This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/GREeqZaODQe_pjDOkl9K06yc2fM.roa
File: GREeqZaODQe_pjDOkl9K06yc2fM.roa (raw, json)
Hash identifier: 9+xjCnaLjGsg7N2WRsPTLMdY0ESrGSWfOEeNfY4jOkE=
Subject key identifier: 19:11:1E:A9:96:8E:0D:07:BF:A6:30:CE:92:5F:4A:D3:AC:9C:D9:F3
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 019B7D5C0098FA1F24E9C5B9B5ACAB5F600F
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/GREeqZaODQe_pjDOkl9K06yc2fM.roa
Signing time: Fri 02 Jan 2026 06:19:00 +0000
ROA not before: Fri 02 Jan 2026 06:19:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 5.198.136.0/24 maxlen: 24
5.198.140.0/24 maxlen: 24
5.198.142.0/24 maxlen: 24
5.198.143.0/24 maxlen: 24
188.92.136.0/24 maxlen: 24
188.92.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 21:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:00:98:fa:1f:24:e9:c5:b9:b5:ac:ab:5f:60:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 2 06:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19111ea9968e0d07bfa630ce925f4ad3ac9cd9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:25:c7:f5:cf:89:32:57:95:5d:b7:8b:c4:
c8:08:de:d7:e6:d6:cb:49:d9:69:e7:22:ed:0b:c8:
5f:0e:de:c2:6a:94:da:e7:bc:4c:cb:f5:b4:64:e8:
6d:a9:da:87:b8:83:69:04:c0:df:a1:3f:28:86:e1:
17:51:7b:55:4d:85:dc:8b:b2:cd:da:b8:42:af:7b:
8d:33:c2:10:2f:b9:af:03:99:8b:2d:a9:f3:40:51:
fb:ff:11:8a:2b:86:0a:5f:04:ac:90:88:64:77:e2:
08:8f:b3:e6:5b:b7:cb:b9:f7:79:ca:28:1c:a2:d3:
8e:d8:16:f2:25:e0:13:f3:5f:49:a5:fa:33:e2:3d:
f2:0b:ff:f1:4b:73:72:b9:ee:d0:f5:4e:3d:c3:7e:
99:ff:dc:90:91:0a:43:df:7c:05:e4:3d:39:60:7a:
3c:a3:f9:be:cd:b5:22:d1:a1:8a:c3:1c:4f:4b:b6:
35:e7:85:fa:26:53:b4:ae:ab:fe:5f:05:dc:cd:8f:
b3:1e:37:d1:f2:64:80:f7:f8:85:1b:48:5e:8d:59:
c2:d6:28:7d:40:46:56:91:3b:ab:eb:79:12:71:3c:
65:26:6a:65:ca:4a:86:b5:e4:03:b6:49:5f:a0:9c:
3e:65:1c:ca:7a:d3:a5:44:73:dd:dc:92:5b:ff:dc:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:11:1E:A9:96:8E:0D:07:BF:A6:30:CE:92:5F:4A:D3:AC:9C:D9:F3
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/GREeqZaODQe_pjDOkl9K06yc2fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.136.0/24
5.198.140.0/24
5.198.142.0/23
188.92.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:6d:48:0d:c2:79:96:bb:54:76:a2:39:dd:cc:ed:88:90:e1:
0f:70:5f:92:16:fd:02:20:04:fa:d2:6f:82:98:3d:13:94:97:
6f:aa:9c:57:a9:f2:3b:c3:69:90:05:a5:bc:43:7b:d6:d2:e2:
75:ad:e3:85:3a:ba:01:27:6e:d2:ad:f5:79:38:e9:c2:3c:c0:
9a:9c:c6:57:0f:5b:a7:23:3e:14:7a:17:16:8d:59:03:d9:fd:
3c:9b:1a:61:63:bf:25:0f:9f:99:12:5f:c2:e3:a2:2e:99:a7:
46:0e:b9:e2:95:4e:c8:9a:c3:ba:31:39:30:8a:b6:5c:a9:5e:
95:4f:ac:36:32:85:44:5f:3a:79:00:38:93:f5:2d:9d:8b:af:
f1:ba:44:9d:21:31:d4:8b:d1:b7:49:ea:ba:d1:52:a4:47:2d:
85:39:ec:4d:da:ee:c0:34:9b:2d:87:8f:4e:f9:51:07:74:85:
2c:a4:de:82:5d:06:70:08:04:06:41:11:54:89:a6:58:c6:c8:
27:c9:0c:1f:8e:6f:be:b8:27:b2:90:6c:b6:23:a4:bc:f8:c0:
b1:c0:bc:f1:e7:b5:13:14:56:b5:59:b0:a4:10:44:bd:1f:60:
6b:a6:2b:d3:db:07:4b:32:8f:c8:6c:78:05:50:85:c2:40:12:
aa:cf:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:24:37 2026 by rpki-client