This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/goVBh-jKOronkqqkPN-IjocLEWw.roa
File: goVBh-jKOronkqqkPN-IjocLEWw.roa (raw, json)
Hash identifier: DvzH0QIR7+4AsoL8AZ8K49zOwXXwcDQoCiTYGs9k+Xs=
Subject key identifier: 82:85:41:87:E8:CA:3A:BA:27:92:AA:A4:3C:DF:88:8E:87:0B:11:6C
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019B7F14647BA848B281CE596A8C8D07BFC0
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/goVBh-jKOronkqqkPN-IjocLEWw.roa
Signing time: Fri 02 Jan 2026 14:20:01 +0000
ROA not before: Fri 02 Jan 2026 14:20:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 176.98.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:64:7b:a8:48:b2:81:ce:59:6a:8c:8d:07:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 2 14:20:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82854187e8ca3aba2792aaa43cdf888e870b116c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:e1:66:22:ac:1a:e8:0c:ec:53:0b:1e:03:
91:5a:82:67:17:ac:79:40:97:48:05:2a:b1:51:8c:
46:52:2d:e0:bf:f4:6f:a4:bf:52:0e:0a:57:87:5a:
41:98:03:09:b1:03:db:9f:98:19:39:07:4a:21:b0:
21:62:df:d2:dc:37:33:1f:54:d4:d2:bc:14:c4:64:
2e:6e:34:5d:f2:5b:78:aa:b2:79:f7:ec:9c:c6:31:
9f:78:8e:d8:3b:98:fa:5e:a0:07:63:8e:a2:fe:69:
dd:f1:da:ab:3c:64:6d:45:19:5d:ec:61:e9:d6:6c:
bf:05:e2:cf:78:51:e2:0c:b4:a2:b6:c3:12:af:ec:
97:08:9f:04:61:47:59:b6:b0:02:d5:a6:a6:b9:3a:
0d:95:bc:4c:3b:95:bc:3a:93:3d:ad:93:e7:31:14:
ff:e1:17:21:92:9f:b9:95:df:b3:7b:b7:4b:5f:e3:
bb:a4:ce:48:8c:a2:b3:c1:37:94:55:79:23:9e:80:
5c:58:26:a7:82:6f:7f:30:b3:c4:9b:2d:0a:77:be:
88:dd:b3:7d:18:d9:fb:fd:bf:5b:ec:b2:c2:a4:ee:
9b:56:af:b6:a7:33:5b:2c:b0:b4:34:c5:63:7f:96:
06:ba:d0:8c:02:4d:b7:ce:f0:b2:9f:50:43:04:63:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:85:41:87:E8:CA:3A:BA:27:92:AA:A4:3C:DF:88:8E:87:0B:11:6C
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/goVBh-jKOronkqqkPN-IjocLEWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.182.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2a:7a:53:84:3c:0d:e1:a0:04:bc:ec:34:f3:82:66:21:f7:
f9:17:e0:56:12:ba:b1:52:65:bb:be:c4:a8:94:8e:db:f7:30:
6e:e8:9d:f9:1b:fe:85:a3:80:17:cd:96:e8:3f:a7:69:e2:11:
c1:9e:fe:05:84:59:c0:0a:a9:6d:c1:d2:de:86:5b:91:74:89:
73:2f:f1:1a:c4:bd:7d:e7:3e:46:15:57:eb:9f:8b:9f:9a:81:
78:07:4f:29:fd:49:f6:e1:c8:f4:7c:bc:c2:5c:7a:9d:f7:f4:
25:11:bd:66:e7:a8:c5:f6:12:22:df:a7:0a:b0:54:34:d9:8a:
de:47:c5:74:ea:09:bf:58:77:95:d9:f2:7a:c3:71:0f:40:ab:
95:96:c9:b0:b2:ab:83:e6:e6:c8:43:4e:cb:48:6f:c1:67:ee:
dc:e6:90:2c:6a:98:de:24:e3:86:77:3c:65:b1:bf:6a:22:f9:
54:31:79:4c:53:bc:9b:31:7d:10:9a:3a:c4:a2:4b:4e:21:a9:
ed:57:33:0f:d6:8a:ce:60:c7:af:4a:51:10:d3:01:c0:54:f8:
22:6e:11:06:13:68:c5:cf:59:fc:f0:3b:b2:da:df:61:c2:59:
5d:17:2a:9c:df:b2:9b:09:8d:b3:b6:0b:72:42:d5:ee:cc:59:
93:27:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:36:34 2026 by rpki-client