This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa
File: gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa (raw, json)
Hash identifier: IMKFdbmtSocn1WUlnnsI4QXTF0mL0Cdjvv03Eim+48U=
Subject key identifier: 80:E9:2A:00:05:58:CD:C6:C9:8B:D9:97:8D:11:6C:67:97:03:16:B7
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 019B77C7638028453FF5826CC4FD115C5D92
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa
Signing time: Thu 01 Jan 2026 04:18:34 +0000
ROA not before: Thu 01 Jan 2026 04:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207425
IP address blocks: 193.105.96.0/24 maxlen: 24
193.105.102.0/24 maxlen: 27
193.105.117.0/24 maxlen: 27
193.105.121.0/24 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:63:80:28:45:3f:f5:82:6c:c4:fd:11:5c:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Jan 1 04:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80e92a000558cdc6c98bd9978d116c67970316b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:19:fd:75:33:c8:5c:ae:39:f9:49:c5:f1:
e7:e0:ad:0f:99:8f:32:4e:af:a3:88:37:48:37:d0:
9d:72:b6:3f:a5:4c:af:08:e9:11:71:46:e8:3a:0e:
a5:85:8f:c4:2b:d7:1e:8b:f5:2c:b7:f7:7c:28:12:
fa:ff:fd:ab:f5:ac:b8:6b:e2:d6:14:45:cb:c3:ad:
8f:62:c1:a7:d6:f7:4c:59:d8:f6:5b:0d:c3:30:b4:
ab:26:fa:9f:a6:7e:75:08:1b:40:ea:81:8a:11:f2:
0a:fc:34:66:6c:05:90:91:f3:66:67:77:a0:3d:7f:
6e:3e:dc:5c:c1:f2:67:9f:b9:b9:d4:d0:17:b6:7e:
73:ef:c5:98:3e:4f:55:34:57:04:ed:2f:35:47:78:
65:7b:3f:d7:87:e4:78:72:72:a5:d3:9b:ea:2d:36:
8e:b5:e0:33:e7:fb:a1:a9:79:d4:5f:50:12:12:96:
c6:78:55:92:8d:7b:f8:eb:58:ff:a1:d5:ce:c7:8b:
97:ad:98:0e:bd:48:e1:d7:3d:fb:15:17:3c:66:03:
22:ee:38:5b:3a:94:90:86:8c:ee:6b:f6:34:51:c8:
de:98:18:29:8d:3e:58:fa:3b:d7:6d:1c:b4:81:de:
88:9c:bc:51:61:dc:82:eb:e2:6b:e9:39:09:19:2b:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:2A:00:05:58:CD:C6:C9:8B:D9:97:8D:11:6C:67:97:03:16:B7
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.96.0/24
193.105.102.0/24
193.105.117.0/24
193.105.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:67:46:40:47:7c:fc:94:22:d7:83:a1:ed:e1:d2:a9:8e:c0:
8e:8a:76:9e:a6:e6:10:5e:ba:b1:4b:0c:7b:0e:66:84:8d:a5:
a9:08:6f:b4:d2:12:a6:5c:e0:05:1d:6e:e8:1e:86:82:6f:01:
d3:f9:56:f4:34:51:15:84:51:45:3c:bc:d7:fe:58:09:a7:22:
e9:53:6a:f5:4f:17:3a:b5:96:ca:b3:2f:6c:ae:6c:04:8f:cb:
9f:a7:90:b6:7d:d4:71:cb:1d:6e:b6:33:2c:ac:3f:07:17:b3:
44:a5:3e:32:27:42:e0:9e:d1:bb:a0:ac:5a:2b:66:17:98:f8:
56:d5:96:80:7c:8e:0f:95:33:ab:a2:43:81:5a:74:25:31:d1:
7c:0f:2e:c5:be:14:f6:a0:7d:1b:c9:85:92:62:b9:76:e9:63:
28:ad:4f:76:ef:69:d3:20:ce:d0:ef:57:02:b9:dc:b9:41:9f:
a1:31:65:f0:41:4f:90:c9:5d:c5:0b:b7:0e:ee:a3:fd:a0:84:
28:23:8f:b8:7c:7f:1a:47:58:86:ea:d2:b3:9a:7c:54:40:a6:
6c:ec:64:57:a6:18:83:af:e4:a6:47:c2:7f:0f:2f:8f:82:f5:
2a:76:fa:97:38:e9:2e:b0:73:d0:63:3d:2b:f6:62:d3:22:bf:
b2:a0:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:40 2026 by rpki-client