This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/6iAprnV5kqIXyXcpRUbGQgO9SaM.roa
File: 6iAprnV5kqIXyXcpRUbGQgO9SaM.roa (raw, json)
Hash identifier: pdyKwoYg0ynw9WDHpbBigS85Bj0l6yeKu12lhKM9YfA=
Subject key identifier: EA:20:29:AE:75:79:92:A2:17:C9:77:29:45:46:C6:42:03:BD:49:A3
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 019B7A5B8EC3ABE90CBE179A2804CE31AA3F
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/6iAprnV5kqIXyXcpRUbGQgO9SaM.roa
Signing time: Thu 01 Jan 2026 16:19:39 +0000
ROA not before: Thu 01 Jan 2026 16:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199471
IP address blocks: 185.83.87.0/24 maxlen: 24
2001:67c:c48::/48 maxlen: 48
2a13:fc80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:8e:c3:ab:e9:0c:be:17:9a:28:04:ce:31:aa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Jan 1 16:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea2029ae757992a217c977294546c64203bd49a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:79:83:93:ee:26:06:b9:6b:a3:37:5b:96:
8c:38:6f:cb:a4:32:3e:f5:0a:5d:9f:95:78:1f:16:
e9:6c:2f:30:aa:98:45:8e:ad:2f:b6:d6:7a:c9:9b:
b1:48:eb:1c:66:ad:e0:d6:04:b6:98:bf:a2:9b:55:
e6:b8:bc:31:fb:1b:7c:55:f5:f1:b3:c0:a5:2f:f2:
ba:81:70:70:9c:57:97:a9:bc:17:2b:4d:cc:f3:f4:
19:48:c4:fc:df:62:a3:58:9a:d0:4e:25:17:1d:6e:
e1:4d:bb:19:0c:ed:20:e1:9a:4e:00:2d:5b:27:fc:
f3:7f:79:a2:9f:88:54:8e:f6:ec:47:98:a9:c6:75:
27:f1:3c:14:62:23:7d:74:57:8f:15:2f:9a:c9:58:
d9:c6:2e:54:4b:5e:b9:da:96:02:b1:13:74:6a:bb:
7c:98:76:5f:0b:a9:4c:9e:9d:1c:a5:58:ce:46:24:
8f:68:df:c8:7c:d3:6d:5a:16:63:24:dd:32:bd:89:
9e:73:83:c0:e9:6d:fa:c1:19:9e:5a:c0:40:ca:94:
d5:52:40:c8:41:80:d6:a6:ba:47:ac:16:95:37:dc:
9e:57:2e:1f:c4:02:90:5e:88:d7:7f:e1:8c:8f:59:
60:20:78:a9:36:59:48:6a:60:ff:42:d7:80:14:9d:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:29:AE:75:79:92:A2:17:C9:77:29:45:46:C6:42:03:BD:49:A3
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/6iAprnV5kqIXyXcpRUbGQgO9SaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.87.0/24
IPv6:
2001:67c:c48::/48
2a13:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
32:ab:e5:b7:ef:29:b5:f2:41:8b:60:59:3b:3b:48:b6:ed:b1:
c2:20:73:03:90:65:aa:71:ba:f3:52:69:57:15:82:d3:64:e3:
36:54:af:72:e9:c8:fd:93:2e:24:cc:76:7d:d7:c3:79:4c:46:
9f:a2:2a:87:a4:91:fd:d6:e6:1f:81:b0:41:e9:14:fb:a6:33:
79:96:db:2a:03:25:71:d8:f2:0f:85:97:06:a8:de:eb:54:e7:
0a:38:38:17:b7:6e:cc:2f:c4:36:4f:27:02:53:27:8b:b8:47:
93:92:44:9d:5d:22:91:fa:73:c6:05:4d:6d:98:6d:e3:df:f1:
03:e5:6a:9b:5e:2f:89:e3:19:8c:3b:a3:ef:9c:b7:59:86:9e:
27:f3:e4:3f:f1:53:15:38:46:55:fc:45:ef:cb:cc:ec:77:20:
08:d7:e5:60:2d:c6:b6:04:88:8a:78:b8:a8:53:2f:69:bb:c6:
08:cd:f6:86:cc:7a:df:ee:5a:24:c2:3e:6f:b5:07:f9:20:7c:
71:09:62:ac:63:0c:6d:aa:8d:69:81:5c:55:18:5c:c6:a9:5f:
61:7c:f0:da:b4:37:f2:57:2e:da:1d:d6:6d:d0:42:39:10:d5:
53:42:28:5d:7b:d9:ba:e9:13:98:ce:df:5b:6c:ac:5f:60:e7:
25:37:05:ad
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZt6W47Dq+kMvheaKATOMao/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjdhYjNmMWE5M2U3MTRmMzA3NGEwNWQ4NmZjY2UyMjA2
MzA1YTgwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTIwMjlhZTc1Nzk5MmEyMTdjOTc3Mjk0NTQ2YzY0MjAzYmQ0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b15g5PuJga5a6M3W5aMOG/LpDI+
9Qpdn5V4HxbpbC8wqphFjq0vttZ6yZuxSOscZq3g1gS2mL+im1XmuLwx+xt8VfXx
s8ClL/K6gXBwnFeXqbwXK03M8/QZSMT832KjWJrQTiUXHW7hTbsZDO0g4ZpOAC1b
J/zzf3min4hUjvbsR5ipxnUn8TwUYiN9dFePFS+ayVjZxi5US1652pYCsRN0art8
mHZfC6lMnp0cpVjORiSPaN/IfNNtWhZjJN0yvYmec4PA6W36wRmeWsBAypTVUkDI
QYDWprpHrBaVN9yeVy4fxAKQXojXf+GMj1lgIHipNllIamD/QteAFJ0+NwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOogKa51eZKiF8l3KUVGxkIDvUmjMB8GA1UdIwQY
MBaAFKz3qz8ak+cU8wdKBdhvzOIgYwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMt
YWQ0M2NjZDdhYWU4LzEvNmlBcHJuVjVrcUlYeVhjcFJVYkdRZ085U2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMtYWQ0M2NjZDdhYWU4
LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAuVNXMBYE
AgACMBADBwAgAQZ8DEgDBQAqE/yAMA0GCSqGSIb3DQEBCwUAA4IBAQAyq+W37ym1
8kGLYFk7O0i27bHCIHMDkGWqcbrzUmlXFYLTZOM2VK9y6cj9ky4kzHZ918N5TEaf
oiqHpJH91uYfgbBB6RT7pjN5ltsqAyVx2PIPhZcGqN7rVOcKODgXt27ML8Q2TycC
UyeLuEeTkkSdXSKR+nPGBU1tmG3j3/ED5WqbXi+J4xmMO6PvnLdZhp4n8+Q/8VMV
OEZV/EXvy8zsdyAI1+VgLca2BIiKeLioUy9pu8YIzfaGzHrf7lokwj5vtQf5IHxx
CWKsYwxtqo1pgVxVGFzGqV9hfPDatDfyVy7aHdZt0EI5ENVTQihde9m66ROYzt9b
bKxfYOclNwWt
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:52 2026 by rpki-client