This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/GiGVJdmKecTDzES4xuGNepN-ljA.roa
File: GiGVJdmKecTDzES4xuGNepN-ljA.roa (raw, json)
Hash identifier: 2LeON6ht+y6rThTLAC5r6s9XniJIT+LKa/sbIZg3WNg=
Subject key identifier: 1A:21:95:25:D9:8A:79:C4:C3:CC:44:B8:C6:E1:8D:7A:93:7E:96:30
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019B78A225F84E9FADE5E17226E1C54364D4
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/GiGVJdmKecTDzES4xuGNepN-ljA.roa
Signing time: Thu 01 Jan 2026 08:17:31 +0000
ROA not before: Thu 01 Jan 2026 08:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50103
IP address blocks: 185.186.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:25:f8:4e:9f:ad:e5:e1:72:26:e1:c5:43:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Jan 1 08:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a219525d98a79c4c3cc44b8c6e18d7a937e9630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:60:2e:96:a1:e3:3a:0d:b5:67:c0:4e:19:
88:9e:a7:ea:d1:2f:65:1e:6a:b7:fd:fb:56:0e:c7:
0d:24:ba:53:af:c3:33:42:19:84:14:0a:94:d9:91:
de:4b:7d:90:cd:81:82:48:3e:77:c5:11:89:30:9d:
ad:7e:f3:59:e6:df:76:dd:a6:47:2a:9d:1a:e5:27:
f8:06:c3:e2:6c:73:22:db:f2:8e:37:d6:5c:8e:0e:
11:91:e9:23:73:96:2b:ae:0c:91:4b:55:cf:bb:f4:
a1:15:cd:16:5e:ee:37:70:c4:75:29:72:27:39:42:
93:76:8e:e2:d2:01:98:4a:7f:fb:20:cc:4c:8d:95:
5a:2d:c5:d4:67:83:8a:90:29:80:92:63:ad:9f:01:
62:99:86:1f:e0:03:80:65:15:50:53:b4:54:18:71:
47:17:52:07:a4:d3:60:e3:fb:4a:b5:27:26:20:1b:
0f:a5:0f:a7:01:d5:bb:bb:50:e0:7c:4e:55:6d:90:
7d:5c:7d:cb:cf:09:f7:b6:27:53:9b:98:03:86:d1:
45:1b:e3:a9:54:ea:78:38:be:1e:46:70:d8:d3:d3:
fc:f4:a5:c2:3a:ba:fa:ad:26:15:21:25:c5:9f:71:
00:cc:5b:2e:66:c7:35:b0:e3:d3:32:3b:a0:66:02:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:95:25:D9:8A:79:C4:C3:CC:44:B8:C6:E1:8D:7A:93:7E:96:30
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/GiGVJdmKecTDzES4xuGNepN-ljA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.1.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7d:59:d2:c7:0e:16:32:58:ad:56:8c:f8:01:df:61:88:2a:
91:df:c9:e7:e7:f9:37:74:d9:70:88:ec:75:97:9d:57:23:d6:
fc:73:e5:23:89:c0:c3:22:4d:db:ee:f4:ef:9f:35:40:32:10:
dc:f6:74:6f:28:70:eb:9d:71:f0:f8:60:7e:a2:75:f3:70:f3:
01:7d:c1:ab:d2:fc:96:f8:67:c8:d1:70:74:8b:07:0e:78:c8:
d2:7b:73:2f:80:4b:46:df:f0:f2:80:b4:c5:e8:d5:d1:ad:69:
33:a4:9d:76:b8:9b:2c:b2:27:5b:2e:28:dc:8e:51:a7:8a:dc:
7c:dd:40:8d:ce:3d:92:61:c7:46:b6:51:f7:48:47:f0:cb:6b:
e5:4e:46:57:b6:2a:47:c1:64:af:9c:53:f5:0c:4a:06:74:cd:
16:e5:9e:62:d1:ee:97:7b:63:2b:55:d8:fb:ef:b0:7a:9c:57:
dc:88:0f:53:43:4d:7f:cb:0a:a1:87:84:33:ae:dc:50:4f:94:
00:7d:b5:f6:b9:05:8d:eb:f2:a1:70:76:e9:a0:ab:df:48:28:
fc:43:f2:af:72:ab:eb:b8:eb:1c:96:09:b2:66:f0:8a:10:b7:
25:38:d2:08:a5:f0:bd:6e:37:1c:28:93:ff:71:d5:32:b7:cc:
d9:14:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:55:30 2026 by rpki-client