This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/gUx1Nw3tICZQ91Z66Dc_ZM3oKZU.roa
File: gUx1Nw3tICZQ91Z66Dc_ZM3oKZU.roa (raw, json)
Hash identifier: qMVuUtEMmH0F6gZUJxcIjMLQShefrpmgEA8LuMyQ4iE=
Subject key identifier: 81:4C:75:37:0D:ED:20:26:50:F7:56:7A:E8:37:3F:64:CD:E8:29:95
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 019B7F851575633B891A39C22118D7B0EB7C
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/gUx1Nw3tICZQ91Z66Dc_ZM3oKZU.roa
Signing time: Fri 02 Jan 2026 16:23:06 +0000
ROA not before: Fri 02 Jan 2026 16:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8925
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:15:75:63:3b:89:1a:39:c2:21:18:d7:b0:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Jan 2 16:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=814c75370ded202650f7567ae8373f64cde82995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:5d:6d:ea:c3:1f:06:69:ee:d3:d0:9f:39:
6c:00:93:6a:7b:37:66:26:98:43:fc:5a:18:a4:c1:
89:65:63:8f:d1:20:b0:d3:5c:1d:8e:be:54:ab:a4:
8e:86:89:3c:28:1c:a1:72:b4:3d:99:df:04:b1:e5:
e6:73:cc:ca:28:81:ec:3f:c3:7a:6e:44:89:64:70:
e4:e3:f9:37:d5:0f:4a:21:66:18:93:0d:8a:b9:66:
93:23:2f:f2:f6:b9:db:59:59:d6:bb:d7:c4:bb:d5:
9b:d3:4e:dc:8e:f7:dc:02:83:7d:8d:b9:78:d1:e1:
c3:6a:9f:b9:af:8e:8d:16:f4:e1:3b:f6:b0:07:71:
78:2e:7c:f2:a7:29:8c:ba:d3:f6:d8:f0:2c:2c:5e:
0c:b1:45:c2:ac:63:df:3b:16:26:f0:ba:2d:32:0a:
96:c9:34:be:4d:b8:bd:81:98:2f:39:97:6e:fb:af:
7c:ca:03:9a:f2:ba:6a:55:47:72:89:4a:2e:7e:8d:
b5:8c:20:e3:25:67:c5:8f:ac:96:a2:e3:e2:2b:d9:
58:f3:5a:48:8c:67:b6:dc:d4:e6:b7:2d:ae:61:cb:
18:43:4e:bd:ab:23:86:1f:78:f0:5d:29:96:79:26:
74:3b:bd:ce:2f:a7:8a:77:af:de:26:e5:72:82:89:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:75:37:0D:ED:20:26:50:F7:56:7A:E8:37:3F:64:CD:E8:29:95
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/gUx1Nw3tICZQ91Z66Dc_ZM3oKZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/30
Signature Algorithm: sha256WithRSAEncryption
b0:f3:71:cc:f9:6f:1b:c9:68:96:08:3c:00:f4:6e:d2:3e:9a:
cb:86:e4:ca:cf:0e:94:f3:78:de:72:a0:47:f9:38:bc:a0:d4:
63:a9:39:82:cb:d7:83:e9:08:cb:bb:dc:e1:27:23:59:d4:b6:
ad:d4:f4:8d:11:73:5b:08:cf:c8:a1:c1:e8:a1:89:96:fa:18:
95:1e:0e:7d:26:66:a9:53:51:63:2b:74:f8:99:74:56:7d:56:
97:d1:3a:30:0e:07:81:10:4e:84:77:ed:b5:da:c2:f7:e8:c5:
60:61:f4:f3:36:3c:be:d1:1d:2b:bb:62:a1:aa:80:9d:1e:96:
dc:8b:bf:31:23:52:2d:15:28:d5:d1:12:b6:45:5c:b8:7e:1b:
dc:3f:f0:41:ed:cd:3e:1c:ab:a4:43:60:3a:4f:54:8a:3f:e1:
bb:09:9b:2d:b1:a0:a7:91:97:73:70:e9:a1:f6:da:bd:46:62:
4f:aa:0f:39:32:b8:69:9f:86:6d:18:65:07:51:10:d2:f3:3b:
ad:90:e0:b5:0c:90:eb:48:8e:ae:00:9d:03:d0:f4:db:25:93:
0b:b0:87:ab:60:d0:c7:c7:24:41:7b:76:22:37:02:a1:22:26:
8c:0a:37:44:97:6a:5f:d4:f5:03:04:92:65:dd:6f:2c:55:03:
d2:9a:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:39:24 2026 by rpki-client