This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/mTMV3JVVafTQbCI8fMfsYYbI-GM.roa
File: mTMV3JVVafTQbCI8fMfsYYbI-GM.roa (raw, json)
Hash identifier: OvidQY4NfhMTBeSM+DOJ+WEE6JBe1DZJww12CtdTTqg=
Subject key identifier: 99:33:15:DC:95:55:69:F4:D0:6C:22:3C:7C:C7:EC:61:86:C8:F8:63
Certificate issuer: /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial: 019B797E24C631BC1FB5D5944CB6CCA3ED1E
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/mTMV3JVVafTQbCI8fMfsYYbI-GM.roa
Signing time: Thu 01 Jan 2026 12:17:48 +0000
ROA not before: Thu 01 Jan 2026 12:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214645
IP address blocks: 2001:67c:26cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:24:c6:31:bc:1f:b5:d5:94:4c:b6:cc:a3:ed:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Validity
Not Before: Jan 1 12:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=993315dc955569f4d06c223c7cc7ec6186c8f863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:39:36:2e:06:79:d5:d4:2b:fd:ca:a4:7b:
a0:d6:56:61:64:13:0e:43:c8:d6:56:6c:2b:a5:d3:
11:7c:d9:0e:93:27:dd:1b:63:dc:9f:60:62:77:e3:
f2:9d:09:f1:61:6e:17:48:bb:fb:63:14:65:75:d1:
55:36:d8:d5:a9:31:42:e2:73:2d:7b:82:de:ba:52:
0b:70:fd:9e:96:2a:4c:9c:57:16:b8:4f:4a:5b:2e:
0a:fa:ab:c3:ed:d4:4b:81:03:63:15:f6:ef:31:c7:
20:a3:81:0f:d2:33:dc:b5:8e:55:40:d1:c0:60:90:
a5:c6:e9:8e:98:91:59:ff:84:bf:92:0c:d4:95:d6:
ce:21:a5:e9:57:04:c5:c3:67:02:ae:0d:63:94:f1:
16:93:8a:53:ac:dc:a6:cd:e7:47:b1:b3:cd:4d:c4:
1c:a0:84:b7:68:d9:ef:0e:00:e3:c7:2b:25:b7:22:
17:95:b8:f9:aa:82:6e:6a:cb:33:17:83:15:c4:85:
27:89:be:03:a1:19:fb:f5:8a:3e:a5:93:1c:06:5b:
bd:9f:a7:96:12:e0:c1:96:4c:23:82:c2:ad:2d:a2:
ef:95:e1:df:4b:59:62:b2:d6:0d:35:9b:6f:e3:ca:
03:80:67:b4:81:d3:81:0f:b2:0b:ce:a7:88:83:89:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:33:15:DC:95:55:69:F4:D0:6C:22:3C:7C:C7:EC:61:86:C8:F8:63
X509v3 Authority Key Identifier:
keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/mTMV3JVVafTQbCI8fMfsYYbI-GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26cc::/48
Signature Algorithm: sha256WithRSAEncryption
9c:08:26:5e:27:86:30:41:9a:ae:a0:ba:e0:c6:7f:4f:de:a8:
b5:0f:3e:7f:67:9b:ca:ab:37:11:9c:f7:8b:5f:ba:31:12:90:
d2:7e:4a:c2:91:c2:8a:18:17:87:0d:63:df:8a:cf:3e:a4:3c:
dd:9e:c4:3d:23:4e:cb:0d:31:20:c2:b7:9c:88:54:54:ef:fe:
34:8a:cd:56:5d:9a:67:6c:f5:9b:c2:c7:b9:bc:3a:b1:c0:e5:
33:ec:5f:70:8f:56:10:8a:3d:1c:d7:3f:fd:a0:b2:6c:3c:6a:
33:0e:ba:87:f6:0e:87:be:76:ff:39:1d:c1:02:f1:e3:3f:d6:
7b:2f:89:80:39:20:fc:dd:8d:0c:37:5b:17:92:5e:44:00:e5:
6c:d6:ff:de:ba:f0:de:a6:27:32:9d:94:5b:5f:54:88:ea:3b:
7c:3a:62:95:9e:df:01:3a:65:da:9e:73:89:ea:b2:af:fb:4f:
91:fd:26:3a:ea:c1:aa:96:92:9a:c0:5d:20:50:4a:76:5c:9a:
b4:01:67:95:17:ae:c7:90:fc:12:fe:be:b5:fa:1a:f3:10:a5:
a0:83:db:5f:f6:64:6e:f6:fe:63:0d:1a:5d:91:53:46:ce:06:
1a:4c:aa:f0:e4:1f:9b:26:8f:61:ea:ec:7a:ee:a0:47:7e:26:
00:69:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:09 2026 by rpki-client