This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/GNUScliA15EVg12KS0aiN6LNf4o.roa
File: GNUScliA15EVg12KS0aiN6LNf4o.roa (raw, json)
Hash identifier: jgNE4zzdH3wyJCQBwY43az2dGkMcZm+AtuFzQMGyrHk=
Subject key identifier: 18:D5:12:72:58:80:D7:91:15:83:5D:8A:4B:46:A2:37:A2:CD:7F:8A
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 019B76EBA64CD4C7E33FF1B6FA168F9CA0EF
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/GNUScliA15EVg12KS0aiN6LNf4o.roa
Signing time: Thu 01 Jan 2026 00:18:33 +0000
ROA not before: Thu 01 Jan 2026 00:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 131.150.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:a6:4c:d4:c7:e3:3f:f1:b6:fa:16:8f:9c:a0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Jan 1 00:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18d512725880d79115835d8a4b46a237a2cd7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:69:a5:dd:cc:62:d6:a7:37:9b:d9:71:fa:
e8:4b:ae:c1:d2:cb:b6:ef:67:76:ac:1e:e1:10:84:
b0:ce:8c:8e:2e:a2:64:fd:aa:38:aa:9f:82:cc:3d:
a9:62:e8:ba:e6:6a:a0:03:f2:69:7f:32:36:a7:d1:
ee:27:83:7e:fb:61:21:a8:cf:e1:be:02:27:6d:a5:
bb:f4:7f:64:30:1e:7f:20:e7:25:b3:ef:35:11:e6:
7f:9d:19:08:5a:e0:aa:bc:14:e8:84:ae:54:65:0f:
75:de:d1:bd:cb:df:ac:61:f3:f4:0c:d2:1b:3c:f9:
e2:48:6c:30:81:c9:50:66:9f:4c:cd:eb:f2:4f:7b:
f7:47:19:a6:6b:1c:de:46:5d:ea:55:1a:23:52:d6:
0e:48:8a:27:98:1a:cd:38:7e:90:22:05:31:d8:8d:
c1:7d:af:54:23:89:4a:de:7d:7a:47:2d:8a:81:b7:
35:e4:6f:da:06:df:38:cd:7d:5d:50:93:4b:f3:d6:
b2:73:29:66:b5:83:d7:34:01:13:c4:89:ee:cd:f2:
44:e7:46:b3:b6:7d:f0:7b:0f:04:93:cb:2f:0b:a7:
3e:dc:49:25:66:b2:22:07:57:48:4c:17:10:6d:83:
1b:9f:53:a3:c3:1a:09:8a:62:cb:df:51:df:59:ae:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D5:12:72:58:80:D7:91:15:83:5D:8A:4B:46:A2:37:A2:CD:7F:8A
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/GNUScliA15EVg12KS0aiN6LNf4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.150.144.0/20
Signature Algorithm: sha256WithRSAEncryption
52:2a:dd:1d:63:b8:97:a7:d7:1c:dc:f1:6e:25:ba:34:37:41:
0e:b0:55:35:af:98:cd:c0:8a:cf:f3:52:c6:a5:1b:8a:45:e7:
75:1a:83:07:ba:a9:62:ec:c6:35:b6:77:b9:41:df:25:7a:c9:
54:26:19:6f:90:3d:70:5a:06:21:cf:7e:a9:18:c8:ed:83:d0:
c9:b6:bb:31:84:43:f2:84:38:24:b7:2a:e3:13:75:c1:e0:6c:
bb:99:70:ae:6a:41:be:8f:0b:d6:bb:cf:8c:8a:3a:c3:f2:02:
c8:12:ab:10:10:de:75:68:29:a3:91:d0:2c:73:71:b6:01:08:
4b:20:2f:c3:a6:6d:e3:13:93:f0:38:41:df:1e:e5:1d:c1:d0:
36:5f:d6:c2:b8:4f:4f:3b:cb:c8:85:97:89:b4:68:6f:b3:c5:
8a:24:c8:b7:9a:9d:cc:37:e3:1a:f1:0f:65:38:37:c3:94:62:
f3:a5:9a:6e:b7:84:68:c0:71:9d:4d:9d:81:31:c3:55:1f:9f:
4a:8a:20:2e:c5:05:52:67:4d:fb:02:0e:07:8c:6f:d9:cc:6e:
bf:74:89:06:d1:a8:94:bb:8a:5a:90:73:be:8a:59:ef:f7:b4:
b4:cf:97:1e:11:f2:a5:25:f4:79:eb:25:31:4e:c1:a4:87:f1:
0f:92:e2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:49 2026 by rpki-client