This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/gvs0UvHWJjRzgW_Syd97phf7MKo.roa
File: gvs0UvHWJjRzgW_Syd97phf7MKo.roa (raw, json)
Hash identifier: fexk3vqFl5jqXokxQAei7fGYBfpuoLUr1xwGug2Wu34=
Subject key identifier: 82:FB:34:52:F1:D6:26:34:73:81:6F:D2:C9:DF:7B:A6:17:FB:30:AA
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019B7C11EA0D90635F7522B2F3107EBB22E3
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/gvs0UvHWJjRzgW_Syd97phf7MKo.roa
Signing time: Fri 02 Jan 2026 00:18:27 +0000
ROA not before: Fri 02 Jan 2026 00:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30885
IP address blocks: 91.212.110.0/24 maxlen: 24
178.216.11.0/24 maxlen: 24
194.102.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:ea:0d:90:63:5f:75:22:b2:f3:10:7e:bb:22:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jan 2 00:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82fb3452f1d6263473816fd2c9df7ba617fb30aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:fb:8c:d1:74:3f:bf:11:b1:14:be:57:0b:
9b:72:70:da:7a:b6:09:f2:be:68:bc:98:be:df:1b:
d6:8f:b5:c2:b8:41:fd:33:2b:28:71:03:3e:5c:4f:
bf:c1:78:30:be:39:dc:7a:64:d5:5e:95:ec:c7:55:
bf:c6:5b:bf:29:d5:d9:fc:3a:cc:48:fa:82:d1:e3:
c2:42:3e:d4:cb:2f:1f:a4:a8:bc:cb:17:ef:11:61:
80:22:63:63:d9:f0:4e:62:bf:23:a6:6d:b6:4e:9f:
71:00:af:78:43:fd:da:3d:0e:b2:77:6f:1a:cb:32:
c5:f8:31:48:2d:5d:62:12:6f:1a:2e:bc:30:7f:6c:
54:bd:7c:bd:ea:99:e4:a4:08:6b:52:01:6c:b8:08:
f5:1e:7f:c9:23:59:58:08:79:e8:f1:52:f4:0a:54:
e3:4f:63:6b:88:fe:45:63:54:b2:b5:76:84:82:0c:
37:bf:4a:20:b6:e3:66:b2:a3:c5:b6:34:22:2b:af:
d1:81:bb:47:58:72:b4:dd:f0:0b:e5:75:b1:95:b2:
f7:59:e2:67:0c:d0:99:98:2d:3e:fe:d5:e9:bd:a6:
ef:a5:0e:68:c6:ac:57:e2:fd:f9:6f:02:e2:c3:58:
f0:ad:f3:52:92:4b:4c:dd:08:2e:84:7f:08:25:57:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FB:34:52:F1:D6:26:34:73:81:6F:D2:C9:DF:7B:A6:17:FB:30:AA
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/gvs0UvHWJjRzgW_Syd97phf7MKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.110.0/24
178.216.11.0/24
194.102.208.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:00:97:6f:54:dd:f1:78:53:90:dc:8f:03:6f:ba:3d:14:
63:93:05:e8:3e:ab:2c:ff:c7:c1:89:da:4f:04:ae:12:83:3a:
c2:de:08:9d:b9:ff:05:a2:d8:40:58:12:ef:f1:5a:80:81:45:
43:7c:c6:d9:ad:43:67:84:40:b5:43:31:0f:64:65:b0:99:13:
35:02:ba:27:8f:39:79:a8:a6:8e:01:a7:bc:14:2d:e5:87:d7:
3d:e5:01:71:c7:8a:59:a5:44:97:21:15:0d:13:3f:c5:25:4c:
89:c0:bd:85:0f:da:e8:fc:7a:a3:30:d8:b5:ac:bc:f6:93:32:
7f:e1:ef:d0:46:7a:2b:67:e2:71:52:1d:8f:2d:23:f0:aa:8f:
a0:17:be:6d:c7:2e:b7:bf:ad:95:9f:7c:7c:d6:69:bb:98:35:
6e:fb:f6:81:5d:cf:dc:49:ec:dc:62:64:f1:da:71:80:6d:08:
44:9a:a8:e8:28:91:19:ec:fc:0c:c9:a1:22:e2:3d:f7:39:f1:
78:5b:3c:ff:54:83:b8:a6:8d:47:9b:26:04:4e:90:aa:b9:af:
86:62:bb:7d:6d:b2:50:85:4f:38:5a:73:ca:f1:ba:66:7d:0f:
70:9f:73:f8:75:9d:66:bf:85:54:e6:f6:60:10:9a:26:09:39:
08:33:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:57:43 2026 by rpki-client