This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GO4Hpvs1oa1csFiAFTHye7kqs-U.roa
File: GO4Hpvs1oa1csFiAFTHye7kqs-U.roa (raw, json)
Hash identifier: NAI9U9zH3zKDgWb0fEOF1SY0G6QwOtcIDwfCTL9dWzs=
Subject key identifier: 18:EE:07:A6:FB:35:A1:AD:5C:B0:58:80:15:31:F2:7B:B9:2A:B3:E5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019B7C132981A4C37B378B1F0420FBF61409
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GO4Hpvs1oa1csFiAFTHye7kqs-U.roa
Signing time: Fri 02 Jan 2026 00:19:48 +0000
ROA not before: Fri 02 Jan 2026 00:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56989
IP address blocks: 91.109.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:29:81:a4:c3:7b:37:8b:1f:04:20:fb:f6:14:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 00:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18ee07a6fb35a1ad5cb058801531f27bb92ab3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:28:f2:56:27:e2:c7:fa:32:33:ab:fd:e4:
6c:f8:38:ed:5a:72:5e:3b:7a:40:3d:d4:63:f1:c0:
1e:db:51:1e:bf:0c:ea:5f:a1:5f:c7:d6:7e:25:74:
78:e8:d5:a7:86:07:63:8e:da:70:35:d2:27:c5:55:
1d:6f:31:bc:bf:ff:af:01:a5:52:be:74:be:18:87:
76:65:b5:c9:6b:01:60:8d:4d:08:a7:a2:5d:12:ec:
1e:9b:94:e3:04:df:e9:51:16:68:94:eb:2d:53:5a:
f5:2d:f9:30:2b:9e:15:f4:fc:14:a4:6c:b9:80:44:
29:03:b4:06:61:97:0f:f8:64:f5:64:22:03:43:d2:
4f:ea:6a:f7:17:1d:23:47:0d:b1:2d:40:86:af:7d:
6d:8b:cb:3d:67:b1:fd:ab:0b:4c:2e:c7:09:03:1b:
2b:04:bf:e9:49:b2:89:79:b4:d0:9d:ae:de:b7:81:
e0:c1:45:94:b2:e9:7c:30:e9:11:e8:6a:e2:fc:41:
1a:46:14:80:96:d6:35:15:6b:10:14:94:6f:d1:c1:
f5:dd:5e:96:1f:53:71:9f:a7:9d:79:f4:d4:f6:95:
3a:04:0f:a9:d5:4e:16:76:ca:1f:aa:66:bd:86:b1:
66:09:23:a1:af:56:a4:ae:ed:a7:9f:91:55:8e:1b:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:07:A6:FB:35:A1:AD:5C:B0:58:80:15:31:F2:7B:B9:2A:B3:E5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GO4Hpvs1oa1csFiAFTHye7kqs-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.160.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:4f:5f:9d:90:98:f6:f6:55:db:25:57:d5:56:0c:3f:92:24:
ae:4e:69:32:f1:15:fb:4a:d5:fe:63:33:87:5f:ef:01:6f:70:
15:38:38:4f:c0:be:e4:5b:9f:63:e7:47:33:77:5f:17:fc:e2:
5c:e0:e5:22:dd:0e:02:ad:d3:da:75:c2:ea:33:5d:22:fa:da:
8c:11:64:74:ea:27:ae:13:c0:a6:a1:0e:2c:0b:ba:63:4e:31:
d6:dd:4e:60:0b:0c:fc:2a:b0:40:89:e9:53:f1:e2:bd:bf:a9:
9d:e3:c6:d7:ec:4f:f5:5b:b1:a5:ca:25:b2:27:d5:22:3f:54:
a1:7a:cf:43:13:27:a6:c6:37:7a:fe:5e:2c:22:49:88:17:1e:
09:7d:fd:8e:fa:56:4f:30:8f:6d:46:cd:3b:87:af:60:94:70:
bb:bf:d5:a6:f5:0e:ea:1c:4b:26:73:4a:e5:fe:40:34:dc:41:
a2:86:f2:1c:f0:3a:37:52:98:97:ed:90:0c:35:a5:ed:45:79:
15:a3:f9:9c:3f:7c:00:34:d3:19:3b:00:e8:8b:75:f7:50:01:
c4:3d:48:ed:37:38:40:89:0b:85:b3:a0:dc:3b:e4:55:45:fc:
de:b9:c1:04:58:ab:53:71:5f:5b:7b:3a:0d:39:b6:c7:e1:e5:
e4:0c:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:35:33 2026 by rpki-client