This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/m3YOl3KcHPw0jUGNX-PfWukNeHg.roa
File: m3YOl3KcHPw0jUGNX-PfWukNeHg.roa (raw, json)
Hash identifier: +MhGdxnaLuhxZ2eCGlUOStLfg0KmoTa8/jNIH8bkEKg=
Subject key identifier: 9B:76:0E:97:72:9C:1C:FC:34:8D:41:8D:5F:E3:DF:5A:E9:0D:78:78
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 019B7EA57C9FAE41F0D701B1052ED8EB85B8
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/m3YOl3KcHPw0jUGNX-PfWukNeHg.roa
Signing time: Fri 02 Jan 2026 12:18:53 +0000
ROA not before: Fri 02 Jan 2026 12:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30857
IP address blocks: 212.26.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:7c:9f:ae:41:f0:d7:01:b1:05:2e:d8:eb:85:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jan 2 12:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b760e97729c1cfc348d418d5fe3df5ae90d7878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:42:11:b7:0f:b4:ee:47:71:43:ed:1d:4a:
5c:d0:39:b2:21:d9:46:1d:0b:5d:bf:0b:ff:34:0d:
1f:61:40:b2:d0:34:4c:e0:a9:0c:b6:d2:f5:01:a3:
24:28:d2:98:e8:ee:11:80:27:aa:7e:89:36:c4:a9:
4e:32:f2:e2:67:3a:97:15:62:1b:f7:d6:a5:dd:0a:
2a:f5:7c:78:97:e1:d4:b7:0a:71:6c:5f:37:ea:52:
35:da:51:0a:b3:c2:7e:8c:fa:2d:b8:6f:8f:29:8a:
ac:34:eb:07:a5:21:84:c1:d6:19:98:7d:be:c9:55:
ff:02:e7:a7:91:9a:09:0a:de:67:cb:fe:1f:ca:76:
fd:8c:42:1e:43:9f:7e:59:41:cf:08:ab:26:03:d9:
60:e5:95:04:cb:42:83:04:5c:8d:a1:da:bb:90:cd:
e4:c3:71:b9:99:3f:06:eb:5e:11:3b:79:73:29:c0:
93:88:05:01:e6:62:fe:72:c5:72:03:4e:55:cc:bf:
28:b8:a2:2e:fe:ba:18:25:50:6e:5c:8c:c2:20:a0:
84:d2:2d:a1:4d:1a:34:3e:54:51:c4:09:3f:47:f0:
6a:07:f8:b6:80:1c:5e:d3:1c:2c:15:31:0b:64:f4:
db:72:98:ab:ea:ab:60:f6:e7:9a:ee:5d:62:39:16:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:0E:97:72:9C:1C:FC:34:8D:41:8D:5F:E3:DF:5A:E9:0D:78:78
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/m3YOl3KcHPw0jUGNX-PfWukNeHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.76.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ba:9b:21:91:ed:22:95:79:ee:9f:6f:cf:ff:86:56:23:09:
05:31:03:16:2b:e7:1d:1a:1e:ef:55:e2:d7:8d:d1:9c:0c:52:
df:eb:53:47:39:2e:fe:cf:ea:a1:20:1d:33:2a:c8:03:a3:b6:
4c:0d:bb:88:38:d5:6f:90:1b:df:17:c2:ab:5c:eb:3e:e0:72:
bf:6a:31:6e:b4:77:13:29:95:1d:ea:b8:15:6d:13:09:43:13:
d0:27:f9:eb:df:17:a8:ca:85:17:09:70:ab:d5:41:70:48:a5:
3d:ff:09:ec:4b:a9:30:ee:bc:cc:ca:35:9d:76:a7:d9:83:20:
ee:34:3f:63:f1:6b:73:63:cf:f7:5c:69:b1:42:d5:62:34:dd:
77:4d:16:4d:23:e6:37:d1:11:a4:48:79:9d:6c:b5:cd:19:d9:
90:f0:f1:a6:58:b8:15:1f:fc:21:90:1a:a2:57:d2:1d:6c:20:
96:09:9e:ca:41:2d:4e:84:a8:be:87:d7:05:08:3a:bf:dd:9c:
5f:e5:3e:60:df:01:cf:d1:8b:25:a8:0c:93:ce:97:b0:7e:24:
a0:16:27:23:fe:c1:a8:68:3a:bb:cc:fe:81:0c:64:e2:6a:95:
78:b9:68:bf:7a:10:d1:5a:84:ee:be:b9:05:96:e6:09:2e:97:
98:cb:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:31:45 2026 by rpki-client