This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6ssP8VFvJ0QzHPKE_wxG-Us32QI.roa
File: 6ssP8VFvJ0QzHPKE_wxG-Us32QI.roa (raw, json)
Hash identifier: V+RpuEC0Zb8BGRxhS91rLHZlOxI2vGNsF12Yjie77Cs=
Subject key identifier: EA:CB:0F:F1:51:6F:27:44:33:1C:F2:84:FF:0C:46:F9:4B:37:D9:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019B7C1392B4DD7B1DE43EAC039EA777FCE3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6ssP8VFvJ0QzHPKE_wxG-Us32QI.roa
Signing time: Fri 02 Jan 2026 00:20:16 +0000
ROA not before: Fri 02 Jan 2026 00:20:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 185.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:92:b4:dd:7b:1d:e4:3e:ac:03:9e:a7:77:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 00:20:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eacb0ff1516f2744331cf284ff0c46f94b37d902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:4e:11:a3:72:7d:69:b4:ca:1c:6a:fe:eb:
b3:bf:e1:b5:c8:88:25:40:d8:5a:5f:c6:56:16:cd:
21:ee:17:3e:cf:14:e0:cb:12:91:08:6a:1a:2b:4a:
14:da:63:1a:cd:a5:e7:64:86:65:86:4c:17:b5:d2:
67:66:cf:a9:cd:44:c3:8a:5e:1f:3f:fb:d9:aa:30:
e3:07:4c:da:99:d8:ac:e7:08:80:cb:62:d8:59:bc:
c2:91:8f:2c:a1:56:43:b4:25:1e:77:45:68:06:43:
c2:50:4f:a5:a5:ca:c5:04:7f:11:b2:41:b3:a9:72:
2f:9e:4f:62:25:06:5d:4a:f9:37:9a:de:23:35:eb:
96:ff:3b:20:c8:fa:ff:be:a7:3d:4a:8e:53:0e:68:
ca:32:9c:2a:12:95:0a:ee:6c:49:c2:ea:c4:77:7b:
c5:f7:0c:0f:79:4e:71:b6:24:9f:33:06:cf:23:84:
c8:71:18:86:ba:74:90:3f:7e:e2:b6:bd:ba:a1:17:
08:2a:7d:bd:94:1b:8d:fd:ee:06:10:75:e2:83:c0:
69:f0:11:67:2d:9d:6c:29:83:9f:0c:69:e1:e1:d9:
a7:b1:7a:86:13:b6:35:d1:9a:4b:3b:9f:39:5f:f9:
b5:66:9c:a2:33:05:a9:a2:3f:7b:dc:f5:6b:e7:d7:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:0F:F1:51:6F:27:44:33:1C:F2:84:FF:0C:46:F9:4B:37:D9:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6ssP8VFvJ0QzHPKE_wxG-Us32QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6f:97:6d:97:94:7e:f3:1b:e2:b2:dc:1c:f9:91:af:3a:fa:
d9:b2:06:7b:0d:94:b8:70:25:de:08:b0:2a:c1:fb:53:6c:55:
bb:a0:0c:cf:0d:38:35:d7:fa:ea:6f:5f:ea:c3:39:f7:da:89:
64:08:03:c6:15:f4:2a:9c:52:a3:46:b4:2b:0c:d8:61:23:92:
26:28:64:30:10:8d:0d:53:60:77:5d:46:e9:c1:9b:34:dc:5e:
5b:a4:c9:2c:3b:de:82:8f:0b:34:bf:1e:ae:eb:87:7e:96:56:
cd:1d:d0:2a:01:61:a2:8d:17:02:5e:09:52:dc:72:a8:08:39:
5a:58:fc:b2:95:18:8c:c1:f0:9d:c5:e2:62:da:8b:0f:4f:31:
7d:e2:40:b8:3b:dd:91:3c:45:ff:77:c6:b3:61:44:4e:e3:24:
20:55:6e:06:c1:58:ed:0e:6c:63:78:25:42:62:8d:be:9d:8a:
35:0b:95:92:93:84:be:3a:86:6d:f9:cf:10:e9:be:72:7d:34:
8a:c7:97:87:ae:87:fd:43:01:ef:d2:81:87:ec:2b:9b:a6:78:
34:fb:cf:3b:9d:28:8d:4d:cd:87:8d:03:51:d4:43:bb:34:48:
5b:25:fa:4d:bd:11:69:7d:c0:76:f6:af:ba:43:30:f9:24:e6:
7e:6d:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:48:34 2026 by rpki-client