This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/6SE0GUdovthwCJnBecSees-R98Q.roa
File: 6SE0GUdovthwCJnBecSees-R98Q.roa (raw, json)
Hash identifier: wuAooSaYMdUEo2LCRFAmaguJm9EhLDeuwm3V/FeDNYQ=
Subject key identifier: E9:21:34:19:47:68:BE:D8:70:08:99:C1:79:C4:9E:7A:CF:91:F7:C4
Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial: 019B30D34165EB899B05201B6A325A740B51
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/6SE0GUdovthwCJnBecSees-R98Q.roa
Signing time: Thu 18 Dec 2025 09:38:29 +0000
ROA not before: Thu 18 Dec 2025 09:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200999
IP address blocks: 5.102.40.0/22 maxlen: 24
5.102.42.0/24 maxlen: 24
45.92.240.0/22 maxlen: 24
45.92.241.0/24 maxlen: 24
45.92.242.0/23 maxlen: 24
45.130.28.0/22 maxlen: 24
46.60.16.0/21 maxlen: 24
64.225.128.0/20 maxlen: 24
64.225.128.0/21 maxlen: 24
64.225.136.0/21 maxlen: 24
74.63.0.0/21 maxlen: 24
74.63.8.0/21 maxlen: 24
91.212.135.0/24 maxlen: 24
91.212.141.0/24 maxlen: 24
91.212.142.0/24 maxlen: 24
91.212.149.0/24 maxlen: 24
91.233.150.0/24 maxlen: 24
91.234.53.0/24 maxlen: 24
124.197.32.0/20 maxlen: 24
124.197.33.0/24 maxlen: 24
124.197.34.0/24 maxlen: 24
124.197.40.0/21 maxlen: 24
185.48.232.0/22 maxlen: 24
185.52.192.0/22 maxlen: 24
185.178.84.0/22 maxlen: 24
185.254.220.0/22 maxlen: 24
193.142.27.0/24 maxlen: 24
193.142.52.0/24 maxlen: 24
193.142.54.0/24 maxlen: 24
194.146.52.0/23 maxlen: 24
194.146.60.0/24 maxlen: 24
194.146.61.0/24 maxlen: 24
194.152.58.0/23 maxlen: 24
2a01:9aa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:30:d3:41:65:eb:89:9b:05:20:1b:6a:32:5a:74:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Validity
Not Before: Dec 18 09:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e92134194768bed8700899c179c49e7acf91f7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:1e:f2:aa:f5:eb:0c:f0:ca:dd:92:a3:0c:
e6:4b:e7:1d:9e:96:ce:c3:0a:92:dd:43:88:cc:6b:
b9:72:ab:7d:5d:8a:fc:14:92:9b:5b:01:e1:94:09:
ec:4a:10:b3:50:55:48:59:f7:30:1c:33:c0:da:07:
2d:73:29:87:5e:af:d8:eb:f9:7b:62:90:ef:8a:2d:
5c:28:b5:32:4f:dc:05:9a:22:b5:49:3a:a5:fa:b3:
6e:1a:4b:cf:8c:9a:c8:e5:55:f5:71:33:c2:ce:49:
e2:ce:b6:6d:4e:86:55:11:42:f5:73:b9:4b:3f:b8:
e9:26:65:73:0a:06:fb:2e:77:09:ed:b8:de:8b:87:
22:52:40:40:af:25:15:8a:ed:69:32:07:a9:4d:2e:
da:80:93:91:27:57:01:2f:1b:14:64:17:fb:4c:b0:
58:27:53:1c:12:a7:db:69:6d:8f:d0:04:af:7b:e1:
50:82:d5:35:c0:08:cc:ba:36:f9:2b:1e:72:3a:e7:
55:61:b5:b5:af:d9:33:ac:ef:f8:82:a4:46:36:1a:
f2:b7:e9:f6:14:1f:8e:b8:18:52:bb:ec:02:3e:89:
76:6c:0a:75:d7:00:f8:73:ff:b7:58:58:9f:cb:a0:
15:4f:13:26:4a:b0:1d:0b:82:1c:7e:f8:fa:b4:6c:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:34:19:47:68:BE:D8:70:08:99:C1:79:C4:9E:7A:CF:91:F7:C4
X509v3 Authority Key Identifier:
keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/6SE0GUdovthwCJnBecSees-R98Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.40.0/22
45.92.240.0/22
45.130.28.0/22
46.60.16.0/21
64.225.128.0/20
74.63.0.0/20
91.212.135.0/24
91.212.141.0-91.212.142.255
91.212.149.0/24
91.233.150.0/24
91.234.53.0/24
124.197.32.0/20
185.48.232.0/22
185.52.192.0/22
185.178.84.0/22
185.254.220.0/22
193.142.27.0/24
193.142.52.0/24
193.142.54.0/24
194.146.52.0/23
194.146.60.0/23
194.152.58.0/23
IPv6:
2a01:9aa0::/32
Signature Algorithm: sha256WithRSAEncryption
86:80:3c:ca:92:6a:09:7e:cb:c7:a0:a8:04:e5:64:a7:16:b7:
d2:5a:36:a2:82:4d:ba:0a:c6:0a:cd:90:95:aa:85:2e:ec:ec:
d0:33:1e:d5:df:66:3a:5f:14:61:ac:12:6c:b7:28:87:0b:02:
54:8f:35:6d:6f:75:3b:86:1f:22:7d:45:e6:26:ff:b7:43:f5:
c9:c5:dd:50:77:03:17:51:a3:7b:11:4f:81:10:34:22:80:3a:
83:3e:bc:0c:e3:1e:46:b8:eb:e9:5d:a0:31:a5:30:27:2a:d3:
65:d2:92:25:5b:d0:80:f2:bc:ae:ef:0d:ba:dc:04:be:f3:bf:
cc:8f:40:6e:26:ed:10:83:50:96:fc:9f:ab:c6:1f:de:ba:a8:
68:f0:15:40:80:24:67:e7:c2:d7:73:92:cc:a5:f1:ca:df:2a:
fd:b0:24:a2:86:73:6d:a7:19:99:72:82:a5:1c:05:65:e6:3b:
50:83:ec:ed:be:e3:0d:be:42:de:34:cf:50:5d:94:a0:f2:c3:
fa:5d:b7:77:00:b7:ff:34:40:4f:79:05:ee:5b:0d:57:5e:c2:
7c:7b:f2:84:e5:d8:3a:d7:59:d3:a8:7a:30:8b:92:5f:d2:2f:
2c:20:f5:22:a7:a3:9f:a3:9c:3a:fd:29:67:8a:cd:46:85:8d:
62:d8:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:16:23 2025 by rpki-client