This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gtAVbBsjwtxLCRFbMM5usFREe34.roa
File: gtAVbBsjwtxLCRFbMM5usFREe34.roa (raw, json)
Hash identifier: Yir+1CGERlFO3xnc6TNSf7Fvbr0rENfwUzfpDbGzsXk=
Subject key identifier: 82:D0:15:6C:1B:23:C2:DC:4B:09:11:5B:30:CE:6E:B0:54:44:7B:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB541AFCFA99F2ECBBC86B8F438455
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gtAVbBsjwtxLCRFbMM5usFREe34.roa
Signing time: Fri 02 Jan 2026 08:20:35 +0000
ROA not before: Fri 02 Jan 2026 08:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147060
IP address blocks: 151.246.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:54:1a:fc:fa:99:f2:ec:bb:c8:6b:8f:43:84:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82d0156c1b23c2dc4b09115b30ce6eb054447b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:4e:9c:4b:78:4f:ca:b0:53:e8:d9:a8:47:
4c:c8:9a:9b:d9:e7:13:8c:29:1b:ba:6f:a1:cb:a2:
20:34:6c:ac:7b:0a:81:9c:de:46:f9:69:16:84:e0:
f6:e0:84:24:a5:02:5c:2a:01:c3:ce:5c:88:3c:e7:
7a:c4:17:92:1f:86:12:06:c1:13:ae:d6:c3:a2:18:
32:49:7d:42:2a:50:d5:b1:6c:ea:27:ae:35:e2:e7:
58:6f:e9:c6:fe:13:88:2a:61:a9:ec:df:97:7a:74:
17:09:ff:46:73:81:81:8c:84:65:18:76:47:96:ea:
6b:47:96:87:b1:70:e2:9a:80:18:5b:fb:0d:a9:55:
13:0b:f5:48:4b:14:aa:67:b7:ba:e3:d6:17:73:59:
2a:1e:38:81:89:79:2d:94:9f:2a:e0:5e:95:a4:74:
ba:12:1d:10:64:14:38:7a:5a:20:d2:d3:ca:22:cb:
7c:ff:2b:4c:f7:6d:57:fa:49:84:9f:73:46:a2:1b:
cd:68:b4:37:f5:99:c7:86:43:68:dd:75:4e:b8:4f:
37:39:f9:27:b0:8a:60:61:70:e3:ff:3e:fc:45:32:
8a:9f:de:36:5c:61:c2:9b:62:ce:a4:9c:7a:50:a3:
c4:45:3e:9f:c1:02:13:8c:05:21:c0:57:18:98:e4:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D0:15:6C:1B:23:C2:DC:4B:09:11:5B:30:CE:6E:B0:54:44:7B:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gtAVbBsjwtxLCRFbMM5usFREe34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.6.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:2c:da:f4:56:6b:29:dc:21:81:5b:48:e5:ce:f8:e3:69:
34:79:39:bf:fa:c8:42:8d:f1:9d:f8:b6:7b:88:f1:e6:a7:3e:
76:bb:2a:72:27:75:36:c3:88:9e:d7:47:cb:d4:d7:0b:4d:bc:
e4:b3:a1:3e:99:1e:79:13:97:80:c4:14:3f:70:a9:fd:20:96:
91:fe:67:be:64:b8:ce:9d:a3:0d:e1:a4:1b:1a:ee:42:4b:f5:
3c:ed:b2:bf:20:9b:83:be:6c:aa:28:d8:0a:4c:15:2b:b1:32:
8b:50:51:7c:5e:cc:e2:87:ac:5f:d3:7f:cb:a5:7a:2e:fd:f1:
2f:12:6a:d1:55:04:60:16:f6:f5:59:09:74:d2:ae:62:76:3c:
7f:68:2d:f1:12:8d:f0:61:be:3d:db:fa:82:b7:24:84:b7:24:
71:e2:f9:c3:11:99:ad:22:05:27:21:8e:61:2f:dc:48:7d:6f:
f4:93:cd:59:ae:8e:fb:1e:fd:52:67:6a:3e:78:6a:1d:5b:13:
fa:1c:1d:c3:d3:b4:a2:fd:14:78:8d:13:dc:99:bd:0c:00:91:
6c:cd:39:d1:f7:24:a6:08:db:9a:5b:26:dd:f1:b9:54:e7:0c:
5c:5e:db:b4:f4:ea:d2:eb:58:48:5a:b9:64:6f:41:77:d4:dc:
a7:27:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:27:29 2026 by rpki-client