This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/gtTwRDBJR-BbMiRZiF0UkREdrNI.roa
File: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (raw, json)
Hash identifier: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=
Subject key identifier: 82:D4:F0:44:30:49:47:E0:5B:32:24:59:88:5D:14:91:11:1D:AC:D2
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019B7C7EF434C0D297C9A4202B15CE69FDB8
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/gtTwRDBJR-BbMiRZiF0UkREdrNI.roa
Signing time: Fri 02 Jan 2026 02:17:33 +0000
ROA not before: Fri 02 Jan 2026 02:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 141.98.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7e:f4:34:c0:d2:97:c9:a4:20:2b:15:ce:69:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jan 2 02:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82d4f044304947e05b322459885d1491111dacd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:88:6a:18:6f:c7:b2:b2:41:a2:48:ee:d2:
a0:17:31:5a:34:dd:b9:f0:52:21:f3:63:da:57:e8:
cb:cb:39:1e:69:ed:db:f2:76:61:a3:c4:fe:51:52:
e6:3c:1a:9f:e7:df:22:c3:2d:0a:51:29:39:10:64:
c3:35:95:e8:f4:ca:f7:fb:ad:7a:27:43:31:86:66:
b3:0e:48:58:92:11:eb:e6:81:fe:a3:50:12:9f:be:
4c:55:bb:c2:62:f1:f7:05:ee:4c:fe:29:e1:f5:d4:
cb:56:f8:91:8a:92:f5:f1:4f:77:a8:f5:cf:b6:ea:
ea:66:cc:81:9d:9c:29:48:f2:b6:86:bf:83:22:a3:
4d:b5:03:6c:c9:32:21:cf:f5:53:73:a2:e8:64:11:
d0:b5:3e:47:46:a4:46:da:dd:ec:0d:17:15:94:b2:
00:6f:f0:5e:ec:95:b0:ea:c0:0b:f3:c5:5a:ad:83:
53:2e:f5:a9:d1:63:27:99:fe:23:22:ea:66:c4:d1:
c9:e8:de:16:26:b6:2e:ac:78:c5:dc:ef:67:8f:e9:
4b:44:44:fd:78:cf:dd:a2:5f:a3:93:00:25:74:c2:
83:ae:03:eb:b5:51:c1:1b:49:e3:30:e7:f7:9b:c9:
0b:b2:9a:23:d2:56:7a:e8:6d:ec:d5:02:e7:8a:ee:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:F0:44:30:49:47:E0:5B:32:24:59:88:5D:14:91:11:1D:AC:D2
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/gtTwRDBJR-BbMiRZiF0UkREdrNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:80:c9:c4:11:18:56:3a:3b:29:05:83:fa:63:d9:7b:be:a4:
25:24:df:17:a3:04:a7:89:01:67:71:50:5a:37:a0:63:21:cb:
ea:06:7e:d8:27:9f:ee:d7:86:2e:61:e6:c2:59:db:0d:3b:57:
a9:4a:8d:26:10:cc:4c:1a:c0:12:be:fc:2b:27:f3:5a:7f:9c:
91:a5:1c:cd:4e:01:2a:86:d2:bc:c9:8e:d2:e2:83:03:55:b7:
07:e7:46:33:2e:31:3c:87:48:79:19:5d:d8:96:82:52:5d:ed:
31:c9:71:24:68:e5:23:13:82:9e:36:5a:3b:ae:6d:62:2f:30:
51:1b:3f:bf:7f:9f:94:12:47:1a:3e:9c:6c:c8:3f:6f:05:d1:
d6:7a:00:48:a4:38:08:07:57:ea:fe:ef:e5:14:e9:ea:00:49:
6a:c7:a0:75:60:f4:0c:ce:3f:4e:20:6c:ec:a1:4c:07:20:25:
62:44:52:c0:0b:ba:92:4f:5a:e1:ec:84:64:58:43:29:aa:eb:
9b:af:f4:a0:ad:e7:b3:20:0f:f6:a9:d5:d6:02:69:c6:b6:fd:
43:21:cf:92:49:1f:37:b5:e0:3d:d2:7e:bc:25:82:a1:6f:90:
01:a6:c9:05:d4:7b:2a:36:67:79:85:37:e1:3b:b0:f5:3e:d0:
29:c9:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:02:54 2026 by rpki-client