This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/gSEruQPSsoefkss2yCXL7050kig.roa
File: gSEruQPSsoefkss2yCXL7050kig.roa (raw, json)
Hash identifier: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=
Subject key identifier: 81:21:2B:B9:03:D2:B2:87:9F:92:CB:36:C8:25:CB:EF:4E:74:92:28
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 019B78A300D40C87E1A1DB13245B0AE77065
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/gSEruQPSsoefkss2yCXL7050kig.roa
Signing time: Thu 01 Jan 2026 08:18:27 +0000
ROA not before: Thu 01 Jan 2026 08:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 132.64.0.0/16 maxlen: 16
132.65.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:00:d4:0c:87:e1:a1:db:13:24:5b:0a:e7:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jan 1 08:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81212bb903d2b2879f92cb36c825cbef4e749228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ca:88:71:ec:f4:50:35:f6:cd:a2:be:5d:4d:
9a:08:7e:8d:4f:f9:21:14:58:4f:c7:4e:e3:d3:14:
87:3d:81:64:66:7d:90:b3:c9:7b:14:40:be:11:dd:
a7:1c:0d:06:75:a4:e9:a8:1b:20:ad:75:d7:f4:80:
c0:55:b3:b6:e0:f8:7c:6b:cf:f6:48:fa:fe:7a:d6:
57:ea:c4:30:ef:90:cf:d3:3a:68:56:de:62:f9:39:
3e:6f:71:e4:fb:6e:b3:66:f2:31:57:af:47:fc:23:
dd:1b:fa:f0:a2:97:61:28:49:0a:ea:2e:01:a0:94:
8c:17:36:21:ff:ac:28:53:3b:29:a4:4c:0b:27:fe:
f0:ed:2d:75:1b:3e:5d:98:c9:42:3e:f6:6a:f8:35:
ad:4b:83:e3:96:95:fb:01:aa:c2:3a:cb:ba:c2:7e:
e0:1a:22:08:62:d8:3d:3b:10:31:97:e2:1a:fa:f5:
e3:a8:a1:3d:ac:ba:73:f6:4c:18:a0:ab:81:2e:7c:
52:ff:26:48:ef:7c:97:d6:a9:77:31:bb:05:03:d9:
d1:77:57:6e:d2:09:c3:bf:90:63:43:1a:f7:61:2f:
83:30:11:78:15:b4:c5:4c:a1:3a:8e:aa:79:29:a3:
e4:95:15:5a:ea:5c:6c:be:33:dc:3c:87:60:3b:d7:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:2B:B9:03:D2:B2:87:9F:92:CB:36:C8:25:CB:EF:4E:74:92:28
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/gSEruQPSsoefkss2yCXL7050kig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.0.0/15
Signature Algorithm: sha256WithRSAEncryption
64:e9:83:f0:ff:29:a4:e0:1f:c6:4e:14:80:aa:70:69:ad:ca:
30:8c:68:43:0f:d2:e6:fb:0a:9e:bd:b3:8b:01:83:bf:bd:cc:
39:5c:68:82:a5:b7:dd:88:81:50:ed:18:65:a6:6a:86:57:f0:
f1:28:21:7b:9a:10:72:3b:03:2f:31:7d:45:25:95:8a:61:b8:
7d:a7:5f:04:a9:f8:a5:11:0b:08:d7:8c:8c:93:e4:50:0b:47:
a3:21:95:2b:90:0d:f6:86:05:ad:89:ce:d3:19:81:34:4a:f0:
7a:07:e4:f2:ad:ce:4a:a3:d1:0f:a1:79:5d:cb:7c:71:45:c0:
6e:7d:80:e8:07:ec:ea:f9:54:12:a0:27:ed:f1:3e:86:c3:c5:
8e:c0:c3:cb:6f:07:f4:4c:0c:52:87:64:5c:97:4b:ed:7c:c5:
98:4b:da:4e:57:43:1e:1a:5b:a0:0b:a3:d5:1d:91:66:88:e6:
ed:8f:92:a8:2f:52:2b:3c:ee:2b:7c:c9:3f:75:0f:3c:e9:32:
fd:62:ae:87:96:5d:f5:1d:52:d8:d1:19:f7:36:20:88:31:22:
be:60:89:9e:6a:f7:84:d9:a5:a6:d8:63:9f:42:1b:c7:2e:ce:
58:68:ac:69:ac:d1:9c:e0:30:91:38:96:bd:9f:17:d2:e7:08:
72:48:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:02:34 2026 by rpki-client