This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa
File: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (raw, json)
Hash identifier: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=
Subject key identifier: 1B:08:01:98:09:F7:CC:CB:C1:49:6C:24:64:D0:B4:B3:66:FB:3A:D7
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 019B7BA31AAEA7F83BA896A18FE160D761C7
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa
Signing time: Thu 01 Jan 2026 22:17:25 +0000
ROA not before: Thu 01 Jan 2026 22:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60790
IP address blocks: 37.153.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:1a:ae:a7:f8:3b:a8:96:a1:8f:e1:60:d7:61:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 22:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b08019809f7cccbc1496c2464d0b4b366fb3ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:03:44:c0:e9:cf:55:f1:4a:34:fa:98:82:
48:8e:e0:0f:0a:e1:4c:0c:ed:cc:f1:bd:0d:db:78:
15:bb:ac:39:6b:37:65:75:cc:8e:f9:04:89:f3:95:
12:38:a6:c0:4a:ad:79:8d:c6:a7:6b:e8:7d:14:13:
ea:29:30:3f:ad:61:bd:09:d5:78:5f:6b:c7:24:65:
f3:5a:34:d3:2f:7c:d0:65:56:f2:df:7d:d4:3a:1e:
62:51:b1:8e:2e:5e:8c:c6:5a:aa:1d:55:75:b8:19:
ff:59:77:42:e7:68:55:d7:a9:0c:cd:e9:70:8d:68:
5b:d8:20:c1:57:8d:22:63:36:31:c0:be:a2:5c:eb:
c4:a1:ee:c6:cc:0e:91:43:fd:63:28:a8:96:f3:fd:
ee:35:43:91:85:36:14:4b:28:50:70:97:cf:9a:d7:
8f:e3:a6:4a:90:83:a0:09:86:b7:21:e1:cf:15:65:
a4:91:15:26:fa:53:db:17:71:f9:80:ca:ff:f7:39:
31:4a:12:fd:e0:a4:ac:3b:08:98:da:2b:31:82:a7:
48:d7:97:c2:0d:2d:73:24:6a:d4:34:51:56:2a:9d:
77:81:e0:bb:08:57:58:ba:ba:24:e2:2f:dd:57:7a:
02:d3:a1:e8:8f:36:10:7c:f2:9e:62:7b:4f:6d:c1:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:01:98:09:F7:CC:CB:C1:49:6C:24:64:D0:B4:B3:66:FB:3A:D7
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:42:a6:15:7d:39:cf:81:ad:46:ac:1e:a2:33:22:6d:72:33:
c8:41:bf:fd:df:9c:63:04:20:c0:3c:d3:9e:70:b9:7c:bc:e7:
ae:cc:35:8d:9e:eb:61:f2:2f:3e:16:5b:9c:3d:84:42:3d:ac:
47:83:4e:46:84:11:a0:15:bc:a7:84:d2:65:a9:62:4f:38:32:
64:47:79:1d:32:4b:2a:90:69:fe:81:f0:7c:a0:8f:ea:b4:e7:
df:f6:bd:6d:75:f8:dc:cc:6e:e6:e0:a3:41:d1:05:d7:bf:53:
e2:50:43:ad:ee:3d:1f:4d:01:3e:4f:12:12:a9:ca:29:9d:f1:
55:7d:81:3d:a0:b2:b7:6b:37:7c:c5:8d:90:ba:07:3e:7a:27:
0b:73:f9:34:5b:43:d9:05:0b:e2:af:b3:87:90:a8:77:e6:20:
a9:37:d4:d6:04:c8:96:56:d1:11:07:1f:a3:5e:fc:cc:2f:8f:
d9:8e:ed:6b:ce:47:e8:06:b6:78:c5:27:f6:0e:00:17:02:b5:
de:26:aa:1e:5d:fd:9a:dc:e6:64:00:82:35:26:e7:6e:23:1c:
32:52:64:69:85:43:58:38:c5:5c:19:9b:81:da:51:a7:0a:11:
e0:5c:e5:c0:f5:37:30:65:d6:26:69:91:e9:a6:55:4a:88:d4:
74:ff:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:41:35 2026 by rpki-client