This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gg6X3rP4M_HU28IjArylySmkiPs.roa
File: Gg6X3rP4M_HU28IjArylySmkiPs.roa (raw, json)
Hash identifier: re0xx12aRVyU3Oz5YoKZNUQdKDWH3+edRSy/XUXja/E=
Subject key identifier: 1A:0E:97:DE:B3:F8:33:F1:D4:DB:C2:23:02:BC:A5:C9:29:A4:88:FB
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019A969B8A6F9E506E11BD3A8B27ABB9B560
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gg6X3rP4M_HU28IjArylySmkiPs.roa
Signing time: Tue 18 Nov 2025 10:56:07 +0000
ROA not before: Tue 18 Nov 2025 10:56:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204154
IP address blocks: 92.118.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:96:9b:8a:6f:9e:50:6e:11:bd:3a:8b:27:ab:b9:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 18 10:56:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a0e97deb3f833f1d4dbc22302bca5c929a488fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:2c:d6:f3:db:fd:6a:61:cd:e5:7f:65:9b:
8a:8d:88:8b:fc:2d:f6:26:7e:fe:b8:8f:34:e5:bd:
11:d9:41:d5:16:a9:3e:f3:0d:91:59:8e:34:ee:e4:
6d:6a:6c:11:64:96:38:75:1a:72:ce:ad:5a:d3:ae:
ee:4e:d6:fe:41:8e:18:07:f2:db:97:0f:fe:73:2d:
df:e1:3e:77:e9:b7:20:de:32:cc:5c:4b:e8:54:6f:
c7:84:82:35:72:9a:ee:a7:1c:71:08:99:65:69:5c:
9a:f2:36:c6:26:3a:81:c1:24:8d:b8:60:67:0c:5c:
88:60:82:d7:0b:51:65:c6:01:56:be:9f:13:0c:78:
ff:b3:cf:e9:4c:8e:ff:94:03:07:27:96:00:35:96:
a4:01:d9:46:c1:fe:16:96:92:48:70:db:9c:cd:9f:
23:5d:06:79:97:72:00:5d:dd:43:89:11:42:22:1a:
3f:e9:c1:33:6f:06:ee:c2:02:8c:96:9c:71:e1:6a:
1d:9b:cc:16:ca:2b:b9:96:47:19:c6:c4:f2:a7:96:
7c:ea:03:77:32:40:c3:dc:9a:93:f3:b2:c3:3c:5a:
87:7e:15:ab:97:02:33:bc:17:6b:0b:44:ad:c4:d1:
cf:84:77:1e:33:5c:51:68:0a:41:4e:d3:7b:ca:71:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0E:97:DE:B3:F8:33:F1:D4:DB:C2:23:02:BC:A5:C9:29:A4:88:FB
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gg6X3rP4M_HU28IjArylySmkiPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:6f:5d:5a:67:51:5c:dd:d6:07:30:89:bd:cd:20:95:5e:cb:
44:0a:8a:60:3f:8d:a5:9e:33:e8:1f:1d:00:17:00:32:fb:93:
88:4b:a2:af:4e:55:b7:98:de:d5:07:d5:f8:73:c2:9a:ce:52:
ec:7c:10:be:22:ef:d1:89:24:6c:42:0e:12:8c:77:56:0a:bb:
5f:97:88:4a:79:ed:4a:36:c4:e3:ca:6f:ed:aa:1c:e0:3f:04:
ab:68:fc:bf:6d:21:1c:dc:fd:ac:a9:8d:f9:08:fc:50:c6:db:
42:2a:0b:eb:80:09:0d:60:ad:40:b0:28:3f:d0:bd:79:f2:87:
bc:6c:e0:0e:e1:15:32:28:a4:29:ba:92:1a:d5:a6:c5:cc:5a:
f7:f4:bc:17:2c:ae:c9:3b:82:8b:4d:51:af:18:af:8c:28:d0:
4a:ea:f2:57:9f:75:c6:59:7b:dd:1f:2a:8c:1e:d8:22:ac:fb:
25:1a:bc:05:49:c7:4f:7d:47:05:67:82:7d:c0:a6:f0:cc:61:
f3:6c:2d:93:df:b5:14:a8:d9:d2:f2:ad:a8:be:73:e6:b5:d9:
89:86:39:96:11:c7:15:30:33:9a:4c:9d:ce:28:e0:84:2e:59:
5f:28:b4:64:b8:2a:6d:8a:79:7b:39:48:17:3c:c0:d0:e8:c8:
ba:e6:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 20:32:59 2025 by rpki-client