This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rgWYhAtqBekCUXRtALlS_GorJok.roa
File: rgWYhAtqBekCUXRtALlS_GorJok.roa (raw, json)
Hash identifier: MHxZzyUoZKR5Q/Ug0QqGfIw96je1U7zTP/F1ENCOyxI=
Subject key identifier: AE:05:98:84:0B:6A:05:E9:02:51:74:6D:00:B9:52:FC:6A:2B:26:89
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019B7910A3DF452207F8B5FC82B5313AB9B9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rgWYhAtqBekCUXRtALlS_GorJok.roa
Signing time: Thu 01 Jan 2026 10:18:12 +0000
ROA not before: Thu 01 Jan 2026 10:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208453
IP address blocks: 2a12:bec0:2d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:a3:df:45:22:07:f8:b5:fc:82:b5:31:3a:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 10:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae0598840b6a05e90251746d00b952fc6a2b2689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:8b:ca:e8:55:01:cc:1c:78:01:d6:57:59:
9a:b0:30:06:53:8d:e1:9b:b7:8a:52:fd:37:28:cb:
83:11:cd:84:58:10:4c:e4:f5:06:19:a2:d1:be:23:
58:88:c9:69:67:70:47:49:85:ce:65:e6:62:9a:48:
e9:4f:49:a9:bd:1f:de:d0:e8:45:47:31:d1:d2:dc:
3a:b4:82:55:cf:db:8a:0e:41:30:e8:e1:a0:7e:51:
ec:d7:8a:de:ed:74:c2:3c:44:b4:97:4e:84:2a:27:
3e:90:9d:dc:fc:3b:47:98:c5:17:80:e1:70:c7:98:
c0:b4:b9:a3:a4:91:97:94:20:b6:e4:2b:6b:d8:c0:
a4:10:32:ea:0c:39:51:e7:b7:45:62:fe:28:e6:cf:
66:8f:09:66:07:56:ba:34:b8:bc:58:f9:e3:3d:f6:
fd:cf:b8:92:f3:85:e4:54:b0:3a:d3:7f:a4:f5:92:
03:a6:55:56:2e:02:f9:9a:17:17:66:f4:e2:a7:c1:
c1:30:87:14:8a:71:14:61:20:56:46:77:7e:04:72:
33:7c:3f:f5:5c:33:42:29:b3:e2:a8:7a:b1:ff:6a:
b7:39:41:24:7c:19:0e:d4:ca:90:78:8c:38:1d:99:
4c:83:c1:ff:2e:31:44:1e:90:25:5b:5f:93:b3:a8:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:98:84:0B:6A:05:E9:02:51:74:6D:00:B9:52:FC:6A:2B:26:89
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rgWYhAtqBekCUXRtALlS_GorJok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
3a:c6:04:ea:fe:c7:a5:c5:0f:eb:3a:51:7d:99:e5:88:f9:16:
80:db:2f:c4:db:72:3f:05:59:d0:6f:fc:c7:61:6b:19:f5:7a:
71:15:e8:8f:d1:52:b2:2f:f4:a3:91:53:ef:e1:2a:d4:41:16:
e7:3a:01:48:ab:38:20:47:fa:36:75:c0:a4:9f:3c:8f:39:8d:
9c:45:6b:c6:e0:0b:17:66:8f:32:e9:7f:bd:2a:26:4e:cd:9e:
5b:23:5c:b3:0a:e9:80:7d:f2:42:c3:40:c9:00:8c:1e:4c:1c:
49:4e:da:a7:71:3b:d0:2e:1b:4f:41:c9:af:53:39:63:d0:bb:
55:cc:ee:93:9f:21:d2:8d:60:0b:37:43:85:06:1b:2a:0d:f2:
7f:81:51:6f:68:df:70:43:0d:af:f9:f3:e1:8b:78:95:5d:a6:
b3:fa:95:c1:46:7c:71:62:85:bb:df:01:f4:0b:95:25:eb:72:
47:97:c5:9b:ec:28:2b:70:63:8d:1a:1e:19:98:23:a0:5d:7c:
a9:2f:46:32:fd:66:d6:c5:34:73:e3:cf:c3:c8:b0:f2:c7:65:
3a:c4:59:f6:08:3a:1a:39:47:7e:d9:da:36:33:49:35:8c:45:
c8:e6:b1:55:65:97:b8:e6:3d:6a:ff:e2:55:e0:df:03:bc:ed:
bf:7e:a7:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt5EKPfRSIH+LX8grUxOrm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTA1OTg4NDBiNmEwNWU5MDI1MTc0NmQwMGI5NTJmYzZhMmIyNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2uLyuhVAcwceAHWV1masDAGU43h
m7eKUv03KMuDEc2EWBBM5PUGGaLRviNYiMlpZ3BHSYXOZeZimkjpT0mpvR/e0OhF
RzHR0tw6tIJVz9uKDkEw6OGgflHs14re7XTCPES0l06EKic+kJ3c/DtHmMUXgOFw
x5jAtLmjpJGXlCC25Ctr2MCkEDLqDDlR57dFYv4o5s9mjwlmB1a6NLi8WPnjPfb9
z7iS84XkVLA603+k9ZIDplVWLgL5mhcXZvTip8HBMIcUinEUYSBWRnd+BHIzfD/1
XDNCKbPiqHqx/2q3OUEkfBkO1MqQeIw4HZlMg8H/LjFEHpAlW1+Ts6jxoQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK4FmIQLagXpAlF0bQC5UvxqKyaJMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvcmdXWWhBdHFCZWtDVVhSdEFMbFNfR29ySm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wALQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA6xgTq/selxQ/rOlF9meWI+RaA2y/E23I/BVnQ
b/zHYWsZ9XpxFeiP0VKyL/SjkVPv4SrUQRbnOgFIqzggR/o2dcCknzyPOY2cRWvG
4AsXZo8y6X+9KiZOzZ5bI1yzCumAffJCw0DJAIweTBxJTtqncTvQLhtPQcmvUzlj
0LtVzO6TnyHSjWALN0OFBhsqDfJ/gVFvaN9wQw2v+fPhi3iVXaaz+pXBRnxxYoW7
3wH0C5Ul63JHl8Wb7CgrcGONGh4ZmCOgXXypL0Yy/WbWxTRz48/DyLDyx2U6xFn2
CDoaOUd+2do2M0k1jEXI5rFVZZe45j1q/+JV4N8DvO2/fqeD
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:44 2026 by rpki-client