This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa
File: 6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa (raw, json)
Hash identifier: gPmBms7Ee3F+CBTlSi6nlg1BBxS+Ey8K66xwmLZe70g=
Subject key identifier: E9:35:95:6C:EA:34:69:16:66:71:7F:EC:A7:79:4F:0F:D0:A2:65:D2
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 019B7E37B280C08E9FA21C9B73B9419E2060
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa
Signing time: Fri 02 Jan 2026 10:18:57 +0000
ROA not before: Fri 02 Jan 2026 10:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 93.190.220.0/22 maxlen: 22
93.190.220.0/24 maxlen: 24
93.190.221.0/24 maxlen: 24
93.190.222.0/24 maxlen: 24
93.190.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:b2:80:c0:8e:9f:a2:1c:9b:73:b9:41:9e:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Jan 2 10:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e935956cea34691666717feca7794f0fd0a265d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:94:2a:b0:aa:90:e8:0d:e5:c3:47:84:37:
7d:59:d7:22:05:1e:55:22:9f:7d:43:53:d4:ea:29:
9b:d3:44:be:a4:c2:9d:d9:41:16:40:b9:fa:24:72:
12:2f:6d:88:c2:3b:79:f7:69:11:52:93:d3:10:f7:
8a:ae:df:b5:ba:ea:1d:68:0f:7e:f0:c2:0a:3a:9b:
d1:c4:08:4b:7f:3d:71:82:5c:1c:9a:3b:ca:24:70:
8f:4f:44:f9:f3:73:a2:31:dc:f4:bd:61:db:42:19:
42:1c:44:56:a1:36:22:de:a2:5d:19:cf:a6:b4:54:
74:3e:a5:fd:2c:7c:e7:9b:37:63:0b:64:68:df:c2:
b8:02:70:49:b4:64:d3:f4:ed:b2:77:10:2d:65:f2:
53:39:98:0d:14:6a:13:db:d3:3a:d7:56:59:c1:7a:
24:46:8a:e2:ce:a9:38:42:89:28:db:82:17:1f:fa:
3c:15:b0:de:eb:aa:4a:8a:f2:44:73:36:10:dc:55:
90:f8:a5:96:a4:f5:93:42:69:12:40:73:e6:6b:a7:
ef:2b:72:d8:0f:d0:c7:e5:ff:77:4a:36:f9:07:4c:
18:cb:a1:78:0f:95:47:6b:fd:aa:79:d5:e1:3a:43:
1f:21:9e:5c:4c:95:da:0b:bd:43:94:e4:f0:f8:e0:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:95:6C:EA:34:69:16:66:71:7F:EC:A7:79:4F:0F:D0:A2:65:D2
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:b1:7c:1f:36:87:bd:45:08:52:02:f1:63:45:21:ce:9f:73:
43:a3:3d:ef:c7:e0:e6:be:4c:71:08:45:22:76:ab:fa:90:7f:
14:ad:d8:48:34:26:ea:97:31:78:43:27:fa:30:2f:2b:06:a3:
41:39:67:48:df:46:2d:3e:35:3d:ed:55:4e:c5:46:85:09:2c:
79:92:4d:a9:2f:30:fe:e3:57:bf:d8:59:63:d0:b1:15:4c:37:
e3:7e:64:8c:6e:28:6a:85:bd:c3:89:65:6f:f7:c8:c1:0c:f7:
5c:62:72:57:0c:70:11:83:f5:38:ca:51:ce:66:1e:7b:d5:18:
b5:2a:ad:cb:cd:16:f6:37:54:c2:df:63:de:ef:c5:a9:97:09:
27:12:8b:83:ae:03:08:18:83:c5:2c:15:b2:0a:ef:02:ac:fb:
83:d5:7a:30:da:b4:97:75:13:3a:c6:bd:35:58:2b:a7:c7:10:
6f:fd:8c:ed:19:9c:08:79:27:c5:9d:8a:62:cb:43:a2:a1:92:
a1:aa:a0:0d:14:58:7c:fa:5c:d6:c5:ea:1c:29:24:05:45:e4:
84:51:3d:23:37:b9:d7:ae:96:8f:2a:7b:c1:cd:50:a5:a4:2c:
42:92:92:64:b0:9f:a8:bd:88:c0:28:94:9e:01:5b:dc:a6:ae:
8a:c9:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:52:08 2026 by rpki-client