This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GPyCzr214BPkOg06tc6yh_rJxQ8.roa
File: GPyCzr214BPkOg06tc6yh_rJxQ8.roa (raw, json)
Hash identifier: kdGhYWmwjCp7vCKV28oYmwJv0pozjJPvR7deJo2RH58=
Subject key identifier: 18:FC:82:CE:BD:B5:E0:13:E4:3A:0D:3A:B5:CE:B2:87:FA:C9:C5:0F
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019B7A5AA4E2A07DFBE43ED3D1AEDD103F81
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GPyCzr214BPkOg06tc6yh_rJxQ8.roa
Signing time: Thu 01 Jan 2026 16:18:39 +0000
ROA not before: Thu 01 Jan 2026 16:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211585
IP address blocks: 83.147.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:a4:e2:a0:7d:fb:e4:3e:d3:d1:ae:dd:10:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 16:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18fc82cebdb5e013e43a0d3ab5ceb287fac9c50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:f6:99:ee:46:91:b3:77:28:7b:df:31:76:
3a:83:f4:57:86:c1:4a:b7:12:09:f5:ad:57:bf:92:
20:ab:2a:db:b2:23:bd:56:97:4b:40:f7:de:37:fc:
19:9d:d8:ee:7c:d2:cc:af:f7:6a:3a:f4:88:08:5e:
18:61:57:4d:66:1b:aa:6f:ab:e4:2a:da:b8:b8:00:
c4:ce:bc:82:c6:de:39:b6:46:d3:eb:38:0d:d0:21:
f8:d9:e1:a6:a1:45:e4:4d:87:d7:8e:d2:50:69:ab:
fe:96:69:ad:11:7a:4a:c6:27:9a:a4:8d:db:b9:80:
78:d5:8f:7d:76:b2:dc:da:85:54:3a:46:f6:75:e3:
24:5b:97:bc:c4:41:26:da:e3:84:b5:d8:52:72:71:
de:a3:25:41:7a:2a:f9:88:b6:45:ba:6d:72:e9:e3:
b6:de:25:5b:ed:e0:ac:98:5e:3f:16:57:bb:12:c1:
e6:e6:41:73:b9:92:fd:ef:c3:07:7e:ee:af:6d:ed:
3d:52:f6:d1:11:ae:90:a5:5b:99:5b:e4:b2:ff:37:
05:55:5b:21:a4:0b:ba:c1:eb:70:75:38:57:fa:8a:
4a:5a:88:2f:28:85:d9:85:ad:29:45:a7:34:5b:e3:
52:95:7f:0b:e1:bc:3b:b2:45:be:75:0a:92:87:c9:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FC:82:CE:BD:B5:E0:13:E4:3A:0D:3A:B5:CE:B2:87:FA:C9:C5:0F
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GPyCzr214BPkOg06tc6yh_rJxQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
74:c0:43:75:37:24:54:46:06:cf:da:a9:9d:b9:f0:2d:b5:dc:
ab:fe:e2:65:bf:57:fd:3f:76:5a:3c:ff:29:76:1c:6e:c6:48:
0d:84:32:db:c4:12:98:44:ae:59:5d:93:80:3b:54:2b:3f:05:
f3:9d:94:c8:02:66:ca:5b:38:59:29:2b:0e:c4:09:2c:72:93:
b7:c4:57:0b:58:8c:2d:19:b4:90:a9:15:6a:76:4f:27:e4:5c:
49:d4:ff:55:89:80:49:e7:90:36:91:73:b7:f4:55:71:15:a3:
8e:18:34:0f:9a:71:7f:fc:fe:ed:48:87:e1:56:59:9a:7b:3d:
15:6d:24:2f:e8:4b:e5:01:b4:40:b5:9e:de:5c:08:a5:59:aa:
21:f3:6d:06:03:1e:6e:6c:76:59:c6:92:39:59:5f:a3:ca:46:
bc:a4:d3:9c:13:0b:60:3b:b5:df:40:98:46:8d:e9:c5:fc:5f:
21:e7:fa:2c:16:71:1a:6d:33:c6:c4:bd:28:ac:a7:12:50:e6:
11:9c:8b:cc:f7:a4:df:76:e4:ea:93:af:58:7a:67:32:96:43:
ce:ad:97:9c:16:bf:d0:85:c2:9e:83:c2:da:fa:8b:15:27:9c:
9d:b4:42:a1:63:ee:61:bc:06:f6:09:47:7f:8f:15:78:88:0d:
3f:56:a8:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WqTioH375D7T0a7dED+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGZjODJjZWJkYjVlMDEzZTQzYTBkM2FiNWNlYjI4N2ZhYzljNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq32me5GkbN3KHvfMXY6g/RXhsFK
txIJ9a1Xv5IgqyrbsiO9VpdLQPfeN/wZndjufNLMr/dqOvSICF4YYVdNZhuqb6vk
Ktq4uADEzryCxt45tkbT6zgN0CH42eGmoUXkTYfXjtJQaav+lmmtEXpKxieapI3b
uYB41Y99drLc2oVUOkb2deMkW5e8xEEm2uOEtdhScnHeoyVBeir5iLZFum1y6eO2
3iVb7eCsmF4/Fle7EsHm5kFzuZL978MHfu6vbe09UvbREa6QpVuZW+Sy/zcFVVsh
pAu6wetwdThX+opKWogvKIXZha0pRac0W+NSlX8L4bw7skW+dQqSh8le/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBj8gs69teAT5DoNOrXOsof6ycUPMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvR1B5Q3pyMjE0QlBrT2cwNnRjNnloX3JKeFE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MgMA0G
CSqGSIb3DQEBCwUAA4IBAQB0wEN1NyRURgbP2qmdufAttdyr/uJlv1f9P3ZaPP8p
dhxuxkgNhDLbxBKYRK5ZXZOAO1QrPwXznZTIAmbKWzhZKSsOxAkscpO3xFcLWIwt
GbSQqRVqdk8n5FxJ1P9ViYBJ55A2kXO39FVxFaOOGDQPmnF//P7tSIfhVlmaez0V
bSQv6EvlAbRAtZ7eXAilWaoh820GAx5ubHZZxpI5WV+jyka8pNOcEwtgO7XfQJhG
jenF/F8h5/osFnEabTPGxL0orKcSUOYRnIvM96TfduTqk69YemcylkPOrZecFr/Q
hcKeg8La+osVJ5ydtEKhY+5hvAb2CUd/jxV4iA0/Vqh/
-----END CERTIFICATE-----
Generated at Wed Jan 21 17:17:47 2026 by rpki-client