This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/Gf7lU_Sk5Y4hQW5uJobfq5qbd-g.roa
File: Gf7lU_Sk5Y4hQW5uJobfq5qbd-g.roa (raw, json)
Hash identifier: 7A1GTsJbZzCBO8fZOhHeSTwon1kGffXk7Ew7vArc6aY=
Subject key identifier: 19:FE:E5:53:F4:A4:E5:8E:21:41:6E:6E:26:86:DF:AB:9A:9B:77:E8
Certificate issuer: /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial: 019B7A5B2EC8C7C964FB5E78E032A995F8DD
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/Gf7lU_Sk5Y4hQW5uJobfq5qbd-g.roa
Signing time: Thu 01 Jan 2026 16:19:14 +0000
ROA not before: Thu 01 Jan 2026 16:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44336
IP address blocks: 195.93.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:2e:c8:c7:c9:64:fb:5e:78:e0:32:a9:95:f8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Validity
Not Before: Jan 1 16:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19fee553f4a4e58e21416e6e2686dfab9a9b77e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:d8:a2:7f:9c:62:7e:53:9f:4a:92:58:1a:
dd:4e:6b:1a:46:8f:af:a7:60:51:aa:06:04:20:0e:
a7:b8:70:65:c7:d8:d4:10:3e:e6:26:ec:27:98:63:
84:9f:1c:66:f0:b3:e4:7b:d5:e5:6f:9a:61:eb:02:
f7:a6:d5:1f:c5:82:3e:f8:d8:13:ac:ea:be:93:8e:
7e:48:f5:77:7e:21:6f:ec:73:9d:b7:45:e5:97:65:
4f:e6:b0:c4:3a:b6:ed:40:5b:33:20:7e:dc:18:6c:
69:11:30:e5:0c:0c:14:a1:e6:de:ee:e3:0b:4e:da:
e7:11:79:ad:c6:7f:16:66:d2:4d:e5:03:8f:93:26:
94:9b:ae:1c:bc:e6:37:32:f1:fe:3d:b6:9f:59:bd:
e6:1a:2e:92:df:76:93:f4:ca:e9:a5:97:50:68:1a:
72:8b:e4:bd:58:80:05:bf:8d:f2:e0:2a:a2:10:1a:
b3:c0:50:0a:6d:62:71:c6:ab:56:2a:00:9b:39:59:
fc:9d:6e:23:88:01:d0:59:a3:57:d5:6a:31:75:f8:
b2:a1:31:57:f0:8a:2b:0b:40:f6:c4:bb:a7:2e:a5:
88:2e:86:31:b2:b8:97:20:57:37:96:b4:ad:e7:7e:
b8:54:a1:92:dd:98:03:22:30:4b:79:cb:6a:98:a8:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:E5:53:F4:A4:E5:8E:21:41:6E:6E:26:86:DF:AB:9A:9B:77:E8
X509v3 Authority Key Identifier:
keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/Gf7lU_Sk5Y4hQW5uJobfq5qbd-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.204.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:8d:eb:fa:85:cd:de:d6:ba:be:15:ce:2a:d9:e7:11:9a:b8:
5f:ee:75:33:0b:d4:76:91:cd:bb:2c:0a:36:24:73:86:a1:9b:
20:f6:cf:1c:64:66:4b:51:8b:5e:32:a9:90:7b:51:fc:0b:c9:
9e:37:2a:74:4a:b0:05:e8:3b:76:75:69:36:42:d2:c7:d8:89:
e4:60:55:59:ef:fe:04:1d:6f:03:1f:ac:da:c1:75:e3:d6:96:
4c:20:b8:3a:d1:b7:63:22:a6:65:c9:0f:58:18:b2:13:d9:08:
a1:8d:80:38:a7:44:79:db:ae:fd:4e:34:0c:b0:0c:e5:53:4e:
55:63:2a:7d:42:e9:fa:47:16:d2:30:50:c1:a3:6c:83:97:36:
58:a8:54:e3:73:c7:ef:2e:30:89:00:cc:06:37:21:7f:9a:14:
92:77:1f:3b:93:3a:42:94:2e:99:7b:9b:e0:a6:4a:98:b0:e7:
92:23:48:8e:89:49:cb:ee:68:ad:37:f9:1d:4c:68:3d:82:ab:
94:5b:fd:75:1d:69:0b:5d:70:99:c8:be:d3:38:6f:6a:c5:8b:
a0:e6:67:0e:9c:79:a8:35:d0:71:60:73:bf:e3:8e:f7:d6:dd:
f6:bf:74:4f:83:c5:ff:cd:5a:8b:22:13:d2:3a:c7:99:61:d1:
0c:3c:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:11 2026 by rpki-client