This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/1dPG2pffi4K4-5OsBGPNtLYur7s.roa
File: 1dPG2pffi4K4-5OsBGPNtLYur7s.roa (raw, json)
Hash identifier: 9Fs/6pdtkOi4l1U0P5hZKI0rV4tLgfeKeJ0JtT1xy1k=
Subject key identifier: D5:D3:C6:DA:97:DF:8B:82:B8:FB:93:AC:04:63:CD:B4:B6:2E:AF:BB
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 019AC0D3796F2710C7FE61EFF204A7A3C94F
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/1dPG2pffi4K4-5OsBGPNtLYur7s.roa
Signing time: Wed 26 Nov 2025 15:41:15 +0000
ROA not before: Wed 26 Nov 2025 15:41:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207431
IP address blocks: 185.190.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:c0:d3:79:6f:27:10:c7:fe:61:ef:f2:04:a7:a3:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Nov 26 15:41:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5d3c6da97df8b82b8fb93ac0463cdb4b62eafbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:78:3a:a1:ca:37:f4:30:1f:16:8c:7b:82:99:
93:50:87:a8:f9:3c:1b:5c:ca:7e:30:6f:b7:73:39:
ad:07:13:f5:f5:91:25:6e:28:9f:22:7b:6d:6b:f6:
2b:b9:1a:ae:6f:29:f1:64:c6:f4:04:73:d3:0f:74:
0d:17:cc:bc:de:87:47:37:23:5f:f4:52:9a:97:23:
76:15:ec:f1:74:71:04:af:aa:31:03:b7:1e:6f:fd:
3c:d7:4e:cc:40:63:12:d1:8d:b0:66:8f:4a:63:72:
24:32:89:ac:1f:8f:f2:39:6f:84:cf:4b:a7:c6:12:
6c:d3:9e:64:10:fc:17:c0:19:65:f6:47:93:76:03:
71:91:8d:84:32:86:fc:42:41:b3:62:6b:40:ec:77:
47:09:f9:22:cc:67:80:e8:57:7b:48:0e:9a:da:6d:
dc:ef:bd:f3:db:42:60:ce:6b:c6:a7:fe:67:22:57:
09:a2:31:f5:fe:3b:dd:05:3e:3b:5d:c9:45:e5:43:
5f:10:08:59:8c:ac:5e:1d:49:f7:fd:1f:62:61:5a:
6a:88:44:84:91:84:36:60:3b:f6:d4:80:4a:d2:15:
ca:24:f0:c7:bc:4f:4a:9e:57:2f:6a:f0:81:7f:35:
cf:c7:44:ba:d2:1d:46:1a:1d:25:d1:35:1e:0e:32:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:C6:DA:97:DF:8B:82:B8:FB:93:AC:04:63:CD:B4:B6:2E:AF:BB
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/1dPG2pffi4K4-5OsBGPNtLYur7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.31.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3b:7e:c1:ec:d4:99:0f:8e:d9:d3:a1:52:48:a9:69:52:ea:
1f:fc:3d:d0:3b:11:b9:df:cf:4b:9d:0c:8c:6d:e1:4c:02:f7:
35:8b:2f:87:11:b4:9d:88:c4:66:bb:48:ee:18:7b:56:1f:e2:
79:f9:69:ff:28:5e:8a:90:92:30:de:5d:55:56:fd:2b:2b:fd:
99:b0:53:f1:f7:16:b1:43:5b:4b:e4:a8:65:30:aa:ce:0f:84:
ba:f7:d3:f4:49:8d:f0:b6:9e:7e:d7:73:6a:d2:19:83:5e:2a:
32:13:c0:99:8e:35:85:bc:03:41:18:43:4e:c4:35:e1:1f:a7:
88:aa:e3:ea:23:11:db:a5:76:a3:9b:89:9e:57:3d:2d:00:ed:
0f:da:4e:23:8a:40:15:17:f3:e0:aa:bc:85:48:00:52:be:47:
f0:38:db:e9:d4:f5:2d:f6:5d:8a:ae:f6:2a:a4:4a:b0:f4:b0:
cd:10:ee:8a:0e:10:fc:05:f4:21:cd:60:32:5b:c2:f0:a1:3d:
61:c1:63:1d:f4:42:ea:1d:42:4b:4c:74:60:a0:8c:fe:08:86:
98:0f:43:2b:01:51:98:31:0d:b9:29:e4:d0:1c:aa:50:57:bb:
56:84:79:f4:b0:93:f0:33:b5:1d:e0:e4:f7:04:5d:10:82:f0:
03:b3:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:05:31 2025 by rpki-client