This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa
File: GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa (raw, json)
Hash identifier: Db1fgaGn7etJ5E1mwpRZEwGFqG7OR6Nk/1MVMZkhMcg=
Subject key identifier: 1A:30:EF:1C:E4:64:D1:94:D3:91:E0:6C:C0:CA:D1:2D:56:7E:2C:B2
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019AE9B16ACBE7DD01276578765C674F1325
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa
Signing time: Thu 04 Dec 2025 14:08:29 +0000
ROA not before: Thu 04 Dec 2025 14:08:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.76.0/24 maxlen: 24
31.22.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e9:b1:6a:cb:e7:dd:01:27:65:78:76:5c:67:4f:13:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Dec 4 14:08:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a30ef1ce464d194d391e06cc0cad12d567e2cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:e1:e5:47:4c:be:f1:14:0a:77:c4:c6:7d:
a7:67:1d:49:6c:70:45:be:d0:8a:f0:8e:0d:a3:da:
24:b9:14:a4:fa:c0:b2:d0:7a:df:80:26:2a:bf:88:
77:65:a4:76:ba:3a:9e:1c:b6:8f:84:70:c5:70:44:
87:64:52:10:59:7c:bc:d5:a5:85:a2:8b:aa:c5:c2:
93:ae:d6:06:c9:4f:9f:84:f1:c9:2c:1b:75:c9:08:
1c:5d:73:70:b2:23:6f:aa:b9:33:c5:24:5f:8f:8b:
29:c4:51:0a:3c:73:7c:a9:43:90:2f:c9:2d:87:71:
b3:1d:9f:0f:cd:18:09:d2:ce:c6:a4:2a:aa:48:6f:
4d:ed:63:07:a9:07:fe:96:4d:17:7e:67:69:c6:56:
56:06:35:e0:b1:a9:30:85:6f:a9:0e:8d:27:51:31:
e0:49:be:53:22:5d:82:15:dc:c5:bc:ac:d8:70:73:
cd:69:14:a7:82:36:98:2c:c6:34:19:91:96:45:3d:
87:a6:61:0c:13:24:c9:9a:99:71:5e:f6:61:c2:aa:
b0:12:e8:78:25:f0:44:84:c3:6c:b7:71:d4:62:18:
d0:5e:56:65:41:65:20:29:d5:4e:2a:a0:a0:4f:2c:
58:71:00:89:35:66:c9:6b:31:de:67:29:34:6f:f5:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:EF:1C:E4:64:D1:94:D3:91:E0:6C:C0:CA:D1:2D:56:7E:2C:B2
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.76.0/23
Signature Algorithm: sha256WithRSAEncryption
14:44:74:87:81:84:ae:ab:15:31:49:f1:db:ab:10:15:bc:ce:
27:c6:44:4d:80:29:5e:f5:b1:77:d2:7c:2c:c2:48:a6:33:f9:
3a:cc:cd:97:6d:7d:12:a1:26:63:5d:0d:f5:24:06:e2:a0:3b:
b0:ad:fc:c5:2a:0e:91:97:76:3a:87:b7:67:a0:b3:4a:13:62:
e7:5c:1f:7f:af:88:3c:a1:ec:da:1d:db:bb:1f:e9:f6:49:5a:
e6:97:3a:a7:49:28:08:f4:4a:1e:83:6b:9a:2b:bf:29:d9:16:
fa:b2:62:ee:16:ef:b0:ad:00:c0:4b:5e:29:17:07:e1:c0:80:
37:b2:b2:ff:14:07:2e:9c:b3:2c:d1:2e:c3:61:54:1f:d9:3c:
14:ec:5e:10:dc:c7:d8:72:c4:56:85:02:2b:ec:8c:3e:d2:38:
2e:e9:a0:5f:57:ce:71:f7:6e:ed:92:8f:44:b0:e6:1e:4c:02:
7c:d9:f1:5c:7b:50:c7:22:da:44:81:32:02:8f:32:37:65:e6:
e3:24:1c:81:7a:86:34:c2:c0:81:8e:b2:29:8e:d8:2c:04:40:
09:01:f8:af:d8:f9:28:c2:fd:b8:de:7e:c1:58:95:76:09:0e:
0a:32:41:fc:cc:b2:33:9c:36:88:75:3c:8f:8c:c7:d6:6c:a4:
44:c9:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:27 2025 by rpki-client