This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/gs33457HrytGNraew7JyyH9-pVE.roa
File: gs33457HrytGNraew7JyyH9-pVE.roa (raw, json)
Hash identifier: zCAnu9J9yeWGBo1p4no2ccDB+d1jvhqIfXLFfwE1F0o=
Subject key identifier: 82:CD:F7:E3:9E:C7:AF:2B:46:36:B6:9E:C3:B2:72:C8:7F:7E:A5:51
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 019B7A5B202F548C537F60EE3EA56A478A6A
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/gs33457HrytGNraew7JyyH9-pVE.roa
Signing time: Thu 01 Jan 2026 16:19:10 +0000
ROA not before: Thu 01 Jan 2026 16:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47333
IP address blocks: 213.108.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:20:2f:54:8c:53:7f:60:ee:3e:a5:6a:47:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 16:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82cdf7e39ec7af2b4636b69ec3b272c87f7ea551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:6e:63:f0:2e:51:a4:65:4b:f9:88:08:90:
c0:f4:ec:d4:cd:be:28:d0:61:f8:8b:95:3f:01:b4:
09:11:15:62:8d:81:6d:62:76:47:fa:e1:d9:d2:d4:
e8:92:30:30:d1:4d:21:6c:82:8a:0c:4a:b2:52:62:
96:84:0f:5b:c0:7c:da:1b:1b:b5:39:ce:84:2f:8e:
56:9a:6d:09:4b:fb:1a:58:9e:63:bc:af:34:af:f0:
db:a3:18:f2:93:2b:70:cf:07:6c:a7:7d:30:17:75:
e4:69:19:d6:70:9a:7f:1e:83:72:ab:32:a6:ce:fb:
e2:cf:40:cb:c1:91:96:36:e0:48:77:b4:2d:f2:85:
ba:d2:d8:48:fb:99:50:a4:d3:8b:a6:d8:35:eb:8b:
f8:94:b9:e4:d8:17:c3:aa:1b:c6:a3:19:bb:15:42:
2c:6c:bd:01:6a:dd:61:ba:51:4a:8b:bb:d2:36:e0:
80:99:e5:31:a4:a9:6c:c0:27:2f:e5:58:fa:35:65:
76:1b:3a:54:44:52:5a:47:a8:85:11:de:bb:a0:e1:
5a:dc:4a:c8:d7:dd:63:43:91:56:56:19:d6:33:20:
1b:ce:d7:fc:33:01:98:81:bb:1d:d0:38:d8:5c:6b:
83:c1:fa:db:7b:b4:85:f0:56:9f:9e:68:42:67:3b:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:F7:E3:9E:C7:AF:2B:46:36:B6:9E:C3:B2:72:C8:7F:7E:A5:51
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/gs33457HrytGNraew7JyyH9-pVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.32.0/21
Signature Algorithm: sha256WithRSAEncryption
27:ef:59:80:59:0d:4d:16:8e:49:cf:aa:7f:c2:35:7d:28:58:
fd:f7:2c:e9:95:90:92:8a:db:0a:cf:01:c5:13:32:6c:1c:67:
00:8b:12:f4:fc:2c:86:57:aa:f0:8c:f3:fc:04:0a:22:42:f9:
19:ad:0c:96:08:e0:e7:54:b8:47:0a:d0:37:c3:d8:65:b0:b3:
8a:cc:72:7f:4a:30:46:71:1d:6f:8b:5b:c4:7b:e4:cc:37:c3:
bd:09:95:2b:7a:49:2a:01:3b:f4:cd:24:87:7f:b7:e8:f8:1d:
47:c0:cf:09:a2:9f:18:5b:0b:19:59:d8:d3:5f:3d:ba:1d:6d:
4d:36:e6:50:c0:92:27:d5:70:71:5b:ec:c7:27:b0:7f:65:10:
b3:ad:5b:0c:c1:52:bf:7f:ec:31:11:28:7d:b4:e6:6a:07:5e:
7d:0e:2a:9f:31:c7:88:18:e2:12:e0:8b:f4:96:46:ba:25:c1:
59:e2:4d:1c:8c:63:7b:02:17:42:89:b1:6c:e8:9a:b6:16:3d:
7c:f8:bf:d6:58:29:5e:6c:52:f5:14:2c:0a:6c:3c:25:41:c7:
fc:31:6a:23:a8:84:22:8e:65:5c:9c:e4:d2:89:0b:ed:04:5b:
77:1b:9e:32:5c:c6:29:d0:df:eb:1f:9c:4b:b9:cb:c5:4c:a8:
be:26:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:14:44 2026 by rpki-client