This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/GjtiA0E9S4pBxZydLJni4jMG7vw.roa
File: GjtiA0E9S4pBxZydLJni4jMG7vw.roa (raw, json)
Hash identifier: XqhpEYwDihcxsf+WmDyde0ztzBoHTuaJNOIOGqBKgxU=
Subject key identifier: 1A:3B:62:03:41:3D:4B:8A:41:C5:9C:9D:2C:99:E2:E2:33:06:EE:FC
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 019B79EC88587BC734DDA14E534D041B9A39
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/GjtiA0E9S4pBxZydLJni4jMG7vw.roa
Signing time: Thu 01 Jan 2026 14:18:23 +0000
ROA not before: Thu 01 Jan 2026 14:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216060
IP address blocks: 195.22.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:88:58:7b:c7:34:dd:a1:4e:53:4d:04:1b:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Jan 1 14:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a3b6203413d4b8a41c59c9d2c99e2e23306eefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:bd:3d:46:cb:9a:59:03:5d:d2:72:29:9a:
24:e6:b0:8d:b9:1a:00:8e:da:65:92:0f:cf:15:fb:
9e:d9:51:bf:3e:9d:65:0e:a5:a4:e0:9b:62:cd:9c:
a3:42:6f:2d:35:d4:4a:49:45:40:14:7b:10:f2:a2:
44:e7:b9:4b:3c:b9:05:82:6f:51:c7:ca:93:ba:39:
31:b6:0a:50:f7:2b:85:85:92:7b:16:c0:05:e9:6e:
b8:a1:79:8f:5e:e4:eb:de:29:c0:90:da:b1:62:00:
f0:67:ba:43:f0:fd:37:6f:94:11:87:51:3d:2b:93:
1b:d3:9c:a8:17:ac:2f:d0:52:55:03:d9:a5:5e:ec:
b9:80:04:98:4b:e2:c1:fd:63:f6:22:b4:9a:61:55:
96:d2:57:09:f3:69:64:7b:d0:c5:36:4f:e4:78:e9:
00:68:e1:95:d8:59:bd:af:a0:8e:2b:ed:15:2e:8a:
c3:6e:9f:53:cd:0e:93:45:85:26:b0:d0:74:c4:61:
bb:c8:3a:90:82:b7:80:09:d1:b4:48:dc:d9:75:53:
26:78:54:41:6f:5b:87:af:c3:5a:a2:ce:96:fa:b9:
68:65:1b:28:f8:b1:a5:2c:06:a2:01:d9:70:95:40:
c0:56:e8:be:cc:02:c7:49:71:5f:f7:ef:6a:92:cb:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:62:03:41:3D:4B:8A:41:C5:9C:9D:2C:99:E2:E2:33:06:EE:FC
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/GjtiA0E9S4pBxZydLJni4jMG7vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:44:d1:14:45:ee:e2:54:3c:44:ad:97:c6:6f:61:e6:f6:d9:
55:73:ab:6d:86:7a:8c:e8:21:c7:60:17:6b:5c:f7:1f:75:5a:
06:e6:e7:99:6a:53:5e:8a:26:da:d2:5c:02:0b:64:28:9a:d8:
34:91:5d:a4:26:57:79:89:28:44:8d:7c:18:2d:98:86:bb:b4:
6b:1b:e4:7e:1f:69:d5:e0:6d:c9:a8:ca:6c:25:bb:2f:7e:21:
96:a8:ca:fe:f8:77:c9:c1:d5:67:e9:6e:df:38:9a:22:ed:7f:
c5:71:a0:c8:4d:e4:97:72:64:89:fc:18:e4:6f:ef:20:9d:96:
77:6c:b1:92:51:6f:d5:ed:ad:ae:03:9f:61:ee:27:75:c5:f6:
7f:d4:40:93:5c:84:94:72:52:1b:4a:47:93:c7:55:6f:62:e6:
05:4f:43:61:a3:54:81:ba:8a:ae:50:76:59:5f:58:3c:95:f0:
55:18:f7:6e:1a:77:d0:32:d2:9c:e2:5c:f3:8e:a4:e3:8e:b9:
9f:71:9d:69:9c:72:16:75:d3:23:38:2e:11:7d:a3:cc:67:4a:
fd:e4:4a:8e:11:e8:b7:53:f5:97:1c:9f:35:b3:03:7d:91:7f:
d4:8d:a1:8d:1f:70:2a:93:87:28:d6:43:a9:e1:4d:28:27:6e:
61:7f:2a:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57IhYe8c03aFOU00EG5o5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDAwNDYzMjBiZDJiMzEzNzQyOGI5OWNjYzM0YjE4NGEw
NmFjYWEwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTNiNjIwMzQxM2Q0YjhhNDFjNTljOWQyYzk5ZTJlMjMzMDZlZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAm9PUbLmlkDXdJyKZok5rCNuRoA
jtplkg/PFfue2VG/Pp1lDqWk4JtizZyjQm8tNdRKSUVAFHsQ8qJE57lLPLkFgm9R
x8qTujkxtgpQ9yuFhZJ7FsAF6W64oXmPXuTr3inAkNqxYgDwZ7pD8P03b5QRh1E9
K5Mb05yoF6wv0FJVA9mlXuy5gASYS+LB/WP2IrSaYVWW0lcJ82lke9DFNk/keOkA
aOGV2Fm9r6COK+0VLorDbp9TzQ6TRYUmsNB0xGG7yDqQgreACdG0SNzZdVMmeFRB
b1uHr8Naos6W+rloZRso+LGlLAaiAdlwlUDAVui+zALHSXFf9+9qkstzcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBo7YgNBPUuKQcWcnSyZ4uIzBu78MB8GA1UdIwQY
MBaAFFLQBGMgvSsxN0KLmczDSxhKBqyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgt
MzBkNGM1NzI5MTQ2LzEvR2p0aUEwRTlTNHBCeFp5ZExKbmk0ak1HN3Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgtMzBkNGM1NzI5MTQ2
LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxaTMA0G
CSqGSIb3DQEBCwUAA4IBAQCORNEURe7iVDxErZfGb2Hm9tlVc6tthnqM6CHHYBdr
XPcfdVoG5ueZalNeiiba0lwCC2Qomtg0kV2kJld5iShEjXwYLZiGu7RrG+R+H2nV
4G3JqMpsJbsvfiGWqMr++HfJwdVn6W7fOJoi7X/FcaDITeSXcmSJ/Bjkb+8gnZZ3
bLGSUW/V7a2uA59h7id1xfZ/1ECTXISUclIbSkeTx1VvYuYFT0Nho1SBuoquUHZZ
X1g8lfBVGPduGnfQMtKc4lzzjqTjjrmfcZ1pnHIWddMjOC4RfaPMZ0r95EqOEei3
U/WXHJ81swN9kX/UjaGNH3Aqk4co1kOp4U0oJ25hfyrH
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:15 2026 by rpki-client