This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa
File: GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa (raw, json)
Hash identifier: 5FycjJlgiQLIVMA6Gok/s9b3aNKGkS9TsSnfxILKjEo=
Subject key identifier: 19:1E:8E:92:76:F9:A0:13:A8:22:E2:B0:34:F7:61:48:F0:BE:9B:0A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A820FE814662DCB1F7A5851F073793E27
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa
Signing time: Fri 14 Nov 2025 11:11:11 +0000
ROA not before: Fri 14 Nov 2025 11:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 212.135.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:82:0f:e8:14:66:2d:cb:1f:7a:58:51:f0:73:79:3e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 14 11:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=191e8e9276f9a013a822e2b034f76148f0be9b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:e5:fd:bb:d4:5b:46:69:05:c5:18:d0:0f:
ce:25:ad:bf:25:e0:b5:0b:e7:28:8f:c3:35:86:96:
31:26:88:18:a0:2c:96:87:d2:d0:0a:f8:f8:48:5f:
bf:15:d0:4f:e9:be:df:b5:6e:db:fd:6b:aa:85:2e:
2f:67:b6:82:1f:31:ce:9b:f1:30:7f:31:df:f4:57:
0d:cb:aa:f0:6b:15:49:98:4b:9b:0a:99:2f:f9:12:
fa:a6:7b:91:29:1b:af:f4:c1:44:8b:71:c8:13:a5:
32:06:59:fd:07:10:73:83:22:a7:26:02:04:24:a4:
1e:f3:10:49:18:fa:a0:fc:e1:a3:23:a6:36:6e:c7:
77:ad:6c:46:10:fb:20:42:79:b7:61:19:c9:c8:6d:
61:d4:bf:b9:77:71:9f:50:6f:15:bb:8d:aa:62:7d:
17:f5:a5:80:79:a6:7d:b1:c8:66:d6:44:6a:f0:b1:
95:fb:59:15:6e:a1:9f:6b:ed:05:b5:69:ad:20:e7:
3e:29:bf:17:33:0b:26:5e:4f:dc:f0:f0:39:85:db:
31:b3:b2:c8:c3:8e:1e:31:7e:a1:9c:a6:11:af:02:
01:c3:c3:4e:74:05:70:70:f9:be:21:57:aa:fb:2f:
b9:05:67:c8:66:9a:86:0d:7d:10:b7:79:10:38:40:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:8E:92:76:F9:A0:13:A8:22:E2:B0:34:F7:61:48:F0:BE:9B:0A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.26.0/24
Signature Algorithm: sha256WithRSAEncryption
38:84:b8:32:69:28:67:06:83:32:ea:e1:e0:ef:0a:53:7a:2c:
af:94:2b:c6:8f:2e:e8:16:04:c9:d3:6d:5f:11:93:06:3d:50:
6f:77:4f:03:0e:ae:3c:8a:d7:8b:18:62:a5:0a:8e:38:78:f0:
7b:2a:ba:1d:c0:87:8d:2c:74:d7:c1:7a:c4:ae:2c:1a:94:30:
a5:43:3b:21:f3:cc:07:d9:2d:a0:28:35:1e:4a:eb:a6:e2:38:
09:ee:b2:48:0e:f1:cf:99:a8:5a:10:88:81:a9:4f:6f:11:8e:
2e:3f:7d:4b:59:c2:7f:36:0f:b9:42:5c:b6:61:c5:68:10:1d:
ee:5a:00:56:99:ae:6f:59:25:f4:9b:5d:01:a6:0f:c7:38:b7:
24:7c:20:d1:b7:b2:3f:74:09:33:27:72:13:4a:1e:b4:25:78:
37:18:41:06:70:58:34:77:2d:aa:92:8e:e9:ab:c6:3e:d8:8e:
d4:9e:d1:88:ad:be:0e:18:48:e0:b9:3d:4e:a7:bb:60:ed:d3:
da:c8:00:65:6c:ce:60:ff:98:bd:6f:dd:2f:5f:70:f3:37:45:
28:70:8e:17:00:30:45:22:94:b0:0e:4d:b5:3c:51:7c:74:9d:
d6:7a:a4:ad:a5:cb:c8:54:4c:60:b7:c1:43:c1:f7:1a:59:a3:
62:d9:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 19:54:08 2025 by rpki-client