This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/6V_G9gsVnZgMxjUsmipYSTZCa_Q.roa
File: 6V_G9gsVnZgMxjUsmipYSTZCa_Q.roa (raw, json)
Hash identifier: 8vwGqAEHUA9stliHzrXfudIca0hLWVZRYgeWkRbQdXU=
Subject key identifier: E9:5F:C6:F6:0B:15:9D:98:0C:C6:35:2C:9A:2A:58:49:36:42:6B:F4
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 019B7F839013B36E26E3B9594A778182F7D5
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/6V_G9gsVnZgMxjUsmipYSTZCa_Q.roa
Signing time: Fri 02 Jan 2026 16:21:27 +0000
ROA not before: Fri 02 Jan 2026 16:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199898
IP address blocks: 91.238.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:90:13:b3:6e:26:e3:b9:59:4a:77:81:82:f7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jan 2 16:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e95fc6f60b159d980cc6352c9a2a584936426bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:39:c8:24:b0:08:dd:33:81:ec:9d:9a:ed:
4b:3b:a0:52:07:44:74:88:c5:7b:ec:b5:3b:32:27:
21:d8:d7:38:1c:45:b8:94:fe:18:7a:92:7d:db:64:
8a:11:a4:a6:98:aa:8f:10:e7:09:94:67:d9:4c:40:
e1:d6:e1:c9:e8:38:eb:b3:ed:f5:15:78:23:dd:61:
f2:43:c1:c9:d0:cc:de:ae:73:e4:c5:e8:33:ca:dc:
9c:2b:33:e0:71:32:1c:00:b3:b8:8b:b3:42:d6:4e:
f1:88:c9:59:d6:30:a3:a3:66:3c:de:65:1a:52:f6:
92:fe:40:68:ba:44:e1:35:8c:66:44:5d:23:8d:01:
5a:c9:23:f9:65:ea:51:b0:27:3d:0b:e5:a0:45:41:
76:76:28:57:c5:53:ad:cb:68:b6:e9:a8:b0:a6:01:
0e:c1:28:b8:37:60:4c:68:ab:c5:a7:11:05:d2:de:
80:b8:51:f2:f5:71:f3:83:38:44:22:84:56:50:51:
66:62:78:8c:0e:d9:f1:13:2d:65:d7:f4:ee:d1:ef:
67:04:40:f1:34:84:1e:d5:35:3d:be:a0:b4:58:f3:
ad:21:56:ae:40:9e:d4:45:40:f7:23:fe:01:a7:4f:
66:eb:f8:83:6e:17:ca:a2:97:85:b5:07:cf:e7:be:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:C6:F6:0B:15:9D:98:0C:C6:35:2C:9A:2A:58:49:36:42:6B:F4
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/6V_G9gsVnZgMxjUsmipYSTZCa_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6f:5d:14:5e:7a:2a:f8:8b:15:29:0e:4a:67:c1:96:bc:af:
d4:09:81:37:ba:b5:87:23:59:9e:5c:57:d9:6c:96:08:b2:f1:
e8:af:a6:f8:a6:a8:fa:fb:8c:eb:de:c4:e5:b2:9f:95:cf:25:
4c:a8:65:09:88:d3:64:ec:d8:eb:94:b8:e6:ce:8b:01:b0:b4:
04:b1:cf:90:8c:75:8b:42:6a:4d:d8:fa:85:b1:da:1f:b9:09:
2f:64:ea:03:e8:04:f5:97:0c:c3:3a:cb:85:ca:00:0c:d4:05:
4a:77:24:d2:cf:f9:56:e7:57:6e:c3:15:0a:7f:3a:76:30:e4:
59:d0:36:d8:87:ae:c9:0d:ac:fb:a9:ed:50:02:f9:08:48:82:
a6:e1:d9:68:58:8f:44:bd:7f:90:4b:34:1a:7d:9e:76:8c:ac:
79:60:71:d4:50:72:cb:2c:fd:e2:a0:21:07:66:bd:7c:6f:5c:
4e:35:ea:73:78:a5:ba:ac:93:97:d0:a2:5f:8b:3d:be:91:a4:
20:d3:e9:43:b6:aa:92:4b:cb:3e:e9:be:a7:c1:d1:c9:7e:76:
31:9f:0b:52:13:f0:85:28:97:5d:c5:23:00:61:39:8c:b5:d2:
16:56:a9:66:1a:1a:24:ea:be:98:7e:57:6d:28:dc:b7:59:9d:
15:dc:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:36 2026 by rpki-client