This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/uW6MqNVytVrssfUBxC2o5Ci36m0.roa
File: uW6MqNVytVrssfUBxC2o5Ci36m0.roa (raw, json)
Hash identifier: 0xEUcG7sHwDRILOo98qDKEy+k04HnajY0Lu0XSxmDN4=
Subject key identifier: B9:6E:8C:A8:D5:72:B5:5A:EC:B1:F5:01:C4:2D:A8:E4:28:B7:EA:6D
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 019B797E3AFCD850526A645A771D2154B973
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/uW6MqNVytVrssfUBxC2o5Ci36m0.roa
Signing time: Thu 01 Jan 2026 12:17:54 +0000
ROA not before: Thu 01 Jan 2026 12:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39380
IP address blocks: 91.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:3a:fc:d8:50:52:6a:64:5a:77:1d:21:54:b9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Jan 1 12:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b96e8ca8d572b55aecb1f501c42da8e428b7ea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:4d:8b:a6:d3:e8:cc:05:15:66:23:ee:39:
49:93:c5:8f:0b:15:0d:b4:43:7d:12:ba:b0:1b:2e:
cf:89:24:18:73:1d:bb:20:b3:ca:94:a6:66:45:17:
d0:e8:69:70:61:27:d4:7d:0f:2d:ce:11:1c:6f:7c:
5f:6c:9c:50:42:42:c6:e3:26:31:8b:c8:33:57:d1:
89:98:db:d8:6e:36:e4:3d:05:61:bf:63:f7:95:91:
d8:b7:ef:15:f9:61:5a:76:5e:a2:dc:32:c6:bf:f2:
17:8a:3c:b9:a5:21:dd:93:91:eb:11:f4:41:a2:00:
ea:09:43:b1:9a:df:d9:66:9f:18:5a:71:9c:c1:fb:
8b:42:95:5a:99:5b:bc:bf:50:1a:98:4e:5e:dd:d0:
8e:05:d2:26:30:df:b9:f8:86:49:54:c5:a2:ae:bb:
4f:9c:95:04:92:0b:82:a7:f5:3b:2e:b8:65:ca:dd:
e1:24:31:dc:a8:9b:c0:4c:12:99:6b:f7:0e:1c:b3:
e5:2c:c8:98:5c:9d:04:08:14:d0:95:ac:e9:7d:03:
0a:c1:f6:33:f3:72:8e:31:69:c1:30:fa:c1:fb:aa:
83:4e:3e:67:3e:a4:07:98:4f:04:12:3b:4d:1f:1b:
23:a7:c7:3d:2b:45:04:f0:09:f1:77:83:24:4b:38:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:8C:A8:D5:72:B5:5A:EC:B1:F5:01:C4:2D:A8:E4:28:B7:EA:6D
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/uW6MqNVytVrssfUBxC2o5Ci36m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.250.0/24
Signature Algorithm: sha256WithRSAEncryption
94:84:79:53:cd:88:26:2a:cf:c8:0a:9b:68:ed:2b:8c:db:32:
54:e7:06:f0:77:e2:20:70:af:a1:3a:2f:c2:28:b1:b3:8d:c9:
18:80:c1:91:f2:b2:14:bd:ec:3c:9a:2e:a6:22:7b:0b:7e:2b:
a3:8d:a8:e9:0c:90:7b:32:ce:24:89:ad:f6:37:60:c2:6c:37:
b3:b8:62:7b:29:be:1f:a1:ec:2a:bd:f3:dc:0b:06:1b:a0:3e:
f5:d7:fa:7a:d3:6f:8f:4b:1d:fc:9c:8d:83:1d:07:75:9d:43:
c7:5e:24:8b:b8:88:12:2d:a2:05:c3:66:69:b5:36:f8:56:c7:
ce:aa:4e:69:14:03:b0:15:cf:45:e6:dc:82:bd:60:61:62:59:
ca:81:56:84:8b:41:8d:4b:8d:a6:96:32:89:10:fd:f4:3d:83:
69:a6:13:f0:7b:b1:29:30:b7:ac:07:5e:09:98:0c:8b:8b:58:
39:d9:62:9f:ca:da:06:23:a7:1f:36:68:01:55:f9:84:0c:1d:
6e:06:c1:59:78:48:5b:36:38:50:d0:6b:5e:ad:f9:c0:00:58:
05:39:f2:19:fa:76:7b:cc:61:b9:b9:b3:56:34:82:39:40:06:
bf:14:98:39:10:f7:87:39:7e:fb:4c:65:0d:ef:37:c1:07:91:
36:b1:e9:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fjr82FBSamRadx0hVLlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzEwM2ZhODVhY2VjNTdjNDY0ODU5MWNjM2U0MWNkZjdm
ZWUzOTcwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTZlOGNhOGQ1NzJiNTVhZWNiMWY1MDFjNDJkYThlNDI4YjdlYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F1Ni6bT6MwFFWYj7jlJk8WPCxUN
tEN9ErqwGy7PiSQYcx27ILPKlKZmRRfQ6GlwYSfUfQ8tzhEcb3xfbJxQQkLG4yYx
i8gzV9GJmNvYbjbkPQVhv2P3lZHYt+8V+WFadl6i3DLGv/IXijy5pSHdk5HrEfRB
ogDqCUOxmt/ZZp8YWnGcwfuLQpVamVu8v1AamE5e3dCOBdImMN+5+IZJVMWirrtP
nJUEkguCp/U7Lrhlyt3hJDHcqJvATBKZa/cOHLPlLMiYXJ0ECBTQlazpfQMKwfYz
83KOMWnBMPrB+6qDTj5nPqQHmE8EEjtNHxsjp8c9K0UE8Anxd4MkSzhs4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlujKjVcrVa7LH1AcQtqOQot+ptMB8GA1UdIwQY
MBaAFG5xA/qFrOxXxGSFkcw+Qc33/uOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2Yt
YmJmODI2YWE2N2MwLzEvdVc2TXFOVnl0VnJzc2ZVQnhDMm81Q2kzNm0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2YtYmJmODI2YWE2N2Mw
LzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9H6MA0G
CSqGSIb3DQEBCwUAA4IBAQCUhHlTzYgmKs/ICpto7SuM2zJU5wbwd+IgcK+hOi/C
KLGzjckYgMGR8rIUvew8mi6mInsLfiujjajpDJB7Ms4kia32N2DCbDezuGJ7Kb4f
oewqvfPcCwYboD711/p602+PSx38nI2DHQd1nUPHXiSLuIgSLaIFw2ZptTb4VsfO
qk5pFAOwFc9F5tyCvWBhYlnKgVaEi0GNS42mljKJEP30PYNpphPwe7EpMLesB14J
mAyLi1g52WKfytoGI6cfNmgBVfmEDB1uBsFZeEhbNjhQ0GterfnAAFgFOfIZ+nZ7
zGG5ubNWNII5QAa/FJg5EPeHOX77TGUN7zfBB5E2sem2
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:16 2026 by rpki-client