This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/GiuMv5nemcx-ByyPnBErTP1hwJk.roa
File: GiuMv5nemcx-ByyPnBErTP1hwJk.roa (raw, json)
Hash identifier: 9Q38r6gXw/wEjKR2jbS1j1CDpeXCBsrsB04HQvgKsPI=
Subject key identifier: 1A:2B:8C:BF:99:DE:99:CC:7E:07:2C:8F:9C:11:2B:4C:FD:61:C0:99
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019B7D5B3B017A7AC06F0F82A224BBA785E4
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/GiuMv5nemcx-ByyPnBErTP1hwJk.roa
Signing time: Fri 02 Jan 2026 06:18:09 +0000
ROA not before: Fri 02 Jan 2026 06:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.199.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:3b:01:7a:7a:c0:6f:0f:82:a2:24:bb:a7:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 06:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a2b8cbf99de99cc7e072c8f9c112b4cfd61c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:74:43:4d:db:bb:7e:07:cd:65:b2:fe:f0:
84:36:96:14:1d:fc:ee:e0:28:79:15:41:e6:75:12:
c9:ae:8f:26:8a:b9:67:06:9a:0f:c3:d7:51:93:9b:
7f:d9:63:ac:b8:fb:ef:c1:72:c3:c2:09:78:3a:be:
3c:15:63:00:56:1a:f4:63:cb:2d:9e:09:81:1e:6b:
4b:55:a8:d9:7a:5a:56:d2:1c:cb:38:60:6c:34:75:
7e:36:42:c2:42:a6:ef:88:4b:71:95:0b:a4:7e:2b:
7f:87:9d:fa:99:64:a8:8f:5a:df:f1:d4:1f:de:17:
08:c5:4a:61:84:24:52:e4:cd:f6:af:b3:9a:05:51:
c4:b4:7d:dd:75:0a:eb:cf:38:ac:4c:03:30:85:42:
e3:d9:25:6f:f9:d3:6f:47:39:a9:15:4f:af:63:4e:
f0:3a:c4:ae:45:ab:a8:15:90:83:32:00:11:a2:84:
a4:b2:99:93:cc:74:f1:e0:1f:12:92:0b:44:ef:a1:
4d:16:4e:b0:33:5d:f0:d4:0c:45:7f:48:5d:cb:4f:
15:c7:51:40:c5:7c:79:ea:e5:3f:a3:de:78:05:e1:
31:f0:9c:6d:4c:ea:38:70:90:0d:19:68:53:38:17:
8e:98:5c:6c:fd:91:9f:32:fd:e9:7b:76:b2:3c:01:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:8C:BF:99:DE:99:CC:7E:07:2C:8F:9C:11:2B:4C:FD:61:C0:99
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/GiuMv5nemcx-ByyPnBErTP1hwJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.227.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d7:98:22:27:c9:70:99:74:8e:88:b7:e7:fa:75:b7:55:ad:
1e:11:d5:6e:f1:b2:a5:aa:82:2f:d8:45:9c:23:48:ca:95:45:
dc:61:cb:36:93:12:04:01:33:da:3f:89:f6:5d:c5:d5:9d:f2:
1e:3d:32:4b:67:28:9a:0f:64:15:7f:bd:e7:50:cd:64:c3:7c:
ef:b5:51:e8:4a:f4:d1:c4:8c:5f:25:89:3d:db:23:5b:aa:a9:
93:e3:50:6e:5a:ca:12:29:27:03:fa:07:0f:93:f4:3f:06:f6:
6d:5d:2e:a2:ce:be:d2:b1:19:bd:df:2d:84:b4:c8:f0:ef:48:
08:af:d5:3c:94:f7:93:66:0e:02:e4:ba:57:99:da:a6:f1:a5:
00:e8:82:f6:85:d6:31:34:df:b3:e3:d8:f2:c8:b5:b0:f4:9f:
50:7b:bf:01:44:b2:66:ac:77:fc:41:54:81:6f:5d:de:75:69:
cd:60:b7:e8:c6:b3:a5:d7:7c:c5:c8:3b:ae:75:f2:9c:1f:ec:
68:45:d7:ef:e6:16:ce:29:9c:3f:3b:a1:98:14:63:25:15:a2:
2b:10:e0:b2:91:5e:95:32:2c:1b:7b:58:67:2c:e0:6b:fd:61:
a0:13:27:1a:a1:b6:9b:a9:7e:e2:fd:bb:b0:2e:be:ba:47:c3:
cf:e3:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 21:34:09 2026 by rpki-client