This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/GSCpplFtfkTN5C3emWdSBHM2s_U.roa
File: GSCpplFtfkTN5C3emWdSBHM2s_U.roa (raw, json)
Hash identifier: uafjHLArE68enYzHEZipyUcJy+2TVAQsxPWk3VzbutI=
Subject key identifier: 19:20:A9:A6:51:6D:7E:44:CD:E4:2D:DE:99:67:52:04:73:36:B3:F5
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 019B7CEE5E576EC57A910560483352F8F0CF
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/GSCpplFtfkTN5C3emWdSBHM2s_U.roa
Signing time: Fri 02 Jan 2026 04:19:15 +0000
ROA not before: Fri 02 Jan 2026 04:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28717
IP address blocks: 194.50.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:5e:57:6e:c5:7a:91:05:60:48:33:52:f8:f0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jan 2 04:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1920a9a6516d7e44cde42dde996752047336b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:b9:00:40:fa:d6:02:1b:70:17:8c:c5:ac:
e6:5e:2f:b0:47:45:96:c2:df:be:ed:cd:28:8a:62:
2b:0c:5e:a7:44:30:09:4b:29:9f:ed:2c:b8:5d:c4:
ba:b3:04:04:b1:4c:3e:4a:2f:74:84:aa:f6:31:30:
16:5a:48:02:8b:8f:e7:d9:9f:41:b9:de:c5:9b:29:
53:9c:1d:f2:b3:0b:9e:b4:bb:d3:60:8d:89:7a:5f:
c0:de:ab:bd:92:4b:ea:37:b2:30:13:44:85:f7:6f:
46:b0:21:be:af:c7:77:ff:0c:27:6f:b5:21:7a:8d:
51:c4:db:6c:c2:72:34:7a:5c:ba:58:e2:c0:b0:bc:
1a:75:e9:04:46:b3:d5:9c:47:57:aa:d0:fa:85:88:
3a:f7:e0:a8:7a:a4:aa:e6:00:86:43:d6:12:e0:65:
42:3f:81:a3:72:d6:ca:70:7a:46:9d:5c:df:32:62:
9e:ac:9c:2f:bf:63:0c:6e:91:ea:d2:c8:ef:6d:2c:
1e:7f:28:5b:91:c2:ba:be:ee:86:7e:bc:16:4c:22:
34:04:b2:46:df:9c:f4:e5:3d:a2:8b:71:34:83:57:
d8:3f:fd:ed:bd:46:b6:f4:71:19:36:01:58:a3:b9:
5a:85:84:55:ee:27:81:11:f0:3d:e0:dc:a9:09:f0:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:A9:A6:51:6D:7E:44:CD:E4:2D:DE:99:67:52:04:73:36:B3:F5
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/GSCpplFtfkTN5C3emWdSBHM2s_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b9:d3:25:3d:a5:3e:24:cc:c6:a9:e9:be:e1:d4:3f:0a:3d:
d6:e6:fa:d2:3c:b6:4b:0d:75:f8:92:8a:00:ab:38:11:fe:e4:
99:26:0b:cd:7b:94:7b:e4:e5:f1:7b:ee:4a:20:a4:1d:2c:59:
fd:86:91:a4:0d:46:75:1c:99:c7:61:f6:7e:af:a0:e1:ad:5c:
34:bd:c1:d3:19:0a:e4:21:9b:b4:9f:db:65:7c:62:52:ca:34:
82:fe:d3:d7:13:a2:a8:ef:01:99:96:0a:9c:6d:57:b4:64:84:
17:66:a5:44:a8:b0:b1:87:a4:fe:91:a5:82:74:9c:47:a1:54:
55:d5:76:9e:b7:80:40:98:06:6d:d0:e3:28:35:d4:a8:f0:16:
4c:2b:d2:b3:7c:78:a0:98:16:52:fe:a8:2f:2b:d4:31:2b:e0:
b6:01:44:9d:e7:33:80:7a:05:ba:ed:0c:89:9e:b6:fd:7f:55:
7c:cb:e0:7d:be:db:82:da:92:c2:3a:bc:ab:22:4b:7a:23:6a:
60:f4:3f:da:38:55:5f:01:18:bf:e6:21:54:69:0e:cc:c0:5b:
6a:77:ad:ec:66:38:70:3a:23:5c:45:21:78:7e:53:ad:c7:6d:
03:83:e2:85:68:c2:c1:87:31:e6:f2:b1:14:2a:a6:0c:c8:5d:
8f:5a:54:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87l5XbsV6kQVgSDNS+PDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzJjMDhmNzRkMmE4NDJhNzFmMjNhYjYxNDk5YjUyNjk0
ZmM3YTUwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTIwYTlhNjUxNmQ3ZTQ0Y2RlNDJkZGU5OTY3NTIwNDczMzZiM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Um5AED61gIbcBeMxazmXi+wR0WW
wt++7c0oimIrDF6nRDAJSymf7Sy4XcS6swQEsUw+Si90hKr2MTAWWkgCi4/n2Z9B
ud7FmylTnB3yswuetLvTYI2Jel/A3qu9kkvqN7IwE0SF929GsCG+r8d3/wwnb7Uh
eo1RxNtswnI0ely6WOLAsLwadekERrPVnEdXqtD6hYg69+CoeqSq5gCGQ9YS4GVC
P4GjctbKcHpGnVzfMmKerJwvv2MMbpHq0sjvbSwefyhbkcK6vu6GfrwWTCI0BLJG
35z05T2ii3E0g1fYP/3tvUa29HEZNgFYo7lahYRV7ieBEfA94NypCfArSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkgqaZRbX5EzeQt3plnUgRzNrP1MB8GA1UdIwQY
MBaAFABywI900qhCpx8jq2FJm1JpT8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhMQWozVFNxRUtuSHlPcllVbWJVbWxQeDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYt
NjY3ZDY2NDY5Y2Q5LzEvR1NDcHBsRnRma1RONUMzZW1XZFNCSE0yc19VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYtNjY3ZDY2NDY5Y2Q5
LzEvQUhMQWozVFNxRUtuSHlPcllVbWJVbWxQeDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjI5MA0G
CSqGSIb3DQEBCwUAA4IBAQAKudMlPaU+JMzGqem+4dQ/Cj3W5vrSPLZLDXX4kooA
qzgR/uSZJgvNe5R75OXxe+5KIKQdLFn9hpGkDUZ1HJnHYfZ+r6DhrVw0vcHTGQrk
IZu0n9tlfGJSyjSC/tPXE6Ko7wGZlgqcbVe0ZIQXZqVEqLCxh6T+kaWCdJxHoVRV
1Xaet4BAmAZt0OMoNdSo8BZMK9KzfHigmBZS/qgvK9QxK+C2AUSd5zOAegW67QyJ
nrb9f1V8y+B9vtuC2pLCOryrIkt6I2pg9D/aOFVfARi/5iFUaQ7MwFtqd63sZjhw
OiNcRSF4flOtx20Dg+KFaMLBhzHm8rEUKqYMyF2PWlS5
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:22:57 2026 by rpki-client