This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gvcCAe9K6U4m6beyZ2h_rYZRE_w.roa
File: gvcCAe9K6U4m6beyZ2h_rYZRE_w.roa (raw, json)
Hash identifier: o0yjHQjjZGVG8PAPR1psf9bfDnlgb5ytOsSX82j9YlY=
Subject key identifier: 82:F7:02:01:EF:4A:E9:4E:26:E9:B7:B2:67:68:7F:AD:86:51:13:FC
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 019B7B36134D449A14C86D3E1EC7CEEE4A66
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gvcCAe9K6U4m6beyZ2h_rYZRE_w.roa
Signing time: Thu 01 Jan 2026 20:18:19 +0000
ROA not before: Thu 01 Jan 2026 20:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207958
IP address blocks: 89.39.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:13:4d:44:9a:14:c8:6d:3e:1e:c7:ce:ee:4a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 20:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82f70201ef4ae94e26e9b7b267687fad865113fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:dc:e2:1c:77:28:3c:f7:f6:2a:2e:30:bc:
9b:c1:5a:9c:df:fe:7e:4e:fe:d8:63:95:3b:1e:de:
1a:51:df:a3:51:9e:e2:fc:79:f1:17:07:c9:3c:20:
ba:2c:70:ca:3c:34:6c:20:46:09:af:4b:94:37:3b:
ba:26:29:32:39:c4:1a:16:fa:67:ff:e9:1f:45:83:
cc:3b:96:36:69:78:fa:65:5d:6a:73:6a:b2:09:f3:
3e:64:51:5b:76:5a:ce:3f:3f:fa:09:83:65:f4:8f:
71:c8:96:95:3a:9c:19:8b:eb:37:f3:0b:40:b7:78:
96:60:c9:f7:e8:bd:e6:02:fc:3e:13:38:ee:82:1b:
c1:60:23:89:2b:e7:73:ee:3a:86:eb:48:07:d3:bc:
b4:10:94:05:87:4c:db:e4:33:c5:46:38:14:d2:fc:
a7:99:14:f5:b7:ab:1a:c2:2f:d1:96:ed:16:5d:0e:
b3:20:0e:1d:79:07:96:e7:40:f3:d3:c4:a0:1d:59:
7f:7d:61:d6:1e:85:21:7b:ac:c1:cc:6e:7b:b0:ca:
05:e0:ed:75:90:d1:08:4e:7e:e7:c0:ef:a3:29:1a:
4c:79:28:90:17:a4:30:2c:7e:4c:56:9c:47:e2:9d:
cd:95:55:7e:5d:2b:49:da:00:09:03:1c:ec:60:cb:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:02:01:EF:4A:E9:4E:26:E9:B7:B2:67:68:7F:AD:86:51:13:FC
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gvcCAe9K6U4m6beyZ2h_rYZRE_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a4:fb:c2:22:fe:57:e8:81:6d:c3:65:de:20:76:e5:80:c1:
e4:a7:2b:ae:ae:f0:bf:01:cd:fb:22:cd:3e:e5:90:b8:4c:f1:
3e:00:13:ff:f4:f1:e7:ff:4a:2c:a0:46:c6:27:34:d6:db:81:
9e:1c:a3:53:0d:f8:b6:55:17:c4:b9:60:e9:e9:87:64:52:fb:
8a:ba:0d:98:d5:3b:aa:b0:19:36:4b:72:6d:a7:16:8f:60:b9:
dc:eb:2c:22:77:ca:ff:64:b5:0c:9b:b5:ee:29:f2:76:d2:c3:
b1:58:13:67:99:82:9f:3e:ec:ad:76:e3:92:ca:d3:b9:b1:23:
cb:46:e0:1c:2a:88:09:65:d5:5e:9b:d7:49:40:4b:95:e9:ad:
bb:a1:12:f2:82:2f:75:27:66:4a:e5:e3:a2:5e:09:b9:bf:ec:
2c:0e:10:3a:06:cd:95:ed:18:c7:7b:6b:94:32:76:99:26:bb:
d5:4b:22:e2:0f:4d:6b:fe:ff:80:04:ee:18:33:b6:c3:1e:63:
2d:d0:31:e1:19:16:3b:80:5c:b5:51:1f:74:30:e7:57:fe:06:
95:d5:33:d5:0b:ae:d4:70:ff:cb:9b:42:38:1d:24:b8:f8:0e:
42:d0:83:ce:7d:85:a5:1a:48:8e:f0:4c:19:d9:7b:80:23:7d:
36:81:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:24:33 2026 by rpki-client