This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/gGP5a4m9bqAKT7-QVYaan-KR00I.roa
File: gGP5a4m9bqAKT7-QVYaan-KR00I.roa (raw, json)
Hash identifier: mPbwa7sA/SB0OJubO3AAY0Oa/zRc0RaIx2vSZkJEB4w=
Subject key identifier: 80:63:F9:6B:89:BD:6E:A0:0A:4F:BF:90:55:86:9A:9F:E2:91:D3:42
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 019B78A309644D5A87AC04CA542848F0D49B
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/gGP5a4m9bqAKT7-QVYaan-KR00I.roa
Signing time: Thu 01 Jan 2026 08:18:29 +0000
ROA not before: Thu 01 Jan 2026 08:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50889
IP address blocks: 193.246.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:09:64:4d:5a:87:ac:04:ca:54:28:48:f0:d4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 1 08:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8063f96b89bd6ea00a4fbf9055869a9fe291d342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:70:b1:45:b8:7c:52:b4:0a:22:82:d0:92:
3f:ac:20:52:b4:42:3b:15:77:a1:f0:4e:2c:0f:00:
7b:21:fd:0c:1a:29:b9:16:d6:8e:e3:e8:ba:2d:57:
f2:57:d6:83:6d:bb:3a:61:62:d0:f5:ab:0f:e4:61:
91:95:ae:90:96:d6:55:4e:36:42:9e:03:e4:bc:97:
51:f4:bd:c1:b4:ca:6c:67:ea:5e:62:1e:a0:26:f0:
3c:0a:e3:c5:52:74:71:59:33:df:b3:2b:ed:6d:5b:
8f:29:b2:2d:e0:70:21:85:4e:28:91:87:b6:e4:2e:
c5:96:4f:48:85:46:7c:bf:c9:ad:1c:91:4d:80:25:
06:1f:68:38:b8:2f:b2:8c:15:96:72:bb:75:26:c1:
bd:9b:b8:cc:9c:1d:01:fe:52:96:76:24:2d:10:31:
e3:3d:2e:08:48:d5:d9:f3:df:12:21:72:0c:45:29:
33:59:87:c2:8d:08:cc:17:8d:ce:c0:81:7e:a4:f9:
ce:a1:12:94:18:7f:1c:75:1d:b5:b9:2d:2e:1b:bf:
e7:f0:11:5a:8a:8e:f8:a6:c7:04:be:17:ab:08:57:
80:11:c8:d7:c4:f0:62:8d:3a:92:be:47:5d:7b:55:
47:6e:68:40:dd:33:70:05:04:b4:66:42:a6:58:54:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:63:F9:6B:89:BD:6E:A0:0A:4F:BF:90:55:86:9A:9F:E2:91:D3:42
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/gGP5a4m9bqAKT7-QVYaan-KR00I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.51.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3f:38:72:68:1d:c6:3f:f0:a2:05:25:de:e6:25:ea:54:47:
e9:24:93:64:fa:8d:47:68:09:34:12:a8:01:95:cc:77:55:19:
ea:49:57:a9:a9:62:62:20:37:2b:74:81:f7:54:69:00:02:06:
72:19:15:ee:0d:e2:81:42:d6:ea:ef:9d:39:42:ed:19:2e:27:
9f:aa:ab:3c:b5:28:63:e9:c5:1a:9d:13:59:10:d3:a4:67:34:
ac:a0:30:57:cc:be:be:b5:8e:ef:60:70:20:2c:f4:38:34:6e:
8b:7a:9f:7e:55:31:fc:f7:63:a8:fc:a4:a7:4e:fa:fe:bf:93:
56:a8:0c:e7:70:a6:ca:33:21:3f:17:b9:92:0c:45:66:64:c2:
0e:90:7e:f0:0d:37:68:2f:50:61:15:79:f7:6f:4b:27:f8:d9:
9b:c7:cd:1f:62:2e:a9:ae:e7:a9:2d:69:12:69:e0:15:44:2b:
fe:28:79:29:db:ce:78:4e:13:4e:2e:97:5d:2f:16:ab:71:67:
25:60:65:d7:85:39:03:92:ea:55:e0:5d:4c:e4:11:5f:50:ba:
0a:ad:36:52:6c:a5:61:90:78:e8:a0:26:fa:8c:16:df:a9:08:
21:3c:9f:51:60:43:9a:43:cd:90:a8:90:2b:09:9b:97:f0:06:
77:c0:9d:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4owlkTVqHrATKVChI8NSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm
OGMxY2UwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDYzZjk2Yjg5YmQ2ZWEwMGE0ZmJmOTA1NTg2OWE5ZmUyOTFkMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9BwsUW4fFK0CiKC0JI/rCBStEI7
FXeh8E4sDwB7If0MGim5FtaO4+i6LVfyV9aDbbs6YWLQ9asP5GGRla6QltZVTjZC
ngPkvJdR9L3BtMpsZ+peYh6gJvA8CuPFUnRxWTPfsyvtbVuPKbIt4HAhhU4okYe2
5C7Flk9IhUZ8v8mtHJFNgCUGH2g4uC+yjBWWcrt1JsG9m7jMnB0B/lKWdiQtEDHj
PS4ISNXZ898SIXIMRSkzWYfCjQjMF43OwIF+pPnOoRKUGH8cdR21uS0uG7/n8BFa
io74pscEvherCFeAEcjXxPBijTqSvkdde1VHbmhA3TNwBQS0ZkKmWFT+6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBj+WuJvW6gCk+/kFWGmp/ikdNCMB8GA1UdIwQY
MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt
YzQ3ZTE4ZGYwMzcxLzEvZ0dQNWE0bTlicUFLVDctUVZZYWFuLUtSMDBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx
LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfYzMA0G
CSqGSIb3DQEBCwUAA4IBAQBzPzhyaB3GP/CiBSXe5iXqVEfpJJNk+o1HaAk0EqgB
lcx3VRnqSVepqWJiIDcrdIH3VGkAAgZyGRXuDeKBQtbq7505Qu0ZLiefqqs8tShj
6cUanRNZENOkZzSsoDBXzL6+tY7vYHAgLPQ4NG6Lep9+VTH892Oo/KSnTvr+v5NW
qAzncKbKMyE/F7mSDEVmZMIOkH7wDTdoL1BhFXn3b0sn+Nmbx80fYi6pruepLWkS
aeAVRCv+KHkp2854ThNOLpddLxarcWclYGXXhTkDkupV4F1M5BFfULoKrTZSbKVh
kHjooCb6jBbfqQghPJ9RYEOaQ82QqJArCZuX8AZ3wJ3d
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:59:01 2026 by rpki-client