This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/gT51eBmH7VwiQiKc39LDpmUrWZk.roa
File: gT51eBmH7VwiQiKc39LDpmUrWZk.roa (raw, json)
Hash identifier: FAXWHOz3lVHci6J7wLN3Cpw/RKiWjTYfUoTshVCcZgc=
Subject key identifier: 81:3E:75:78:19:87:ED:5C:22:42:22:9C:DF:D2:C3:A6:65:2B:59:99
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 019B7834B0BA7984149B927D03E13ADE8ED5
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/gT51eBmH7VwiQiKc39LDpmUrWZk.roa
Signing time: Thu 01 Jan 2026 06:17:57 +0000
ROA not before: Thu 01 Jan 2026 06:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50737
IP address blocks: 193.105.111.0/24 maxlen: 24
2a03:4740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:b0:ba:79:84:14:9b:92:7d:03:e1:3a:de:8e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jan 1 06:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=813e75781987ed5c2242229cdfd2c3a6652b5999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:52:8e:43:b3:7d:68:65:bd:2a:d2:6f:89:
01:1b:3f:22:f4:5c:2b:b4:69:97:e9:ac:3f:63:51:
da:9d:4d:a3:09:6e:ab:5b:3b:ff:94:16:6a:d0:1e:
95:21:be:bc:c8:4d:32:9b:cf:71:7b:36:bc:05:b5:
5a:6b:53:dd:53:59:51:6e:c7:07:29:23:63:b5:02:
4e:c2:ab:80:a5:74:ed:2f:67:e7:1a:d3:4a:e6:c5:
80:f2:20:df:57:0d:fb:d5:33:3d:3c:b3:e7:35:e4:
9e:0f:25:f5:3f:1e:7b:ec:e2:5d:ea:5a:e3:59:52:
24:3a:f9:55:6d:10:86:f6:bc:c6:2c:51:d9:cc:e8:
01:b6:af:e1:16:97:20:c6:cc:ba:e0:26:8f:64:8b:
da:1d:b7:12:72:71:bc:e8:ac:1e:43:e3:02:d8:17:
6f:25:6c:18:b3:49:a9:b2:b4:b1:87:c1:2a:63:98:
0b:58:07:c7:fa:35:af:84:f2:2b:f5:e5:a9:34:40:
be:ab:c8:65:9d:ec:83:58:de:7b:80:ae:a9:4e:c6:
de:83:24:f9:49:0f:23:b7:5c:15:09:ba:70:50:ec:
d7:70:a6:07:3e:e7:f2:56:f8:f4:96:e6:2e:e1:90:
08:33:ac:a2:12:4b:e3:bc:fb:23:05:f8:ae:69:b0:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:75:78:19:87:ED:5C:22:42:22:9C:DF:D2:C3:A6:65:2B:59:99
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/gT51eBmH7VwiQiKc39LDpmUrWZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.111.0/24
IPv6:
2a03:4740::/32
Signature Algorithm: sha256WithRSAEncryption
89:a0:7d:81:f9:9b:54:28:b9:32:84:0e:cf:5a:e1:b3:81:10:
42:ea:e8:c6:41:a2:cb:a2:6d:b1:40:f2:c4:55:84:1c:da:95:
6e:db:ea:e0:ba:11:51:42:bb:aa:7e:83:1e:c6:b4:fc:45:78:
93:f7:e4:55:f5:6a:b8:dd:78:cd:67:45:51:ca:0b:9d:7c:aa:
01:76:53:16:2a:5a:7c:09:1e:ab:a8:35:ea:7c:27:53:2b:9d:
d4:58:92:f2:16:78:4d:b5:ef:a2:12:c0:77:96:61:74:4c:cf:
40:1d:91:23:4b:ac:b7:37:16:46:2f:9a:4e:d1:37:95:90:c5:
09:fa:71:8b:d8:7e:36:d1:24:94:a4:fa:85:17:fe:2f:0d:b3:
6c:b7:58:b8:4e:62:17:84:56:61:26:8a:e5:f2:d7:61:94:55:
5f:e2:5e:07:b4:84:95:d3:c3:e4:df:46:53:87:d0:c2:f9:9f:
e0:fa:82:28:ec:e4:ce:03:35:1e:df:f8:11:da:4d:29:7e:ee:
c5:f5:ac:99:c5:c0:31:c1:b9:b0:f7:40:b4:36:c8:40:81:f4:
21:31:21:d0:55:57:28:f5:fe:fb:ac:06:06:f4:9f:83:e7:27:
0d:77:17:05:28:d2:50:85:40:bb:90:67:b2:f8:a8:9c:fd:55:
26:ec:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:49 2026 by rpki-client