This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/clGNCBZAUsZmUY2Yr9tTeA-xspg.roa
File: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (raw, json)
Hash identifier: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=
Subject key identifier: 72:51:8D:08:16:40:52:C6:66:51:8D:98:AF:DB:53:78:0F:B1:B2:98
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019B78A33ECB15313AC22198C740EE6D2977
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/clGNCBZAUsZmUY2Yr9tTeA-xspg.roa
Signing time: Thu 01 Jan 2026 08:18:42 +0000
ROA not before: Thu 01 Jan 2026 08:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215974
IP address blocks: 188.95.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:3e:cb:15:31:3a:c2:21:98:c7:40:ee:6d:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Jan 1 08:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72518d08164052c666518d98afdb53780fb1b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:e9:c1:76:dd:7b:f0:b0:fc:9e:6a:1b:6a:
32:78:b2:14:71:fa:60:e4:ae:6c:be:d9:44:22:d6:
95:ed:7e:36:c4:18:5e:b0:25:af:3b:f1:4c:15:21:
52:38:02:2c:7d:14:3b:66:4d:ce:10:90:59:6a:40:
9c:55:cf:1c:6a:e1:b0:e4:b1:ed:f5:4f:46:25:55:
aa:93:bd:93:89:01:d2:d7:b7:26:01:27:d7:27:f5:
bd:3e:af:3e:b3:b7:0f:3b:9b:76:b7:7b:29:0c:a7:
68:6e:e5:f8:3c:c8:10:28:7d:b5:fd:67:67:2a:07:
21:95:d9:a0:46:2d:73:0a:08:f5:31:f6:81:99:53:
0d:4a:68:4e:a3:cf:5b:99:e3:21:02:d1:1f:de:bc:
a9:44:3a:06:8b:a9:79:b9:ec:b6:43:c2:d3:41:e0:
7a:e0:78:7c:67:52:1c:de:9d:36:76:2e:98:9a:4d:
17:9b:34:9b:e9:ad:54:83:b4:14:f3:55:58:e7:b7:
aa:3a:03:59:1b:a8:7f:8e:ee:d3:75:be:84:ed:67:
eb:b9:a3:4c:4e:53:15:87:86:40:19:98:5a:0e:93:
68:a6:72:c8:a5:9c:e9:2c:73:2b:d3:21:84:be:83:
52:8c:4a:ef:4f:2d:c6:19:23:67:76:bd:80:2c:90:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:8D:08:16:40:52:C6:66:51:8D:98:AF:DB:53:78:0F:B1:B2:98
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/clGNCBZAUsZmUY2Yr9tTeA-xspg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.198.0/24
Signature Algorithm: sha256WithRSAEncryption
29:45:df:f8:17:46:a1:3c:59:8d:07:95:1f:4f:66:54:46:33:
17:e0:8d:2e:63:b0:13:cf:2b:97:49:ce:33:5e:94:ee:7f:81:
b2:7c:8f:81:8b:8c:35:c0:f4:53:c0:c0:e5:b1:4a:9f:23:55:
fd:b4:db:f0:a0:d4:bf:3d:d7:c6:de:79:81:f7:98:01:86:7d:
78:93:ac:b2:8b:95:05:01:57:2e:91:84:3a:c7:d4:55:3f:32:
a4:4d:f8:fd:74:42:5e:ba:0f:2a:98:fb:54:4d:ae:96:cf:c6:
b3:e9:a2:fb:d1:09:44:73:1c:f4:11:ae:fc:d4:bb:c5:02:04:
15:94:c8:ff:8f:95:28:01:64:f9:08:0b:6c:56:91:fd:d9:10:
29:20:fe:93:c1:21:88:c4:ef:35:25:03:e0:33:9c:5a:98:88:
55:7a:29:bc:8c:7d:c5:27:cd:2c:5e:92:0a:ee:76:cf:e9:93:
8b:b9:23:38:ab:4e:73:7c:35:c4:3f:3c:e4:5e:23:19:85:cb:
42:31:c9:f6:6d:c1:71:44:8b:53:a0:e7:5a:03:f5:e1:0f:40:
46:d0:42:25:71:da:7d:b8:03:12:e5:d7:14:e6:70:50:47:20:
89:4c:ae:b9:ac:a0:65:20:eb:11:c1:d3:7a:0e:09:fa:15:17:
c8:6d:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:55 2026 by rpki-client