This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/gAWk_30h7y4VaoOZxcAdDFowjFc.roa
File: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (raw, json)
Hash identifier: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=
Subject key identifier: 80:05:A4:FF:7D:21:EF:2E:15:6A:83:99:C5:C0:1D:0C:5A:30:8C:57
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 019B7D5C069DC4698E86605851B242B813DF
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/gAWk_30h7y4VaoOZxcAdDFowjFc.roa
Signing time: Fri 02 Jan 2026 06:19:01 +0000
ROA not before: Fri 02 Jan 2026 06:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12525
IP address blocks: 194.105.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 20:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:06:9d:c4:69:8e:86:60:58:51:b2:42:b8:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Jan 2 06:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8005a4ff7d21ef2e156a8399c5c01d0c5a308c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:72:80:ca:a2:2d:89:12:3f:c3:2d:21:ad:
84:53:bf:9e:77:d0:54:47:75:ab:c6:c2:67:53:67:
c6:6b:87:cf:83:06:57:03:53:86:e1:db:dc:b9:d7:
e9:29:25:91:ae:1a:fa:99:7b:d3:04:3f:f7:db:86:
87:61:0e:99:e6:3a:47:60:06:e2:ab:a3:b9:5a:cc:
18:08:f0:72:b0:3e:eb:26:d4:3c:49:97:b4:04:e2:
dc:4d:6a:8f:88:bb:7c:1e:db:a9:2a:da:a9:4a:6a:
7e:0d:d0:5d:e7:f0:0e:81:e6:02:76:9d:df:81:c2:
08:d7:13:ce:e7:33:3e:be:38:d1:a7:d7:87:0b:6f:
77:5d:e4:b1:33:c3:71:18:d3:9d:05:ca:c6:c2:09:
a9:15:e1:71:26:7b:52:c3:7e:ec:f8:20:61:1b:eb:
93:ee:26:37:37:07:fa:df:bf:e7:8d:00:07:5e:41:
2b:1c:80:9b:b8:c8:ed:b6:21:d2:72:a5:49:93:e1:
0c:02:7a:b7:c9:47:de:78:f3:15:63:1c:29:5c:78:
2c:30:1f:08:ec:bf:ab:e0:0e:fb:99:95:3e:2b:07:
9e:37:b3:1e:f2:80:e3:4e:73:e4:4f:e3:6c:6a:5f:
c2:96:60:27:3e:3a:a3:21:11:5d:0f:ca:35:c3:76:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:A4:FF:7D:21:EF:2E:15:6A:83:99:C5:C0:1D:0C:5A:30:8C:57
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/gAWk_30h7y4VaoOZxcAdDFowjFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c8:64:af:04:d8:52:5e:65:b3:e4:ba:eb:f8:28:7a:08:77:
f0:41:dd:e8:43:db:0f:85:53:9e:e6:d0:c6:50:d9:cf:1e:8d:
16:8d:43:f1:16:d7:48:a7:00:f0:55:0a:b5:10:c2:de:03:ab:
5f:c6:9c:a8:2f:12:80:50:fd:3a:bd:b8:ce:a9:00:d1:20:14:
e8:f1:6e:d6:69:7a:be:2f:28:23:b3:02:d3:da:3e:6c:09:09:
c3:43:e9:d5:d6:01:49:3b:03:2a:f7:3c:60:45:f2:17:28:59:
b4:93:00:c8:9a:f2:7c:17:11:e4:61:be:9e:f7:f7:8e:bc:c7:
35:61:7b:70:1d:1f:65:55:d7:16:90:03:0d:68:86:d7:d2:c5:
23:aa:85:e2:9b:51:e9:7f:5a:73:a9:b2:cb:f0:02:82:75:17:
54:b4:8e:05:76:9a:06:a3:5e:da:83:75:79:06:e3:24:c6:20:
4b:00:d3:fa:79:a4:c7:8b:49:65:ab:0f:5f:49:b0:86:1b:18:
ab:76:21:7e:31:1d:f5:9b:70:9a:ee:c3:31:3b:e7:5b:42:e4:
b4:4d:b8:f2:ba:91:18:5d:d2:a8:e3:af:e8:28:cd:9a:c2:98:
13:47:ab:61:2a:f9:d8:db:c6:81:9c:86:96:63:da:37:71:21:
2f:4b:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:02:42 2026 by rpki-client