This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/JM6GKQftlnRZxpBKt8Qp5u-DSws.roa
File: JM6GKQftlnRZxpBKt8Qp5u-DSws.roa (raw, json)
Hash identifier: wuuHv8GFSYvD4TiRpQntr79G5SD1rNYlmVrdlTMzxqc=
Subject key identifier: 24:CE:86:29:07:ED:96:74:59:C6:90:4A:B7:C4:29:E6:EF:83:4B:0B
Certificate issuer: /CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Certificate serial: 019B7AC7ACF22B93137D84286B13A649A64B
Authority key identifier: 9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/JM6GKQftlnRZxpBKt8Qp5u-DSws.roa
Signing time: Thu 01 Jan 2026 18:17:44 +0000
ROA not before: Thu 01 Jan 2026 18:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44705
IP address blocks: 81.91.189.0/24 maxlen: 24
185.175.128.0/22 maxlen: 22
188.124.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:ac:f2:2b:93:13:7d:84:28:6b:13:a6:49:a6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Validity
Not Before: Jan 1 18:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24ce862907ed967459c6904ab7c429e6ef834b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:69:81:ce:5d:35:54:52:04:0f:80:52:41:
c8:0c:e7:4a:c8:22:13:60:37:ab:56:7c:2b:49:83:
e3:66:1b:f9:b5:48:5c:66:f8:c5:c2:98:6d:18:ed:
bf:f9:88:65:a1:98:84:ff:3d:f2:ba:80:e8:1c:86:
76:5e:79:1f:06:27:9a:76:c2:53:db:7a:f2:03:62:
5b:6b:a7:eb:a8:70:ac:61:e6:2b:b1:5c:8d:f6:ca:
5a:94:9d:1a:de:8c:2c:4d:04:a7:1b:12:e5:29:68:
2d:5a:6b:40:3a:3c:8b:68:bd:bb:52:e5:77:42:f1:
f9:21:32:51:33:4a:b1:8f:13:d4:f3:8a:b5:e8:37:
31:a8:dc:a9:18:01:e4:3e:14:dd:0a:a9:62:66:f8:
c9:93:49:0f:f7:a1:91:d6:59:14:1a:4f:e7:4c:8e:
b6:d0:b4:0a:b5:7c:db:52:d5:2b:4a:a8:34:e5:3e:
a1:e3:3a:9a:56:e3:6b:ba:c1:59:74:1d:23:b8:c4:
a2:49:f1:0e:52:15:82:ef:b3:25:11:9a:23:06:d2:
22:bb:af:23:e6:8d:9f:70:bf:4c:cf:c1:e5:2e:48:
66:34:23:ba:28:59:62:8c:07:e8:ec:72:81:f9:bc:
b8:d8:44:9e:c9:40:73:33:d5:a5:21:bf:d9:8a:07:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CE:86:29:07:ED:96:74:59:C6:90:4A:B7:C4:29:E6:EF:83:4B:0B
X509v3 Authority Key Identifier:
keyid:9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/JM6GKQftlnRZxpBKt8Qp5u-DSws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.189.0/24
185.175.128.0/22
188.124.240.0/22
Signature Algorithm: sha256WithRSAEncryption
26:5d:0e:b3:5c:93:db:e6:b8:f4:ae:8b:af:fe:48:69:7d:bb:
82:0b:f6:ca:fc:9b:f0:44:2b:d5:c6:85:af:80:3e:65:27:73:
f6:29:4d:7b:9f:e6:1d:a9:e1:42:90:fa:a3:f6:26:71:02:c5:
f9:3e:06:88:31:55:88:c6:9f:7c:f6:af:08:1e:e3:92:83:6b:
b5:19:ab:e8:9d:92:b2:c6:15:55:6c:4d:f4:97:b8:64:2d:63:
21:64:0b:9c:93:0d:46:8f:0a:67:89:fc:77:2f:8d:7b:6a:a2:
7a:d3:5d:26:cb:f3:e7:9b:41:71:8e:ff:cc:44:14:59:aa:50:
5e:ce:bf:e1:2a:46:03:97:bc:00:06:6b:45:d8:38:7a:66:af:
ef:f2:3c:ab:cc:a6:23:c9:b0:5f:eb:da:3a:3b:be:52:05:ae:
bf:62:c6:72:f3:88:e8:4d:0e:bd:49:35:c5:91:39:4b:a1:ba:
05:fd:ad:9e:ae:7d:04:8d:e0:3a:e2:54:20:7b:c8:90:15:c7:
5e:bb:4f:96:da:26:cd:f1:99:93:79:c7:80:89:a3:ea:52:6c:
91:df:8f:dc:6f:b7:51:16:73:8c:06:1b:4f:95:bd:d7:2f:e6:
0c:93:89:18:11:b3:00:b1:30:16:6c:d2:77:f5:a0:d9:4b:e3:
db:c4:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:41:48 2026 by rpki-client