This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/GRbOxMtystP_abdOU7IPfTRksLo.roa
File: GRbOxMtystP_abdOU7IPfTRksLo.roa (raw, json)
Hash identifier: Qf9umPgPmRu2Fd9xEaKBzrLeI8Nv9dYFfVdW3Z8loMI=
Subject key identifier: 19:16:CE:C4:CB:72:B2:D3:FF:69:B7:4E:53:B2:0F:7D:34:64:B0:BA
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019BF9093AE4C01EE810046C1D7C8D7855EF
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/GRbOxMtystP_abdOU7IPfTRksLo.roa
Signing time: Mon 26 Jan 2026 06:41:30 +0000
ROA not before: Mon 26 Jan 2026 06:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.255.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:09:3a:e4:c0:1e:e8:10:04:6c:1d:7c:8d:78:55:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Jan 26 06:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1916cec4cb72b2d3ff69b74e53b20f7d3464b0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:5b:98:30:7e:dc:c5:7e:9e:24:7f:6f:40:
51:00:d0:f8:8e:19:07:7b:dd:29:13:fd:0d:68:a3:
7f:62:c8:57:e6:b4:18:41:0c:11:51:01:ce:0c:8a:
70:9c:55:85:45:76:b2:c2:29:5e:8d:73:aa:4f:1d:
96:26:45:88:8d:69:7f:39:ca:3e:50:70:41:b2:37:
15:4f:54:34:39:79:33:1b:af:5c:83:b3:99:9f:3c:
04:3a:49:89:ac:19:69:51:20:18:8a:e2:45:af:36:
98:79:12:60:be:75:cf:13:01:a5:e2:d8:2a:26:29:
e9:7c:d6:d4:91:37:c9:88:60:32:9d:b1:90:84:e6:
8a:76:26:df:b3:bd:98:56:07:ec:d2:23:0c:a7:13:
2e:29:8a:3a:88:08:0a:10:96:3d:7d:b8:2d:f6:cc:
6d:9a:f6:80:b7:5b:3b:a1:96:42:4a:0c:39:98:94:
e3:48:47:2e:1e:da:2e:c4:76:62:6f:52:d2:80:a1:
29:20:ae:eb:0b:fa:c8:6c:77:3f:bb:b4:1b:46:93:
df:a0:01:0c:a9:d8:47:85:39:45:c9:93:6d:64:28:
23:b9:46:3b:b4:7e:11:23:29:78:78:77:31:27:75:
e8:a4:81:48:08:85:1c:aa:12:10:a6:e8:fc:4e:7b:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:CE:C4:CB:72:B2:D3:FF:69:B7:4E:53:B2:0F:7D:34:64:B0:BA
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/GRbOxMtystP_abdOU7IPfTRksLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a2:46:82:19:af:01:d3:93:0b:c1:53:c9:6b:82:99:f5:b0:
ff:d8:4a:d9:f2:d6:1b:49:cd:0e:eb:5f:99:42:56:13:a0:5b:
59:eb:7d:a1:bb:f6:9c:e7:03:23:33:cc:f5:75:cf:ca:4f:f6:
b4:75:c8:0e:e9:7e:57:9f:06:05:b3:7f:12:ce:19:a0:f9:de:
24:91:78:02:43:6f:2b:c2:f1:00:8d:82:e8:96:e1:ad:c4:65:
92:b5:da:b8:f2:03:57:96:c8:da:74:13:4e:99:1d:bd:04:30:
db:ea:3e:85:6e:89:ad:e4:08:a5:51:46:10:68:48:7d:2e:79:
57:bd:ee:6f:8c:98:c0:d2:09:fa:87:90:2f:49:8f:b1:53:7a:
f7:e2:5e:ca:75:2f:c9:70:d1:48:5d:a3:e6:90:17:2c:0e:ab:
2b:5a:4e:2c:7c:a6:92:da:9f:b9:28:fe:4a:3d:a0:9b:90:c4:
9a:62:c5:2e:f7:12:e9:58:9e:7f:55:55:47:6d:63:c9:9a:de:
5a:0a:0f:dd:93:2b:52:4e:98:91:bc:8d:56:ae:ce:7b:25:6c:
cc:38:2a:02:fd:fb:ce:46:1e:2c:4b:b5:00:c9:14:e2:ab:e5:
82:fb:78:97:c2:be:72:fc:84:c4:2b:49:09:53:e2:ed:59:dc:
2f:aa:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:44 2026 by rpki-client