This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/GyhIX9G7ssewah6bDhgNQPrqbwo.roa
File: GyhIX9G7ssewah6bDhgNQPrqbwo.roa (raw, json)
Hash identifier: kljqR0c8WAPsE2bmcYrTdPFXyOSyujcjC+p/sprv0mg=
Subject key identifier: 1B:28:48:5F:D1:BB:B2:C7:B0:6A:1E:9B:0E:18:0D:40:FA:EA:6F:0A
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 019B7EA73A1A48EC605B1E773A7EE9E66357
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/GyhIX9G7ssewah6bDhgNQPrqbwo.roa
Signing time: Fri 02 Jan 2026 12:20:47 +0000
ROA not before: Fri 02 Jan 2026 12:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48602
IP address blocks: 185.140.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:3a:1a:48:ec:60:5b:1e:77:3a:7e:e9:e6:63:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Jan 2 12:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b28485fd1bbb2c7b06a1e9b0e180d40faea6f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:7d:51:5c:07:4b:37:7a:5c:3a:29:16:89:
33:25:69:f3:bd:6b:55:45:93:f7:8f:e9:3d:08:a5:
31:8c:90:6a:63:ff:4b:ff:15:94:36:6e:43:f5:00:
0a:50:a5:4d:d2:a7:17:b9:23:5e:b0:e2:cf:e8:30:
d5:1a:64:f4:71:30:a8:13:42:60:8d:94:ef:7b:c8:
75:85:29:53:9f:23:a1:48:9f:03:99:be:07:bd:88:
18:85:89:5c:ca:96:7a:e1:48:6d:31:e1:ee:33:fa:
a4:71:50:f0:69:c1:1a:1f:3c:5f:d8:b8:8f:ad:11:
0e:1e:5e:fd:d7:0e:d4:9c:24:54:e9:0e:11:4a:b0:
85:b4:41:2c:60:2a:29:20:29:e7:27:22:8b:8a:1e:
56:94:7e:af:64:4e:92:ac:9e:3b:62:60:fc:fd:00:
7e:fc:a6:d7:24:52:94:da:83:4d:85:1b:f5:30:d8:
53:b3:eb:eb:18:bd:7f:30:ff:db:f1:e7:8c:85:4b:
1f:e4:c1:ea:92:9a:03:2a:e4:fb:19:bf:71:69:15:
cc:02:b3:e2:a2:8e:3c:57:11:9c:38:4a:be:f9:79:
f3:1a:22:fa:2e:78:7f:03:e1:fc:e0:b1:a2:93:25:
53:8c:2d:98:78:8a:5f:7c:36:a6:ee:06:e4:f0:68:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:48:5F:D1:BB:B2:C7:B0:6A:1E:9B:0E:18:0D:40:FA:EA:6F:0A
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/GyhIX9G7ssewah6bDhgNQPrqbwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.244.0/22
Signature Algorithm: sha256WithRSAEncryption
28:04:5d:73:f3:e9:78:d0:ac:10:7e:b0:3c:15:c1:06:b5:3c:
eb:3c:83:d5:de:a7:23:1f:af:a4:49:8a:a8:1e:cd:98:2f:70:
f5:bf:4e:fc:aa:06:21:f9:45:cf:6e:51:c4:e8:c1:ef:24:51:
f9:dd:36:c1:a9:7b:08:3a:82:a6:9c:b3:df:9d:60:2d:1e:08:
49:00:fc:15:19:c1:25:43:48:29:f8:c8:0f:ef:52:8b:84:40:
c2:34:e0:fa:98:0e:30:cf:ca:ca:4b:c1:b2:8b:da:04:89:70:
38:ab:cf:54:06:ad:76:04:21:b0:b8:cc:39:bf:4a:43:7a:a0:
39:bd:14:32:b2:d8:93:8e:f5:60:9f:83:82:d6:31:a0:a4:95:
b1:4a:83:e4:dd:3f:42:08:3a:85:ef:94:3f:53:ae:eb:30:13:
ab:0c:4e:e0:c7:de:89:7a:00:5d:ce:a2:f0:69:81:bf:48:0f:
b4:5b:59:3c:84:60:de:1c:d2:68:32:2f:5c:61:4e:73:6f:5e:
47:c0:b6:46:7f:7f:84:3c:92:6d:24:ec:f9:48:20:f9:2b:77:
03:ca:ee:98:1d:d1:20:f8:ab:e3:a5:e2:86:6c:e9:95:ff:ac:
a4:d1:fd:ce:e2:3c:64:c1:0a:15:cf:dd:42:c3:68:1a:3c:1e:
82:48:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:16 2026 by rpki-client