This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/jG4WSmG-xXEWodjP13_7K7HSQG8.roa
File: jG4WSmG-xXEWodjP13_7K7HSQG8.roa (raw, json)
Hash identifier: CsZTy+c92ZJOl54ewvYtYiNxeF6FGAF7oJqgyUzk8Uk=
Subject key identifier: 8C:6E:16:4A:61:BE:C5:71:16:A1:D8:CF:D7:7F:FB:2B:B1:D2:40:6F
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 019B7834DD5E777B997A962817FC5BB9A701
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/jG4WSmG-xXEWodjP13_7K7HSQG8.roa
Signing time: Thu 01 Jan 2026 06:18:09 +0000
ROA not before: Thu 01 Jan 2026 06:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48281
IP address blocks: 185.128.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:dd:5e:77:7b:99:7a:96:28:17:fc:5b:b9:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 1 06:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c6e164a61bec57116a1d8cfd77ffb2bb1d2406f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:51:3a:f1:00:2d:bb:00:a7:78:4d:8f:32:
d3:f2:78:8c:96:5c:d3:07:cc:4e:0a:6d:2c:87:57:
bc:b5:01:ac:37:7d:32:7b:c7:88:31:20:c1:90:62:
20:48:8d:d6:b5:73:dd:0d:b0:bc:fa:96:2f:bd:2f:
1c:61:25:1f:2e:48:b5:58:fc:10:90:69:bb:7e:e9:
14:94:79:d3:fa:bd:b1:40:3e:58:b8:fa:56:d8:e6:
04:58:42:35:94:1b:0c:bb:54:0f:62:c4:d1:23:fa:
14:cf:f3:f2:0f:b5:14:d9:5b:a9:cc:7e:dd:9f:86:
23:a4:4e:2d:88:c5:a2:36:cd:46:59:ed:90:f8:91:
dc:38:2e:13:34:54:b9:4d:72:17:88:08:34:b3:c6:
cc:4e:32:0d:56:06:5a:00:7e:a6:36:e6:15:3e:78:
ae:f8:76:fe:d6:2e:60:b2:8c:26:b7:a9:8f:39:e2:
bb:d2:56:be:b9:fc:14:fe:63:1c:26:a6:fb:62:cd:
8b:92:a3:66:35:33:a0:2a:dd:93:ce:07:87:a5:f0:
99:42:b7:1d:e4:66:10:13:8b:32:ac:62:1c:6f:7f:
18:01:34:9a:e4:6b:35:db:98:25:ce:16:95:11:24:
bb:26:7b:81:10:6e:c6:2d:c2:09:92:02:ac:82:82:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:16:4A:61:BE:C5:71:16:A1:D8:CF:D7:7F:FB:2B:B1:D2:40:6F
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/jG4WSmG-xXEWodjP13_7K7HSQG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:98:61:9a:79:fc:d7:66:90:f2:1c:02:3a:f1:66:63:42:e0:
b7:b1:a4:86:f2:08:f2:50:8b:cc:fd:5e:c1:9c:2c:07:4a:05:
34:38:87:61:5b:86:a4:82:b8:9d:86:3e:31:d5:e7:18:0a:cd:
e3:a7:2c:26:0b:63:5d:4b:07:73:1a:81:98:96:0f:33:6b:c6:
48:87:6e:fc:38:60:ae:13:95:25:fa:53:7f:b5:c7:c3:2b:6c:
b5:f9:99:50:c4:00:dd:4c:6a:95:5c:72:28:86:31:25:5f:2a:
7f:2d:28:09:59:8a:5f:a9:aa:67:bd:85:b4:81:50:8f:23:fa:
64:c7:ed:7e:02:1b:fb:a4:14:cb:f5:76:88:45:5c:69:67:45:
1d:09:7e:d9:0e:dc:8d:fd:7f:7a:ec:75:eb:02:17:36:23:0f:
1d:60:33:fc:55:c4:90:2c:3a:0c:35:c9:ce:be:2d:59:66:8b:
f1:90:51:03:97:a1:2b:e4:4d:5e:f4:34:8d:1c:68:da:4b:1f:
2d:db:40:fe:3a:61:b0:98:e8:2a:96:47:00:24:cc:e8:7f:89:
ca:5c:dd:42:3c:d6:85:d3:0c:0e:a8:b6:3a:84:cf:8a:6c:1a:
99:ec:c6:c0:f5:cd:c1:ee:19:e6:93:a7:4d:e6:45:26:93:c9:
dd:fd:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:48:55 2026 by rpki-client