This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/a2gamHaBwEzpT1CSDGHEmtwoaQA.roa
File: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (raw, json)
Hash identifier: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=
Subject key identifier: 6B:68:1A:98:76:81:C0:4C:E9:4F:50:92:0C:61:C4:9A:DC:28:69:00
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 019BFA40829720FD5F300429A252EA5455E7
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/a2gamHaBwEzpT1CSDGHEmtwoaQA.roa
Signing time: Mon 26 Jan 2026 12:21:30 +0000
ROA not before: Mon 26 Jan 2026 12:21:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3209
IP address blocks: 193.30.48.0/22 maxlen: 22
193.30.52.0/22 maxlen: 22
193.30.56.0/23 maxlen: 23
193.30.58.0/24 maxlen: 24
193.30.59.0/24 maxlen: 24
193.30.60.0/24 maxlen: 24
193.30.61.0/24 maxlen: 24
193.30.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 12:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:40:82:97:20:fd:5f:30:04:29:a2:52:ea:54:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Jan 26 12:21:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b681a987681c04ce94f50920c61c49adc286900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:88:84:2e:80:08:58:5e:c5:80:25:7d:8d:
06:fd:6d:ab:8a:eb:82:67:40:dc:00:42:c2:dd:8b:
c1:1a:f2:aa:8b:48:25:fb:d5:c7:7d:a9:7c:05:7f:
b3:d8:dd:de:83:5e:95:8d:a4:4e:d7:d5:17:3a:54:
45:94:3b:c5:58:e2:c4:ae:e9:47:fc:40:9c:ae:9c:
09:71:4f:80:b6:dd:36:87:e1:de:0a:dd:f6:7f:64:
59:c5:21:bc:48:ea:6d:72:37:c8:de:39:7a:a0:38:
e2:1b:ec:a8:26:b9:c5:a9:36:14:50:ee:c3:9f:a7:
4d:89:27:0e:ac:da:8b:00:1a:6a:df:5d:ba:4f:f6:
46:96:23:e7:dc:97:f9:23:6d:25:76:13:44:d7:a9:
1e:89:9a:f4:d8:86:48:61:f3:d9:8d:f6:ec:48:90:
1b:54:77:7c:09:b8:be:59:e6:07:b4:e2:9f:c7:82:
27:fd:4f:d1:e2:d1:c9:99:ab:f4:a5:1b:02:b7:a4:
79:7b:b5:6d:64:bd:11:3c:99:14:fd:3b:a8:e3:9a:
2e:ba:e0:4f:5e:b8:5f:8b:7e:4d:5d:c3:0f:ec:d5:
98:cc:01:46:05:3e:22:48:11:27:64:7b:e5:eb:a0:
ca:a2:95:43:3c:0a:a6:0a:e0:46:f2:82:98:d7:78:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:1A:98:76:81:C0:4C:E9:4F:50:92:0C:61:C4:9A:DC:28:69:00
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/a2gamHaBwEzpT1CSDGHEmtwoaQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.48.0/20
Signature Algorithm: sha256WithRSAEncryption
35:c2:41:fc:57:7a:d6:7e:15:f4:46:76:54:f6:63:9d:d8:df:
a0:f3:95:79:e1:f6:e0:bc:41:c2:4f:e0:fd:f7:7d:46:7f:43:
93:b6:81:4c:e6:fb:a8:51:9b:6b:d9:38:5c:7f:dc:19:8b:8d:
49:28:06:c6:6a:57:35:e2:1d:7d:a3:c9:6d:b1:a9:ab:5f:ad:
8e:e4:48:33:0f:d1:fc:27:d2:75:8d:67:99:39:30:58:b3:a6:
0d:a9:5c:5e:b5:af:1a:16:33:92:7c:5f:f1:85:a6:ff:18:17:
19:4b:a6:fc:7c:15:92:00:8a:06:be:76:8c:2b:28:95:38:af:
21:f8:0f:9f:6c:0c:d1:2a:cb:c9:cf:27:8b:09:04:b0:17:00:
84:53:1c:ed:ae:2a:40:06:f9:de:5a:df:bd:07:8b:ab:18:d9:
34:c3:26:a8:4a:77:15:05:b7:0d:e5:5f:cb:c6:5c:a2:38:1b:
47:a0:c7:f1:8b:34:cb:9d:7d:54:67:12:87:c2:53:ac:c3:46:
cf:84:a1:1c:0d:a8:05:21:c0:8c:9b:27:7a:39:54:f5:43:82:
bb:6d:87:16:54:87:39:07:c6:d2:64:9e:82:88:d3:44:6d:7e:
2a:5d:c5:7d:17:cc:ea:84:ad:b0:8f:c0:7d:4d:13:d7:2d:13:
34:22:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:31:33 2026 by rpki-client