This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/GJ1ZNWCiadTA4OXKLtYYxNpuLgY.roa
File: GJ1ZNWCiadTA4OXKLtYYxNpuLgY.roa (raw, json)
Hash identifier: T6SwW2mjQPJlbdkU0gRifVGifUsYYTJl8is31mQYWoE=
Subject key identifier: 18:9D:59:35:60:A2:69:D4:C0:E0:E5:CA:2E:D6:18:C4:DA:6E:2E:06
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019B7834797030E38DAFA4FA1FB7FCACBB6E
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/GJ1ZNWCiadTA4OXKLtYYxNpuLgY.roa
Signing time: Thu 01 Jan 2026 06:17:43 +0000
ROA not before: Thu 01 Jan 2026 06:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 45.149.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:79:70:30:e3:8d:af:a4:fa:1f:b7:fc:ac:bb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 06:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=189d593560a269d4c0e0e5ca2ed618c4da6e2e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:7b:38:2d:ac:76:86:41:9a:9b:55:9f:a5:
35:ec:24:65:a7:ee:fe:fe:6c:e0:0d:78:48:6b:64:
6b:ec:dc:1a:3b:44:7a:bc:6e:de:d2:c1:ef:62:38:
9f:94:71:ce:98:cc:cf:70:29:c7:46:d8:98:75:2d:
aa:aa:99:5b:9a:5a:ab:d9:6b:63:f9:dd:36:39:18:
12:e1:5c:8e:fd:db:2e:2c:cd:bb:ab:c7:5a:6f:02:
1f:3d:0d:4b:be:0a:b0:83:da:34:e1:95:ec:99:a3:
4e:b6:89:38:45:9a:3a:3c:ae:4c:77:a3:a6:98:2a:
08:1e:b9:32:d7:69:3e:41:78:a8:3d:24:dc:16:e3:
8d:e8:b2:7f:cf:ab:2e:1c:62:ce:49:0d:cc:c6:dd:
09:5b:27:58:53:fc:d4:da:3c:3b:6c:3b:23:b3:d8:
c8:d3:45:33:1e:ac:11:3a:da:a0:bf:70:6d:eb:52:
7e:e7:36:65:d5:4d:4d:29:15:74:78:80:24:25:9a:
a9:2b:44:e0:a5:3c:d9:92:93:f1:ce:e7:1e:21:a9:
01:46:20:f6:cf:7c:a1:9a:2f:50:36:b8:87:61:96:
9a:1f:53:a2:5e:c3:0e:c8:da:15:8c:2a:62:37:cd:
fd:9a:e6:c1:de:ff:70:fb:48:d7:f1:5d:a7:ef:53:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9D:59:35:60:A2:69:D4:C0:E0:E5:CA:2E:D6:18:C4:DA:6E:2E:06
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/GJ1ZNWCiadTA4OXKLtYYxNpuLgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.5.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e3:9d:51:48:f1:47:24:b7:43:9f:38:4f:14:60:ee:64:65:
90:b4:a5:fc:47:6e:83:08:4f:1a:f9:bb:49:ee:47:36:98:f7:
99:f0:a9:d3:57:1a:1a:2d:91:8f:0b:4e:3b:6c:bb:d2:c1:06:
af:a6:7b:48:20:5e:e4:03:e7:ff:3e:45:c2:8e:89:01:f7:86:
07:3e:b6:88:dc:5a:fb:dc:93:9f:7a:82:1c:b8:f6:88:f7:e8:
5f:fd:ef:78:e4:25:16:68:f1:ce:98:30:18:5f:cf:39:bd:ff:
9c:79:43:27:56:ed:18:2b:65:ad:53:e6:c4:ae:74:2a:ff:2f:
10:f9:7a:23:65:50:d6:3c:22:57:cc:65:5f:09:d7:d1:8e:df:
84:81:0e:d7:b1:aa:5b:44:d7:a4:d0:be:0b:8e:0c:34:c3:2e:
f4:b2:e4:6f:9a:73:09:94:40:99:0f:91:3d:90:83:b6:a3:ca:
1c:2b:b6:84:76:37:a6:9e:e9:53:11:75:17:99:ce:7e:ea:a7:
83:06:94:3e:1b:e7:ca:68:c6:19:9c:4b:19:b7:ba:30:45:28:
34:2f:70:12:85:04:ec:fd:b4:76:5a:b8:50:e5:50:b2:31:4c:
b4:90:9c:7d:c1:bf:16:b3:13:a3:ea:90:38:1a:13:bf:6d:ec:
ae:9f:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:54:08 2026 by rpki-client