This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa
File: 9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa (raw, json)
Hash identifier: J/ckLwZzEt0PQV77vngn+NxdBjiE32bwHDQ3p9KUBfE=
Subject key identifier: F4:1E:91:BD:38:F9:13:EE:8A:00:00:39:2E:1E:4C:24:76:4B:1A:21
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019B79ECA5FDEF7C9418711E684786F10537
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa
Signing time: Thu 01 Jan 2026 14:18:30 +0000
ROA not before: Thu 01 Jan 2026 14:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203541
IP address blocks: 37.61.184.0/21 maxlen: 21
2a06:c500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:a5:fd:ef:7c:94:18:71:1e:68:47:86:f1:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Jan 1 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f41e91bd38f913ee8a0000392e1e4c24764b1a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:5e:78:94:f3:eb:e5:75:6c:b4:1a:be:ce:
c8:42:5f:b8:4e:75:7d:9c:e1:1c:c9:eb:7f:d8:34:
63:a8:29:39:34:5e:1f:df:9a:3a:b5:4d:57:55:b1:
07:62:05:b7:e1:e9:ba:fc:59:b4:e4:80:55:14:de:
8b:28:b9:88:4d:28:0d:ce:9d:74:4d:fb:3f:25:1f:
53:54:c5:55:0f:61:7d:92:64:04:12:2e:44:24:1c:
43:5a:1c:c1:72:96:01:b5:ff:9e:10:7f:a6:82:75:
92:50:da:f3:92:d9:fe:00:af:a7:9a:29:4e:1a:0e:
5d:c7:bf:ea:42:fb:cd:88:e9:1e:02:d7:63:16:e2:
db:fa:c4:f2:fe:65:9c:55:f6:17:7a:57:55:95:02:
2d:f3:b5:0e:94:0d:a0:c3:55:f9:5a:74:27:0f:c6:
6a:7a:d3:ee:ff:71:bb:b2:4d:a0:8a:c1:86:ba:6d:
09:84:2d:e1:a7:c3:df:09:8d:a8:9e:6d:2b:aa:e1:
49:4a:94:f8:2b:93:2a:75:eb:0a:96:58:b7:7a:4b:
e3:4a:cf:dc:d0:1d:28:b4:a4:41:86:e1:fa:09:6d:
74:0d:c6:6a:12:1d:4d:a4:db:c1:fc:44:18:2c:93:
40:f6:1f:e2:94:30:da:51:95:69:7c:dd:cd:fb:38:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:91:BD:38:F9:13:EE:8A:00:00:39:2E:1E:4C:24:76:4B:1A:21
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.184.0/21
IPv6:
2a06:c500::/29
Signature Algorithm: sha256WithRSAEncryption
33:01:df:96:5b:3d:1c:ae:64:2e:63:e4:37:9f:05:93:f9:04:
f7:d9:11:bb:ab:2e:6b:83:e5:d9:fb:0a:89:41:37:a4:b9:3b:
e0:95:ae:43:a9:48:56:48:8f:fc:d5:eb:7d:e1:6f:ac:61:8d:
22:47:70:86:ab:85:b2:5f:a7:57:9f:0f:4e:1c:54:81:7f:42:
8a:70:a0:77:3e:47:bc:b6:97:da:08:a2:2a:45:65:85:12:f3:
de:9c:1b:b7:46:c9:8d:85:bc:73:10:38:bd:7b:92:7d:4b:32:
98:0c:d3:91:66:44:68:69:19:f0:4a:69:98:c5:90:b5:ba:6a:
1e:b3:d6:3b:89:d6:6d:be:7b:da:4f:a9:d4:7a:85:14:7b:1a:
12:15:4d:8d:27:fb:76:b3:24:25:44:7f:44:36:20:02:cf:70:
b8:47:44:75:ae:86:8f:41:be:fd:f9:37:3e:ec:fd:1f:e7:9b:
c4:cf:05:fa:34:0c:53:f7:52:45:6c:f0:95:67:2e:4b:fc:73:
25:34:e9:a8:6e:f3:0b:34:55:b5:d7:05:fa:50:5d:be:45:da:
1a:f6:f3:b8:36:ae:b2:c5:70:70:19:0f:a7:ef:45:59:3f:8b:
56:2b:59:d9:c7:71:62:cf:a5:b3:f8:5f:2d:a4:5b:42:ec:7a:
ea:79:8f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:32:10 2026 by rpki-client