This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa
File: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (raw, json)
Hash identifier: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=
Subject key identifier: 82:C9:86:8A:E0:5C:BF:41:F6:74:D3:32:CE:A1:98:96:F3:19:80:1F
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019B7D5C99284B3CEA888B167A720B04BF65
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa
Signing time: Fri 02 Jan 2026 06:19:38 +0000
ROA not before: Fri 02 Jan 2026 06:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 84.19.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:99:28:4b:3c:ea:88:8b:16:7a:72:0b:04:bf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 06:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82c9868ae05cbf41f674d332cea19896f319801f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:89:a7:cd:13:e4:4e:3b:7d:36:39:2b:87:
6a:af:ad:a6:13:8a:1a:f0:b0:b9:9e:e7:20:f5:3b:
d4:62:3e:a3:12:5e:52:1d:4b:10:2c:ad:1c:ba:4c:
fc:19:2b:62:db:15:22:cd:58:73:25:9b:c6:55:4a:
cc:87:31:01:33:ad:40:f3:d9:89:7c:1c:4f:17:5b:
ac:cc:79:88:87:df:c4:a6:a6:08:49:aa:70:ec:b5:
fc:d0:b6:58:8b:44:3e:af:08:24:cc:d8:4d:1f:77:
19:6b:10:51:37:36:fe:62:55:76:28:dc:34:19:5c:
ef:8e:80:e6:c9:bf:5e:b6:c7:fd:c1:69:b0:7a:04:
0e:5b:b7:89:6a:e8:8e:3c:98:91:6a:ec:78:18:af:
73:0d:74:bf:b3:64:14:15:68:38:ba:80:4d:94:74:
81:c6:18:d8:6d:c2:b8:f4:70:56:6a:16:aa:70:6c:
a2:66:59:fe:15:18:36:9e:7c:05:22:bb:4b:7c:26:
3a:e4:39:d3:f2:d7:f8:d3:f3:46:1f:6d:68:40:83:
df:83:87:4f:94:dc:96:b8:4f:e0:70:d1:9c:da:b7:
d8:e4:89:89:bc:e4:8e:84:78:70:0e:34:44:97:ca:
7b:ba:de:49:5a:9e:22:21:bd:ea:78:a1:cf:51:d3:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:86:8A:E0:5C:BF:41:F6:74:D3:32:CE:A1:98:96:F3:19:80:1F
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.3.0/24
Signature Algorithm: sha256WithRSAEncryption
48:93:36:0f:cb:11:07:28:90:aa:21:f9:d6:ff:df:72:63:90:
d8:cc:1e:78:71:ec:a0:ec:9e:34:ae:e4:4e:09:9e:f2:8c:cc:
00:3d:da:7b:10:dd:5d:78:5c:d5:99:05:e4:9f:29:df:82:c6:
03:6f:ca:0c:66:07:02:c4:f1:0a:40:7e:9e:09:95:31:2d:dc:
2c:03:72:dd:43:bd:e7:e0:96:fa:31:09:a9:63:c8:42:3a:6b:
21:99:3a:30:7d:22:fc:b2:ed:26:bc:81:c5:f9:47:e8:e0:c5:
30:09:29:c1:37:99:a8:0a:fa:56:54:3d:27:b6:3e:f4:ff:8a:
0a:48:8d:70:7b:ee:45:6d:c6:cc:d0:86:dd:66:3d:61:82:5b:
0a:bc:47:40:d2:bf:f9:e0:b0:00:e5:ac:6d:9e:20:53:b6:27:
bf:6c:8c:af:89:5b:f0:e4:6c:5b:f8:fe:cb:e5:68:6e:44:43:
0f:18:c9:80:92:a1:82:6d:dd:3d:17:ef:23:3c:0a:ac:40:7c:
b1:a3:ae:88:a4:08:09:42:bf:81:fe:b5:ff:04:a1:1b:01:9d:
87:21:4d:3e:94:e7:ac:5b:02:8f:72:8f:30:d0:fb:8c:62:21:
37:e8:1d:d5:c2:46:ec:63:4f:aa:a7:77:2e:14:e5:2b:83:b2:
05:d8:c1:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XJkoSzzqiIsWenILBL9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh
N2U1NjYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmM5ODY4YWUwNWNiZjQxZjY3NGQzMzJjZWExOTg5NmYzMTk4MDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRyJp80T5E47fTY5K4dqr62mE4oa
8LC5nucg9TvUYj6jEl5SHUsQLK0cukz8GSti2xUizVhzJZvGVUrMhzEBM61A89mJ
fBxPF1uszHmIh9/EpqYISapw7LX80LZYi0Q+rwgkzNhNH3cZaxBRNzb+YlV2KNw0
GVzvjoDmyb9etsf9wWmwegQOW7eJauiOPJiRaux4GK9zDXS/s2QUFWg4uoBNlHSB
xhjYbcK49HBWahaqcGyiZln+FRg2nnwFIrtLfCY65DnT8tf40/NGH21oQIPfg4dP
lNyWuE/gcNGc2rfY5ImJvOSOhHhwDjREl8p7ut5JWp4iIb3qeKHPUdNNhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFILJhorgXL9B9nTTMs6hmJbzGYAfMB8GA1UdIwQY
MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt
OTRlZmJmNWNlY2Q0LzEvZ3NtR2l1QmN2MEgyZE5NeXpxR1lsdk1aZ0I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0
LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBMDMA0G
CSqGSIb3DQEBCwUAA4IBAQBIkzYPyxEHKJCqIfnW/99yY5DYzB54ceyg7J40ruRO
CZ7yjMwAPdp7EN1deFzVmQXknynfgsYDb8oMZgcCxPEKQH6eCZUxLdwsA3LdQ73n
4Jb6MQmpY8hCOmshmTowfSL8su0mvIHF+Ufo4MUwCSnBN5moCvpWVD0ntj70/4oK
SI1we+5FbcbM0IbdZj1hglsKvEdA0r/54LAA5axtniBTtie/bIyviVvw5Gxb+P7L
5WhuREMPGMmAkqGCbd09F+8jPAqsQHyxo66IpAgJQr+B/rX/BKEbAZ2HIU0+lOes
WwKPco8w0PuMYiE36B3VwkbsY0+qp3cuFOUrg7IF2MHJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:59 2026 by rpki-client