This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/G1Ty4WndBpOGD61GKAs-CwP5c2w.roa
File: G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (raw, json)
Hash identifier: l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=
Subject key identifier: 1B:54:F2:E1:69:DD:06:93:86:0F:AD:46:28:0B:3E:0B:03:F9:73:6C
Certificate issuer: /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial: 019B76EB3B68A5C9C89E691ACAABA4178649
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/G1Ty4WndBpOGD61GKAs-CwP5c2w.roa
Signing time: Thu 01 Jan 2026 00:18:06 +0000
ROA not before: Thu 01 Jan 2026 00:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216352
IP address blocks: 2a10:a642:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:3b:68:a5:c9:c8:9e:69:1a:ca:ab:a4:17:86:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Validity
Not Before: Jan 1 00:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b54f2e169dd0693860fad46280b3e0b03f9736c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:e1:f0:14:5f:60:9a:c7:16:0d:99:ae:9d:
b8:ae:5b:5b:21:1a:4f:35:99:15:b8:da:04:b1:90:
c2:33:dc:a7:87:0e:c3:a0:f9:7e:bd:55:58:7c:c8:
2e:1d:aa:5f:c4:69:a2:ab:0a:2b:bf:f7:6c:63:ab:
7b:74:7f:6c:c4:29:6a:37:28:cf:04:e8:93:52:62:
e7:f8:8f:67:06:d5:2c:4f:e5:f8:08:59:97:13:22:
20:3e:a0:71:52:cf:5a:db:55:dd:14:e8:3b:b9:fa:
3b:1d:eb:89:85:8e:06:74:6d:56:7f:90:ab:44:36:
8b:40:25:e9:c6:e8:7d:13:ff:ef:e3:04:72:45:cb:
77:8e:8a:bb:93:fd:dc:1b:8b:6e:9f:90:28:65:5b:
99:32:a1:4c:c1:66:54:42:e8:b0:36:53:21:6d:0e:
08:ea:1b:27:3f:59:3d:4a:8a:eb:0f:72:78:f3:ea:
44:08:8d:0c:91:fb:cd:50:96:84:11:07:0a:aa:c7:
db:db:2d:f1:69:05:a4:17:d0:57:d9:f3:c5:c2:b1:
d7:47:e7:1e:0e:2e:e1:cf:5a:e4:a2:f7:1e:c6:1c:
25:0a:b4:10:f9:40:33:0f:3e:82:16:39:01:29:0e:
4a:68:52:ef:d5:45:e2:2e:6d:5a:59:45:c3:38:f4:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:54:F2:E1:69:DD:06:93:86:0F:AD:46:28:0B:3E:0B:03:F9:73:6C
X509v3 Authority Key Identifier:
keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/G1Ty4WndBpOGD61GKAs-CwP5c2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a642:100::/40
Signature Algorithm: sha256WithRSAEncryption
18:e2:13:36:07:05:3c:18:74:e6:20:33:cc:60:d7:98:a1:d2:
fd:b1:ec:b0:ba:cd:f0:50:24:81:22:f6:43:f2:92:9c:b4:34:
fd:ad:31:79:8a:4b:bb:ae:46:81:cd:b4:21:e3:1e:32:65:68:
1e:56:5f:e3:ef:a8:eb:e4:6d:54:ac:c8:29:eb:86:30:ec:07:
ab:0f:3d:1e:9b:27:4b:ba:21:1f:82:20:71:d0:93:97:2d:57:
01:a6:d2:a4:b1:96:0d:57:9f:06:19:7e:d5:21:e1:23:c8:2a:
84:d1:e5:3d:67:1b:d6:3a:67:b2:1a:60:df:c8:e7:d7:2e:45:
70:8d:d0:55:7b:7d:3a:76:23:8a:7f:5c:00:7b:be:22:c3:c2:
be:99:e0:a2:28:2b:69:72:be:11:85:d2:82:c2:b7:60:1f:8f:
73:f4:48:7b:05:2c:ce:8e:78:d4:6b:93:e6:92:b8:00:79:00:
34:8b:b0:72:c1:f2:75:c5:a1:af:bc:2c:f8:cc:8b:10:e7:f3:
1f:ba:0d:ca:dd:af:55:35:4c:e9:3a:ca:0e:30:e1:11:66:f7:
0f:3e:97:c3:ec:32:0e:e5:76:8e:38:1c:25:d1:35:6d:ed:d3:
fc:74:43:ef:0e:90:03:da:1c:da:bc:ba:51:cb:5d:e8:78:87:
ee:21:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:41 2026 by rpki-client