This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/Go5O8u6koNHV7b7UoH00mholn8I.roa
File: Go5O8u6koNHV7b7UoH00mholn8I.roa (raw, json)
Hash identifier: iLDBMtL7MeCo+uMKF6jUonWy9kHpSBrH0Ajuok1AP1g=
Subject key identifier: 1A:8E:4E:F2:EE:A4:A0:D1:D5:ED:BE:D4:A0:7D:34:9A:1A:25:9F:C2
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 019B797EC98EAFE85EC1B8D74738B4C4FBF3
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/Go5O8u6koNHV7b7UoH00mholn8I.roa
Signing time: Thu 01 Jan 2026 12:18:30 +0000
ROA not before: Thu 01 Jan 2026 12:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29167
IP address blocks: 37.209.128.0/19 maxlen: 21
84.39.160.0/20 maxlen: 21
93.154.128.0/17 maxlen: 17
151.248.32.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:c9:8e:af:e8:5e:c1:b8:d7:47:38:b4:c4:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Jan 1 12:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a8e4ef2eea4a0d1d5edbed4a07d349a1a259fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:07:38:74:ee:e1:59:d1:bd:3a:6b:e0:70:
36:cb:af:28:9f:f0:c9:f7:16:90:5f:26:e1:0a:2d:
2d:2c:4b:dc:fc:cc:6a:8a:a3:f4:87:a6:06:33:20:
7b:7b:88:d8:d1:f1:67:db:1c:03:52:70:68:21:36:
ba:44:19:24:a8:20:fd:f7:94:6a:3f:a9:26:e2:ba:
fd:ac:73:c4:cb:b4:c6:ae:32:31:d4:43:ac:72:4f:
d8:77:a1:e8:1f:73:f1:7a:21:ea:c3:d8:e7:c6:e7:
18:6e:f8:cc:62:9a:7d:48:0e:8f:2c:a9:1b:14:63:
5d:ec:f1:23:77:c1:88:b3:7e:f1:6a:6e:8b:62:25:
d3:63:25:9d:6b:14:cd:74:aa:86:bc:eb:cb:cb:e4:
92:33:b8:81:35:8b:1c:2d:6f:87:2c:3f:ef:d8:29:
f7:10:5d:5e:82:76:1d:2f:d0:f5:d0:d6:f6:dd:4c:
d4:a1:73:41:c1:ba:f9:20:1d:26:2d:d9:79:86:44:
85:81:4d:49:f5:62:6c:51:5a:1e:cc:c5:13:45:26:
5e:49:e2:d0:eb:63:6c:dc:2c:2e:b7:c6:fc:63:37:
ca:1c:2a:4e:ac:b0:1b:bb:8b:91:93:ae:bb:84:55:
73:c5:99:62:e7:1d:92:bf:6f:9f:d3:06:22:9f:d3:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:4E:F2:EE:A4:A0:D1:D5:ED:BE:D4:A0:7D:34:9A:1A:25:9F:C2
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/Go5O8u6koNHV7b7UoH00mholn8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.128.0/19
84.39.160.0/20
93.154.128.0/17
151.248.32.0/20
Signature Algorithm: sha256WithRSAEncryption
07:6b:3d:14:a0:63:5e:07:d3:f2:b9:f6:e4:22:e1:71:8d:dc:
16:76:ef:99:61:7f:42:57:3b:db:3e:6d:af:5d:ea:3a:d6:a2:
62:90:c1:a9:39:0d:a7:42:1d:4c:73:60:e4:f6:4c:c4:79:bc:
a3:b7:f2:60:c7:ef:d4:05:0f:40:3a:e8:51:d5:0e:cc:c5:f8:
85:a2:f8:e1:9c:14:68:0f:ad:a5:80:f1:1e:c2:b2:e1:89:f0:
ad:52:39:33:94:6f:05:9f:f1:bb:ea:3b:e5:5c:11:48:25:25:
06:46:c8:7b:ad:3e:01:90:a3:d4:2a:56:e6:2d:fe:fc:bb:6f:
de:2a:27:26:2e:21:b3:d1:45:9c:b3:50:85:a1:7b:5f:55:0c:
93:3f:98:b3:48:94:cd:a3:b8:2d:1e:67:6e:f9:01:45:ce:0a:
97:2c:99:88:ed:73:da:bc:c0:d7:c0:98:05:89:cf:c3:2a:f7:
d0:c2:be:0b:fe:c1:8c:c5:91:31:b0:43:b3:78:98:60:a2:c2:
18:e6:5f:ed:11:56:58:56:ac:03:b3:a1:44:ee:2c:47:e5:0b:
8c:c4:96:1f:6b:08:03:c3:ce:dc:f2:c9:d6:f5:e5:4a:73:6d:
77:90:86:23:25:56:5d:e5:4e:bb:b6:2b:b0:07:b0:ed:a7:0c:
8e:dd:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:36 2026 by rpki-client