This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GrG7vPu708RcvR9EyQrpPJIP9FA.roa
File: GrG7vPu708RcvR9EyQrpPJIP9FA.roa (raw, json)
Hash identifier: wSkBFPUkGNeEscBpQyvJ2k6O4BBwKNzgZko0/pGwIN8=
Subject key identifier: 1A:B1:BB:BC:FB:BB:D3:C4:5C:BD:1F:44:C9:0A:E9:3C:92:0F:F4:50
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 019B7B36065867188E0CE0A175407C984C6F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GrG7vPu708RcvR9EyQrpPJIP9FA.roa
Signing time: Thu 01 Jan 2026 20:18:16 +0000
ROA not before: Thu 01 Jan 2026 20:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41043
IP address blocks: 89.45.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:06:58:67:18:8e:0c:e0:a1:75:40:7c:98:4c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 20:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ab1bbbcfbbbd3c45cbd1f44c90ae93c920ff450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:46:33:5d:dc:ba:07:e5:f2:71:6b:8a:df:
2f:86:8e:c1:97:55:8c:00:9c:21:b5:28:cc:53:3e:
53:18:91:b9:52:66:41:ee:8f:2d:10:20:9e:73:12:
c3:f4:d3:02:44:7c:7f:ea:ad:d6:8a:81:70:bc:2f:
4b:bd:d6:2c:40:54:72:df:57:ff:5f:b2:6c:d3:f1:
43:85:db:6b:de:e0:71:16:89:8c:f4:d5:70:24:71:
88:bc:60:72:31:3e:d7:6c:69:d1:23:f8:d1:d6:3a:
63:34:c5:30:ca:d8:4a:77:ed:64:ee:57:1e:db:75:
52:46:e2:32:2c:a3:64:98:65:c0:58:a4:e6:c5:e5:
ab:eb:6b:c2:c5:de:ac:f9:5f:79:d1:7e:51:71:b6:
f5:aa:f8:6b:3d:89:9b:14:dc:18:ac:e6:4f:99:a4:
1c:cd:df:3d:c0:eb:66:2d:83:ff:46:be:c4:b3:66:
c4:47:37:0f:79:aa:29:0c:4d:91:6a:c3:bd:81:22:
99:8b:4e:60:a4:d6:56:ec:49:08:f6:02:ba:91:06:
dc:5b:13:5a:fc:ff:31:56:a2:bf:79:10:cc:2c:09:
9a:a2:98:46:1e:0a:e9:ed:9d:a4:cd:8a:37:d6:cd:
a4:c5:8d:40:29:67:1b:c2:dd:f8:a6:1e:0b:76:e8:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:BB:BC:FB:BB:D3:C4:5C:BD:1F:44:C9:0A:E9:3C:92:0F:F4:50
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GrG7vPu708RcvR9EyQrpPJIP9FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.47.0/24
Signature Algorithm: sha256WithRSAEncryption
03:81:a7:36:00:53:cd:fe:71:23:9a:1e:43:8b:99:29:ef:fa:
70:c5:48:17:f8:c5:53:08:05:2a:02:8c:fb:3a:ed:c7:31:0a:
8b:ef:df:5a:cf:71:bc:b6:76:d2:02:8f:60:b5:95:01:b8:73:
33:cf:5e:29:f1:ca:3f:f0:af:07:23:ba:c0:84:68:60:9e:0d:
d9:6c:4b:13:c7:dd:87:4e:40:31:4e:c2:73:a4:1e:1f:68:3f:
45:22:3c:4f:6f:f4:8b:4d:22:d1:d8:47:9d:9d:35:bc:6d:fe:
05:b8:73:23:a8:b3:c4:8b:ba:39:9f:f1:b2:47:df:55:fe:7b:
b9:4b:ac:ff:5b:23:91:d9:7d:62:93:7e:ce:38:77:59:97:97:
a8:aa:2c:00:d0:6b:cd:ac:64:4b:82:a2:22:92:0d:c4:d6:72:
39:c2:f3:ed:22:cd:c2:c9:c1:12:a4:cf:77:51:20:a8:73:74:
96:41:ee:0f:07:bb:97:f6:cf:48:0a:42:53:88:6e:2e:44:b2:
c1:c8:80:9d:8e:ed:31:71:a9:e7:55:81:ac:d2:ad:06:e8:80:
a7:a2:7a:9a:82:7b:18:7a:71:53:8b:5e:fe:8e:50:24:3e:96:
76:31:06:de:6f:f1:27:67:49:0c:52:d5:bc:f8:9e:27:5c:20:
8e:e3:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:24:35 2026 by rpki-client