This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G2xdfzs3wQJv9zZFB0dIYE1wP40.roa
File: G2xdfzs3wQJv9zZFB0dIYE1wP40.roa (raw, json)
Hash identifier: Kb0gJzw5SmbhJGivaLvicWRV0EdJSpkk1X0zcVEuKm8=
Subject key identifier: 1B:6C:5D:7F:3B:37:C1:02:6F:F7:36:45:07:47:48:60:4D:70:3F:8D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019B7A5A9EB4C7B1800ECD7339367E31488A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G2xdfzs3wQJv9zZFB0dIYE1wP40.roa
Signing time: Thu 01 Jan 2026 16:18:37 +0000
ROA not before: Thu 01 Jan 2026 16:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31577
IP address blocks: 83.147.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:9e:b4:c7:b1:80:0e:cd:73:39:36:7e:31:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 16:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b6c5d7f3b37c1026ff73645074748604d703f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:bc:ed:1d:ac:3e:1a:f4:b1:0c:3c:0f:7f:
ed:df:9e:42:9d:b4:07:a7:22:eb:ee:1b:8f:cc:01:
e7:7b:04:2f:36:31:70:4b:a5:0b:4e:a3:fa:31:f7:
7d:2c:d2:15:2e:be:61:04:9b:78:d7:0a:1c:75:4c:
0a:43:8b:d5:d2:e4:87:cb:38:17:33:d9:d9:a1:e9:
22:0a:23:40:3d:e0:be:0b:e6:9d:8f:f4:06:5f:c8:
79:26:32:f2:77:7f:85:23:0e:95:3b:17:01:8b:3e:
e5:96:1b:a1:aa:0c:10:e3:79:98:94:74:56:2e:f9:
89:16:14:c8:b1:ee:37:67:65:d8:40:15:22:ae:1a:
dc:e1:4d:0d:f6:89:3c:be:9c:d9:64:04:fe:30:1c:
07:68:e0:a2:f7:21:ab:bc:95:d5:6e:46:b4:c5:5f:
d6:bf:ad:c1:89:d9:be:91:0f:83:15:10:5f:05:0f:
e6:33:1a:11:66:56:bf:2e:2c:5e:1a:bd:b3:1e:ad:
40:b8:4d:1e:5c:01:e3:17:84:19:dd:49:88:48:0f:
f6:cb:f1:b7:ce:86:2c:65:00:0a:8d:10:0b:e4:a5:
f0:90:6b:04:a4:5e:e2:7e:a4:b2:30:28:8f:43:39:
86:ea:89:e5:91:b7:e2:01:e9:62:e5:9f:62:08:f2:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:5D:7F:3B:37:C1:02:6F:F7:36:45:07:47:48:60:4D:70:3F:8D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G2xdfzs3wQJv9zZFB0dIYE1wP40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.63.0/24
Signature Algorithm: sha256WithRSAEncryption
04:61:51:cb:5e:74:7c:13:2a:76:3a:d8:05:83:3e:01:84:88:
5d:ee:11:35:bd:72:a8:73:2f:da:5d:73:45:5c:fb:ed:b0:3b:
fb:c9:ee:43:1e:58:0d:7b:1d:11:64:2d:ed:10:85:ce:6c:3a:
45:c0:ab:6e:29:86:1f:45:82:ea:24:32:16:6c:4c:90:49:0a:
79:7b:3f:ba:5c:8b:b7:4a:6f:15:62:da:4c:f0:06:1e:37:f6:
c8:80:4a:33:d5:94:02:25:08:87:d9:f0:f1:c2:c8:93:ab:6b:
3d:27:28:72:ff:f5:33:65:9f:53:18:3d:aa:2b:1c:c6:2e:39:
83:e6:e7:6c:99:f5:23:d8:91:d1:29:c5:43:3b:a5:ee:3c:68:
89:c6:ec:aa:63:04:31:05:96:67:0e:f8:6d:d0:35:64:53:cb:
57:df:49:80:e8:40:d8:b8:ff:c6:b3:6d:c9:d8:ec:03:02:89:
42:9e:44:9e:a3:01:80:bb:c4:69:2a:fb:f9:4f:6a:57:3c:8a:
c4:52:b6:0a:df:38:cd:8e:5d:4c:91:e4:b3:ef:98:9d:c6:a9:
24:53:5e:2e:01:31:40:ad:ac:9c:fb:96:a1:cb:3f:c3:89:23:
8f:14:2e:0b:27:4b:a7:52:82:64:c3:0c:6b:56:f3:66:69:67:
a4:37:a8:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6Wp60x7GADs1zOTZ+MUiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjZjNWQ3ZjNiMzdjMTAyNmZmNzM2NDUwNzQ3NDg2MDRkNzAzZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh687R2sPhr0sQw8D3/t355CnbQH
pyLr7huPzAHnewQvNjFwS6ULTqP6Mfd9LNIVLr5hBJt41wocdUwKQ4vV0uSHyzgX
M9nZoekiCiNAPeC+C+adj/QGX8h5JjLyd3+FIw6VOxcBiz7llhuhqgwQ43mYlHRW
LvmJFhTIse43Z2XYQBUirhrc4U0N9ok8vpzZZAT+MBwHaOCi9yGrvJXVbka0xV/W
v63Bidm+kQ+DFRBfBQ/mMxoRZla/LixeGr2zHq1AuE0eXAHjF4QZ3UmISA/2y/G3
zoYsZQAKjRAL5KXwkGsEpF7ifqSyMCiPQzmG6onlkbfiAeli5Z9iCPKudwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtsXX87N8ECb/c2RQdHSGBNcD+NMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvRzJ4ZGZ6czN3UUp2OXpaRkIwZElZRTF3UDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5M/MA0G
CSqGSIb3DQEBCwUAA4IBAQAEYVHLXnR8Eyp2OtgFgz4BhIhd7hE1vXKocy/aXXNF
XPvtsDv7ye5DHlgNex0RZC3tEIXObDpFwKtuKYYfRYLqJDIWbEyQSQp5ez+6XIu3
Sm8VYtpM8AYeN/bIgEoz1ZQCJQiH2fDxwsiTq2s9Jyhy//UzZZ9TGD2qKxzGLjmD
5udsmfUj2JHRKcVDO6XuPGiJxuyqYwQxBZZnDvht0DVkU8tX30mA6EDYuP/Gs23J
2OwDAolCnkSeowGAu8RpKvv5T2pXPIrEUrYK3zjNjl1MkeSz75idxqkkU14uATFA
rayc+5ahyz/DiSOPFC4LJ0unUoJkwwxrVvNmaWekN6iM
-----END CERTIFICATE-----
Generated at Wed Jan 21 18:20:42 2026 by rpki-client