This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/gWGcdmx046UezH3VAk6Wb2AQd9k.roa
File: gWGcdmx046UezH3VAk6Wb2AQd9k.roa (raw, json)
Hash identifier: hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=
Subject key identifier: 81:61:9C:76:6C:74:E3:A5:1E:CC:7D:D5:02:4E:96:6F:60:10:77:D9
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 019B7EA734A855DAD532D8644B1D074F9D06
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/gWGcdmx046UezH3VAk6Wb2AQd9k.roa
Signing time: Fri 02 Jan 2026 12:20:45 +0000
ROA not before: Fri 02 Jan 2026 12:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48809
IP address blocks: 2a05:36c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:34:a8:55:da:d5:32:d8:64:4b:1d:07:4f:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jan 2 12:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81619c766c74e3a51ecc7dd5024e966f601077d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:82:7d:32:a8:3e:b1:02:b3:49:f2:eb:03:
b6:8c:c8:37:f1:d2:5a:0d:c5:48:98:53:4a:f7:51:
0d:41:dc:10:a0:14:65:00:b4:ef:45:8e:e8:8f:c4:
19:ba:15:1b:99:47:b6:5b:f6:b6:11:37:2d:11:47:
cd:32:b2:a9:5e:76:8c:07:dd:cd:0e:1f:1f:7a:f5:
32:d1:60:f2:0a:24:a3:7f:df:7e:17:e0:0a:06:f8:
bf:47:fd:22:c4:11:04:dd:c2:a5:9c:9a:1e:70:ec:
fa:fe:12:86:52:85:01:f4:7a:64:15:ad:d2:dd:34:
dc:66:72:13:a4:0d:b6:e8:a7:6c:67:4e:00:1a:f0:
fe:ba:98:48:22:e7:d9:32:99:80:cc:2f:6f:5d:26:
5e:bc:04:97:73:f7:98:50:c7:99:8f:73:f1:cb:21:
7c:d9:6e:c5:d4:be:d6:1c:09:42:14:48:78:56:8f:
72:4d:5f:a4:f1:04:82:ac:cc:c3:dc:ae:23:9a:77:
58:67:bb:0d:7d:79:99:da:47:90:3b:87:61:22:4b:
0e:3b:7c:1f:33:1c:e7:71:4f:46:7a:97:1d:32:d0:
4b:15:b1:1c:d0:d6:50:ad:49:71:b4:45:4b:de:c6:
1d:93:c6:42:bc:62:44:69:55:0d:21:5b:0d:9e:48:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:9C:76:6C:74:E3:A5:1E:CC:7D:D5:02:4E:96:6F:60:10:77:D9
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/gWGcdmx046UezH3VAk6Wb2AQd9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:36c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
5c:95:44:77:22:93:2e:03:ec:85:a1:19:99:6d:d5:70:18:23:
c3:2a:72:c2:af:83:03:67:d4:37:20:91:5f:b0:5e:4b:6b:d5:
d0:04:8b:12:dd:39:ef:1a:42:7b:f3:77:54:ee:42:bc:a2:52:
b6:1a:6b:03:20:d8:d6:53:b8:e1:eb:f6:4a:6b:6d:74:19:a0:
ea:69:03:00:a6:05:34:21:63:f9:84:46:24:4e:86:d9:1b:95:
2a:7a:ae:0d:ea:38:43:10:17:b3:af:eb:4a:84:95:41:de:30:
c4:23:35:d6:36:1f:fb:52:ac:b8:a8:d6:d3:25:bc:c2:1c:75:
16:d5:da:6e:2c:88:c6:af:89:e5:c3:71:e1:46:78:c0:30:fb:
76:c2:67:e0:d3:e2:36:27:be:d4:f0:4f:8b:9d:98:4e:41:09:
39:9c:68:04:c1:fe:6b:ab:39:4d:9c:63:ec:2b:39:5a:ba:c7:
c8:09:26:25:3c:98:54:4b:fb:bc:d1:71:33:84:41:87:44:b3:
ae:ba:f2:2c:14:f4:99:20:e8:29:ef:d1:45:ea:c7:f3:6d:c8:
bd:f1:dc:8b:9f:ed:b6:49:fd:fc:b6:f2:dc:88:03:a6:53:2a:
4b:79:cc:8b:5d:cd:ec:e8:b5:56:9f:af:ce:9a:18:82:af:b2:
5b:66:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:53 2026 by rpki-client