This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/t6uJnjT04JxAMbhWunFCrGch9dE.roa
File: t6uJnjT04JxAMbhWunFCrGch9dE.roa (raw, json)
Hash identifier: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=
Subject key identifier: B7:AB:89:9E:34:F4:E0:9C:40:31:B8:56:BA:71:42:AC:67:21:F5:D1
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019B7F1565D90B2A1CA15C42E24D3082AD08
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/t6uJnjT04JxAMbhWunFCrGch9dE.roa
Signing time: Fri 02 Jan 2026 14:21:07 +0000
ROA not before: Fri 02 Jan 2026 14:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8220
IP address blocks: 195.234.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:65:d9:0b:2a:1c:a1:5c:42:e2:4d:30:82:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Jan 2 14:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7ab899e34f4e09c4031b856ba7142ac6721f5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:bb:a5:8d:06:e0:25:00:82:9e:25:98:ab:
0d:0a:bc:fc:24:2d:10:38:95:3a:f4:ec:c2:91:ed:
8d:52:80:d4:2c:67:d1:88:7d:da:84:d6:0a:2b:ce:
ad:20:22:fd:5e:a3:ba:d4:80:f8:b4:14:8c:6b:bf:
fd:b8:cf:dc:45:6d:4e:d3:30:53:34:c5:67:c2:fc:
35:2d:4e:ab:81:53:f1:47:cd:93:f7:d6:97:64:df:
75:d9:5d:af:3f:82:6c:d7:96:10:a2:3f:5f:a4:19:
88:f8:9d:3c:3b:d1:4b:f3:2d:27:f6:e4:18:f2:53:
1b:1c:45:96:f1:53:26:ef:dd:39:05:74:fa:be:7a:
7e:fc:10:b4:bb:a7:f6:af:54:c1:92:8e:44:a3:d7:
8b:02:8d:b3:2d:ff:3d:6c:61:bf:7a:42:e7:7d:d2:
9b:43:77:aa:da:15:72:5e:59:d0:3c:ef:99:9b:27:
f5:28:71:c8:ed:da:47:fa:7a:90:6a:e7:c8:6b:a7:
ad:22:a7:2b:b7:a3:3c:3e:54:5d:27:e3:6c:58:a5:
9f:69:1b:91:75:8b:83:e7:e3:a8:bd:a8:23:d1:6e:
cc:7e:fc:c5:49:28:e1:6d:5e:9d:92:85:c0:08:ef:
71:be:e9:4e:1a:09:a1:24:df:7d:f3:99:08:7e:6f:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:89:9E:34:F4:E0:9C:40:31:B8:56:BA:71:42:AC:67:21:F5:D1
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/t6uJnjT04JxAMbhWunFCrGch9dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9c:74:17:93:f0:cf:3c:b4:7c:1f:88:35:6f:87:3e:f4:35:
2f:4b:84:02:dd:c6:07:2d:52:bb:2d:51:07:d5:23:b9:1e:9c:
20:c5:53:fa:59:12:99:12:4c:f6:fa:b5:be:f4:6b:12:b1:15:
f5:9b:45:02:4e:1b:c8:62:d9:be:33:35:7c:1c:83:a3:54:e0:
d1:e8:14:f5:a0:cb:ce:8b:b6:6f:b1:ea:b3:18:af:04:4b:a2:
15:48:7d:3b:9d:f1:fd:8d:79:1b:af:c2:16:20:87:26:e7:e4:
a3:c1:07:34:f0:47:c9:ee:64:74:9c:8b:da:7f:ea:e7:88:2d:
3f:90:02:b4:d8:0f:f7:85:8b:49:2a:6a:9e:e6:69:82:1b:54:
ec:6e:b5:00:f0:32:f2:99:3c:de:a9:c5:2b:34:54:e3:f7:85:
63:91:0e:94:20:c0:6b:5e:9d:a6:28:b3:0f:e9:5d:17:f4:82:
db:79:64:63:60:58:42:cb:3e:2a:c2:1a:fa:b0:69:2b:f3:f4:
2f:ad:27:80:53:18:30:d2:4f:a1:5d:85:84:c6:e0:38:ff:09:
f6:dd:a6:08:58:ec:d2:a9:0f:16:91:88:43:d2:99:86:7a:57:
79:f5:16:20:bd:aa:c6:92:80:a0:6e:da:a1:f8:a4:3e:98:fd:
63:b5:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:19:14 2026 by rpki-client