This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/cGLTy3v02jMaFuI2lt1vFldJ6gE.roa
File: cGLTy3v02jMaFuI2lt1vFldJ6gE.roa (raw, json)
Hash identifier: Mv8wb6ru3vPg7kG+t7R12bI+G4Z3/AzfCjeSGEpf00M=
Subject key identifier: 70:62:D3:CB:7B:F4:DA:33:1A:16:E2:36:96:DD:6F:16:57:49:EA:01
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 019B7EA6BB8C7F67C267E581D7DA32706B8E
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/cGLTy3v02jMaFuI2lt1vFldJ6gE.roa
Signing time: Fri 02 Jan 2026 12:20:14 +0000
ROA not before: Fri 02 Jan 2026 12:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207782
IP address blocks: 212.6.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:bb:8c:7f:67:c2:67:e5:81:d7:da:32:70:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jan 2 12:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7062d3cb7bf4da331a16e23696dd6f165749ea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:fa:98:f2:01:07:50:04:2e:69:5e:a0:1f:
80:dd:32:3e:53:29:58:44:6c:47:3f:99:02:de:a0:
7a:c4:5e:d1:e9:39:f2:a3:8a:11:7d:b4:30:64:19:
15:b6:95:df:68:af:6d:fc:bd:b2:27:ef:e8:f9:4e:
6b:78:e6:e9:9f:11:21:c0:27:f0:a7:65:28:ab:0e:
17:07:2c:8e:96:da:20:be:52:39:7e:db:78:4f:02:
5b:6f:b8:d4:14:9d:ca:aa:c2:31:78:82:d6:0f:1d:
22:1f:ad:6e:5f:38:5b:ab:1f:2b:d5:61:03:72:6f:
ed:33:6a:07:86:b3:78:ac:e5:95:08:a0:39:f5:23:
26:12:3c:40:f0:3a:ce:20:88:19:47:84:7a:ee:a4:
49:80:f7:9b:df:09:d6:d6:de:66:63:11:76:22:d9:
78:f4:83:a2:a2:02:c1:22:fe:8b:aa:2d:8f:8b:92:
be:54:e4:54:a5:a4:49:4a:f1:03:6c:1d:e8:4e:ba:
51:81:49:d3:cf:bd:42:05:4e:0c:f2:99:64:e2:13:
45:a8:ba:a8:24:d8:6c:c7:14:9f:11:ef:eb:d1:02:
00:97:c3:50:73:60:e5:6d:af:08:8f:3c:56:ec:92:
8f:f1:39:8c:8e:cc:ce:2a:f9:08:77:ba:b3:76:9d:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:D3:CB:7B:F4:DA:33:1A:16:E2:36:96:DD:6F:16:57:49:EA:01
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/cGLTy3v02jMaFuI2lt1vFldJ6gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:61:2f:6c:1e:ff:67:eb:6b:10:fd:cd:de:86:9f:a0:d9:57:
fb:97:19:ac:73:b9:c8:0a:27:64:8e:1b:cb:ab:87:60:d3:72:
e8:cb:44:f5:d7:26:8c:7b:7c:ce:a1:1c:ec:2a:00:21:dc:22:
a9:55:14:d5:15:e5:4c:0a:0b:a1:dd:8d:c4:ff:58:13:fb:2a:
58:ac:d2:39:f4:f1:3d:f9:7f:d0:5b:a6:d5:cf:b6:41:aa:f5:
ad:5e:75:dc:7e:13:43:ef:63:d3:aa:7e:2a:17:48:a1:b9:2f:
a1:35:b4:9a:8c:48:01:bf:b6:e7:57:f5:c3:f2:d5:4f:cc:14:
02:67:f0:03:c0:ec:0f:c1:b3:f5:f3:c8:2e:36:4f:84:d6:6a:
80:b9:07:99:3e:af:27:3d:00:e5:7d:c3:72:ab:d6:97:fa:f6:
e6:fc:28:b0:18:be:e9:f5:a6:e5:f7:8d:3f:ff:41:94:c7:14:
38:83:29:38:48:c8:07:86:f8:64:d2:1f:d2:43:da:f2:1e:3a:
3f:40:98:97:ee:87:01:24:76:90:f2:8f:27:47:a8:78:dc:02:
68:9e:62:78:11:09:7f:c2:c0:ab:9f:01:4d:4f:3f:db:90:91:
21:d6:96:f5:c5:ba:91:2b:3f:99:87:24:7b:28:ec:44:e4:65:
f0:82:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:39 2026 by rpki-client