This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa
File: Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa (raw, json)
Hash identifier: WHKedsLPSn5sRQ/YnrYA97FUz2TYFtRFerhfVcN7fi0=
Subject key identifier: 1A:5C:79:45:C6:A0:61:BC:65:43:F3:E5:2A:F0:EA:BC:C7:2A:6B:67
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 019B78A229B2E7B390991A7DE484C2FAEB8A
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa
Signing time: Thu 01 Jan 2026 08:17:31 +0000
ROA not before: Thu 01 Jan 2026 08:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 185.237.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:29:b2:e7:b3:90:99:1a:7d:e4:84:c2:fa:eb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Jan 1 08:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a5c7945c6a061bc6543f3e52af0eabcc72a6b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:7f:f4:4e:0b:d0:d2:80:d9:4c:2b:ce:bf:
e5:f4:82:9d:ec:9e:ac:03:b9:b3:e3:ba:f7:40:ae:
55:07:36:2e:e3:b7:ff:b6:79:81:82:b5:d1:d1:43:
63:2f:79:e2:27:30:8e:4f:52:ab:e1:02:7b:7c:bc:
49:2a:bb:21:8f:da:0d:52:f6:cc:ce:a1:a1:22:b2:
05:7c:76:fe:61:d0:4e:ca:e0:71:71:76:b8:44:16:
d3:91:29:bb:4f:36:e4:50:a8:ab:94:42:d5:a4:79:
a1:7e:d7:15:0e:57:53:f5:46:89:09:52:01:71:99:
ed:1f:b9:a9:e9:a0:47:42:fe:43:8e:3d:3f:2f:e4:
74:4a:c2:72:2d:18:9a:ab:57:c2:58:4e:a3:73:55:
e1:3a:d6:cd:34:0c:e7:54:c0:85:c3:f1:3e:a0:09:
1a:04:22:6c:6a:f3:1f:1c:92:80:82:34:3b:3f:82:
8d:7e:8b:63:7f:bd:12:9e:18:54:3a:9e:16:e1:3b:
b6:02:5c:81:9e:d0:dd:0e:f3:38:d3:8e:97:be:84:
67:cb:32:9f:28:71:ac:45:3d:15:65:8f:e9:97:19:
ce:3d:24:17:99:ed:80:3f:1d:11:f4:00:5d:ef:f0:
23:23:f3:77:89:7e:60:8f:fa:9b:43:f7:33:fb:b5:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5C:79:45:C6:A0:61:BC:65:43:F3:E5:2A:F0:EA:BC:C7:2A:6B:67
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
54:06:d5:6d:5b:4d:28:e1:a1:f5:73:e2:02:6f:c7:e1:3b:49:
5d:29:a5:4e:9b:be:a0:62:de:2e:f2:c3:f4:bd:c8:77:ef:80:
55:e2:56:9f:26:4b:47:c1:d8:30:8a:54:9b:42:8b:5c:45:a8:
70:af:e8:94:08:d6:85:97:6e:a8:be:b1:b4:31:54:8d:66:06:
f9:39:94:31:6e:66:33:2a:a5:bf:b5:d9:8f:10:4e:0b:99:75:
88:61:7e:cf:61:16:2a:47:40:82:5a:12:4c:76:f1:64:8e:74:
2c:69:af:35:8c:c4:b4:6e:df:d0:57:ee:a8:7e:7c:21:55:b3:
34:0d:bd:ec:82:6b:3f:63:a4:88:88:3a:21:39:a0:68:11:19:
6d:ea:16:7a:ba:aa:f2:47:21:dc:3e:08:bc:b3:94:2f:89:51:
e0:53:35:b8:92:45:28:bc:b4:f2:af:20:58:c4:51:18:38:64:
d5:e5:6d:d8:96:83:3a:28:7d:f4:58:63:f4:2d:54:b4:4d:2f:
33:39:0f:75:39:3b:93:28:ff:9b:09:1f:c6:d8:81:dc:ef:b8:
cb:ab:40:53:92:6e:e1:d1:cf:f4:84:f7:e2:59:1a:56:7d:e4:
65:f9:cb:e0:b1:23:f5:f8:1b:9e:c3:61:cc:4c:2e:2f:be:96:
5d:32:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:56:02 2026 by rpki-client