This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GWOMCgc6frfuXzWmR3iYp-MVmSA.roa
File: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (raw, json)
Hash identifier: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=
Subject key identifier: 19:63:8C:0A:07:3A:7E:B7:EE:5F:35:A6:47:78:98:A7:E3:15:99:20
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019B79EC0881BFDBB35FC241AF938ADD0FD5
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GWOMCgc6frfuXzWmR3iYp-MVmSA.roa
Signing time: Thu 01 Jan 2026 14:17:50 +0000
ROA not before: Thu 01 Jan 2026 14:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204508
IP address blocks: 2a05:4140:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:08:81:bf:db:b3:5f:c2:41:af:93:8a:dd:0f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 14:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19638c0a073a7eb7ee5f35a6477898a7e3159920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:36:06:4a:73:05:3e:f1:3a:ca:a8:b4:4f:
3b:87:38:5f:12:eb:d1:23:99:fb:a3:5e:03:10:55:
4a:a0:01:82:5a:1d:01:a3:c5:38:db:c0:79:6b:61:
71:99:f8:56:6d:c8:13:4e:50:19:81:a4:60:eb:ba:
52:a6:6d:2d:22:de:c3:e1:7b:41:5e:e7:66:50:b7:
eb:01:d4:77:62:f0:da:4b:d1:97:aa:e1:00:ab:68:
fa:0b:ed:0f:f4:ba:e4:af:95:ab:db:b4:9b:b5:59:
8c:83:c9:09:1a:6f:a0:42:65:e7:c0:10:9b:00:b5:
46:bd:84:d8:36:d8:de:fa:00:80:13:fa:04:fe:76:
47:ea:a3:37:2a:f3:fa:61:65:d5:a9:f8:d2:47:56:
1e:e3:8d:b4:ad:79:41:93:42:ca:c5:d7:10:52:ff:
13:2d:cb:ea:85:f7:e6:49:52:9f:71:95:1b:42:8e:
ba:d1:5f:66:76:97:c6:ca:02:6a:de:5f:4e:3f:3e:
2e:16:5b:3e:54:56:76:04:6f:27:11:8e:18:82:40:
a0:43:88:66:ce:6c:c8:b6:92:e3:da:6f:1d:47:43:
03:5e:00:01:71:2b:d6:36:cd:11:46:be:f2:31:8e:
30:a0:25:76:f4:70:0b:d1:bf:d8:f8:13:b0:81:aa:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:8C:0A:07:3A:7E:B7:EE:5F:35:A6:47:78:98:A7:E3:15:99:20
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GWOMCgc6frfuXzWmR3iYp-MVmSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:300::/40
Signature Algorithm: sha256WithRSAEncryption
27:c7:45:3c:fe:de:b3:85:88:dd:1f:a9:43:ca:80:00:6c:22:
f9:ab:be:4b:62:5a:b7:c9:2a:87:46:35:30:f1:b1:05:65:c3:
ff:9f:14:0f:1a:42:41:90:3c:2c:86:b6:e4:0e:dd:f2:23:3a:
51:02:83:35:57:63:5f:32:9a:83:cd:ab:80:0f:36:09:48:f0:
9e:25:36:1b:6c:31:5f:9e:ee:d2:e5:82:c7:a7:a7:07:53:71:
13:0a:8f:09:07:38:01:fe:61:17:40:8a:c0:eb:5a:b7:0f:91:
b8:1f:0c:91:96:6a:b4:3b:82:63:f0:1e:8f:39:79:ed:de:38:
57:8b:92:2f:1d:e0:8b:bc:0a:52:71:af:4a:39:89:26:cf:6c:
5c:97:c4:28:f0:1d:0b:1b:cd:35:8a:98:c4:da:ae:70:e8:e5:
01:29:53:72:42:5a:1b:90:2f:97:25:8e:b5:fc:7c:1f:63:11:
d4:a3:82:1e:f4:f5:da:c4:86:7f:25:ea:f0:ef:23:0b:30:b0:
6c:b9:8a:81:86:d4:9a:ed:42:b7:8c:f2:96:91:3a:86:b6:19:
4f:b1:91:58:da:20:f3:bb:2c:7b:b9:61:4a:5f:40:ab:c9:47:
de:08:b7:8d:81:e8:21:e3:70:2a:6a:d0:be:bb:c5:80:4d:4f:
51:63:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:16:42 2026 by rpki-client