This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/GZwc2OqDb6itQvMFA87hgOFOj2o.roa
File: GZwc2OqDb6itQvMFA87hgOFOj2o.roa (raw, json)
Hash identifier: Dd65BZquEqeLdpFwYh4Zede4zYvv362L7cnmbQ6sueo=
Subject key identifier: 19:9C:1C:D8:EA:83:6F:A8:AD:42:F3:05:03:CE:E1:80:E1:4E:8F:6A
Certificate issuer: /CN=265e85f8262888b54a849bdcf4cec50316911a08
Certificate serial: 019B78A24B0F94FC2C817D9CDD756CFF4950
Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/GZwc2OqDb6itQvMFA87hgOFOj2o.roa
Signing time: Thu 01 Jan 2026 08:17:40 +0000
ROA not before: Thu 01 Jan 2026 08:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199548
IP address blocks: 185.64.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:4b:0f:94:fc:2c:81:7d:9c:dd:75:6c:ff:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08
Validity
Not Before: Jan 1 08:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=199c1cd8ea836fa8ad42f30503cee180e14e8f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:9a:f7:b4:72:e2:81:c2:d1:b3:72:7e:f9:
35:35:1c:c0:cb:5f:cf:60:c9:ff:6f:d3:2b:b0:d3:
c3:ee:71:45:6e:40:7c:15:b3:ff:a4:6d:e5:a5:3c:
81:2f:86:a1:c9:9b:07:4d:4b:79:53:91:49:ed:a6:
b4:db:35:ed:ca:37:a5:67:eb:6b:bb:32:56:90:db:
4d:b4:51:8d:cf:a4:41:18:b6:31:51:20:70:59:33:
e0:a3:d3:cc:7c:ea:bb:fa:65:e2:44:11:da:34:f6:
81:6c:3a:a7:26:a6:61:d7:21:ef:a1:ff:83:62:02:
0a:48:a6:45:ef:04:77:9d:b5:0d:38:68:58:b6:8b:
df:88:70:bb:53:fd:8b:eb:94:49:38:b9:6b:f3:2b:
62:6c:29:c9:fd:c0:6b:a2:d5:63:d6:3d:ac:35:40:
c9:dc:4c:29:61:32:b4:61:0a:86:e0:36:c5:e0:f2:
33:68:d4:df:2a:51:9e:88:39:68:d5:14:ff:ab:15:
3d:65:61:8f:1c:4a:d9:e3:ce:7a:5f:e7:d5:60:29:
47:be:93:3e:2b:1e:c5:01:51:f9:0e:a8:20:0e:c9:
46:97:95:f6:07:0f:25:a1:2b:fc:e1:97:8c:9d:84:
66:60:1d:37:9d:85:36:a9:25:6c:17:7f:be:be:71:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:1C:D8:EA:83:6F:A8:AD:42:F3:05:03:CE:E1:80:E1:4E:8F:6A
X509v3 Authority Key Identifier:
keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/GZwc2OqDb6itQvMFA87hgOFOj2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.77.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9f:76:2b:9a:08:5f:60:b9:e5:a8:df:7b:77:d1:b9:5b:65:
51:13:88:82:23:75:07:8f:b6:3a:52:3f:86:32:f2:a3:59:13:
95:38:be:7c:8e:7e:6d:9e:de:70:30:f9:7c:cb:12:00:8a:c0:
d6:3b:41:ed:22:79:3a:97:66:38:d4:2f:83:50:ca:b6:ec:26:
c4:7c:8f:95:14:c1:a0:a8:cd:85:b9:47:4f:42:e9:34:93:9b:
fe:f3:e4:7c:d1:cb:ca:d4:2f:5a:4e:37:5f:9f:b3:ca:1a:dc:
6f:9b:b6:35:77:c9:00:ef:b9:47:b9:ab:4e:22:b3:e4:70:45:
a7:19:ad:6b:2a:19:fc:b9:a7:d3:3e:46:60:32:8d:2a:30:a6:
d9:e7:8e:85:2a:f6:39:20:29:36:28:da:90:b5:47:2f:5f:d6:
81:d5:b3:6b:3c:6b:7e:bb:68:0c:ec:20:cb:e4:e8:f9:15:fc:
42:05:ef:54:f8:bb:19:0c:c3:18:3f:fe:a7:72:f0:55:86:96:
d6:30:3e:2f:71:82:b4:bd:e4:c6:3b:68:13:8e:c8:74:7f:09:
e3:b8:22:c6:bb:43:df:a8:3a:26:7f:c0:2f:fd:4f:90:e2:3d:
03:fb:22:25:3b:17:f0:3a:79:13:93:3e:de:0b:d5:f6:08:bd:
bd:cf:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:37:35 2026 by rpki-client