:f5:98:
26:96:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:07:14 2026 by rpki-client