This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/GJOoU-343CEzQJKM7Tgkkopjnfc.roa
File: GJOoU-343CEzQJKM7Tgkkopjnfc.roa (raw, json)
Hash identifier: K8/YlGCuLAIO9UgXpY3V1KHiQod3PTuMQD73e0fNF1U=
Subject key identifier: 18:93:A8:53:ED:F8:DC:21:33:40:92:8C:ED:38:24:92:8A:63:9D:F7
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019B78A25AA7567E5850E84EE5642F5CB089
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/GJOoU-343CEzQJKM7Tgkkopjnfc.roa
Signing time: Thu 01 Jan 2026 08:17:44 +0000
ROA not before: Thu 01 Jan 2026 08:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47123
IP address blocks: 185.133.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:5a:a7:56:7e:58:50:e8:4e:e5:64:2f:5c:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Jan 1 08:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1893a853edf8dc213340928ced3824928a639df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:1e:6c:3d:95:1b:41:d0:49:94:9a:8c:a7:
87:28:08:57:e7:3c:55:6a:6e:b7:14:45:5d:f3:9c:
e6:55:dc:c1:d0:d1:96:1d:26:d4:fb:d1:93:66:6e:
c1:45:1c:31:98:63:ea:11:ff:eb:6c:24:9c:18:c5:
41:80:d2:70:0e:2f:a0:9a:c6:6a:90:92:69:5e:8b:
cb:03:9e:3c:7a:4a:9a:b4:20:5f:d6:96:aa:90:20:
50:e1:1c:d0:bb:db:a3:77:5c:63:65:b3:86:14:6c:
15:39:4b:6c:4d:ac:25:dc:83:0f:77:4c:30:08:20:
89:dd:ae:39:1e:e7:a4:cf:80:61:5f:2a:7f:e6:e5:
06:bf:94:81:a8:96:c4:91:24:33:34:4a:d2:d3:c6:
48:7a:1f:e2:5a:dd:3c:39:a4:c7:c7:f9:5c:4c:b3:
f9:85:af:a4:f3:f1:02:7c:cf:59:8f:b0:7f:22:4e:
df:58:63:cc:6f:9b:8b:26:41:6c:6c:9a:e2:ff:79:
9b:b6:3b:d3:d6:83:89:12:8a:33:3a:72:e5:a7:0b:
d8:da:97:01:a2:cd:57:51:ac:70:19:77:d6:36:b6:
53:14:bf:4e:db:9a:57:b0:cd:97:d8:f7:da:7c:a7:
97:36:da:fe:61:25:53:bd:a9:57:53:8d:cf:14:79:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:A8:53:ED:F8:DC:21:33:40:92:8C:ED:38:24:92:8A:63:9D:F7
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/GJOoU-343CEzQJKM7Tgkkopjnfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d8:95:db:5a:ef:0d:5a:95:54:0a:2a:6d:07:e4:10:29:c6:
6e:c0:7f:bb:f5:40:75:55:41:33:22:4b:9d:81:ff:80:57:08:
44:4a:26:11:16:84:5f:f8:a6:2c:05:49:a2:26:9f:df:99:28:
d3:fc:3a:c6:be:4f:a8:9c:62:48:47:7c:cd:c0:3c:26:2b:a4:
fe:e5:99:bf:31:c7:82:ff:39:0c:4d:e1:6d:40:e7:99:1a:33:
c8:4d:e3:98:ee:6e:f4:13:bb:f8:15:c6:6a:66:c5:fe:25:5f:
9d:55:18:df:69:7d:f5:ea:6b:ec:0a:bd:eb:ab:a8:54:b8:8a:
6d:7d:89:19:31:c4:10:2b:97:cb:50:10:b8:ab:cb:33:1e:cc:
74:a9:85:67:03:7f:bd:7a:5e:ec:72:c4:0f:72:2b:f0:90:41:
34:c5:8c:9e:c8:be:40:1a:8e:cf:da:9f:dc:f7:a6:7c:33:43:
e3:6b:58:4d:4a:3f:96:22:12:1c:cc:a3:0b:67:93:bd:14:b6:
d4:8d:e7:79:46:27:71:0a:cb:13:a7:f7:f7:2a:dc:37:5a:15:
0b:2f:78:c3:dc:6b:95:a5:93:7f:16:39:65:d6:f2:58:d6:91:
a0:35:0c:f4:de:3e:22:4f:68:a3:0b:8c:27:bd:5e:60:25:45:
22:09:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:24 2026 by rpki-client