This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa
File: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (raw, json)
Hash identifier: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=
Subject key identifier: 81:6F:EA:19:F2:90:78:88:C2:CE:6E:6E:AB:CB:9A:67:A6:C8:09:2A
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019B7EA6B4DB5E72A182A46AD20EDA45712D
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa
Signing time: Fri 02 Jan 2026 12:20:13 +0000
ROA not before: Fri 02 Jan 2026 12:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49223
IP address blocks: 185.175.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:b4:db:5e:72:a1:82:a4:6a:d2:0e:da:45:71:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Jan 2 12:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=816fea19f2907888c2ce6e6eabcb9a67a6c8092a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:66:df:17:84:85:da:f3:bf:b5:3e:a7:19:
a2:84:43:b7:a7:33:d5:e8:82:9f:ec:ac:7c:bf:46:
b2:8c:30:94:28:74:45:e1:ad:a2:32:08:51:4e:72:
a5:16:81:a7:d1:a6:50:33:5e:91:3d:ef:77:8a:d1:
95:05:ab:3e:ef:f9:4c:e0:07:db:55:97:bf:21:66:
17:ba:c2:dc:29:8b:4b:d4:3d:fd:4e:0a:b7:37:c6:
e1:f7:39:4c:a3:0d:2c:36:dd:8a:be:f0:42:90:1d:
2a:f5:8d:0a:c8:b2:af:6d:ff:7a:ba:b6:e8:22:6f:
75:fd:e6:0d:a2:e3:2d:a7:00:11:10:69:51:c6:19:
a4:c7:f3:d7:ec:28:d9:89:d5:03:0b:08:11:df:11:
a9:2d:44:77:7f:ca:13:0d:cc:92:01:4e:20:9e:6f:
32:a5:79:63:3e:a8:69:96:b5:7d:31:80:73:19:e9:
e4:ad:9f:05:59:9e:2a:24:8c:bb:9f:b3:a2:de:eb:
f1:ed:04:44:c4:23:ea:1e:d3:ce:86:e5:fa:e4:b7:
68:1f:2d:1f:01:2d:13:07:36:32:70:d9:51:b4:75:
fa:b2:71:f3:7d:67:41:2d:a5:84:0f:f7:c4:c1:d0:
11:29:83:81:1c:13:52:e0:da:9a:f5:56:cf:11:52:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:EA:19:F2:90:78:88:C2:CE:6E:6E:AB:CB:9A:67:A6:C8:09:2A
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:b1:e8:0d:2e:fc:4f:b0:85:f4:1f:93:14:cf:1b:3c:77:94:
e9:a3:bd:2f:0a:7d:5e:6f:46:b7:6f:93:5a:fe:d1:bf:3e:5b:
c7:c6:a8:2e:3d:9a:82:8d:da:64:a1:ae:2a:cc:a0:80:08:e3:
44:17:aa:bc:02:3c:9c:52:f3:38:1a:dc:68:cd:33:86:a0:a7:
5e:07:ef:0e:50:d3:88:8a:1e:15:72:65:46:c4:83:60:37:4e:
81:b9:e1:ce:95:21:10:c1:10:66:fb:fa:24:2b:70:b5:25:5b:
d8:ac:95:fa:e9:25:5f:ea:d7:8a:94:bb:bd:06:9c:52:6e:fe:
10:39:82:12:09:8e:21:bf:1c:7a:46:f9:19:ed:82:cb:6b:aa:
87:c2:bc:dc:dd:bd:c3:73:a6:c9:3b:13:38:5e:06:04:2f:ee:
a3:a2:8e:2d:b3:b0:47:9e:96:72:ed:2b:06:4b:bd:75:78:ed:
7f:d9:5f:d5:cf:af:8e:43:bd:3f:f5:ff:c7:b2:00:2b:8a:4b:
f9:2a:eb:7e:a7:a2:5d:a6:70:43:b9:33:4f:ae:61:ba:65:b2:
ac:9d:12:71:63:83:67:22:4a:e2:99:c4:bc:58:87:b4:49:d8:
9f:64:01:20:ff:31:74:61:50:b7:74:89:ab:af:9d:4e:ef:74:
df:74:8c:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+prTbXnKhgqRq0g7aRXEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Y2M5ZDUwMDdjMDA1ODk5MzI5YmNlZTM2NjMzMDhhMzdk
NDBlYWUwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTZmZWExOWYyOTA3ODg4YzJjZTZlNmVhYmNiOWE2N2E2YzgwOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni1m3xeEhdrzv7U+pxmihEO3pzPV
6IKf7Kx8v0ayjDCUKHRF4a2iMghRTnKlFoGn0aZQM16RPe93itGVBas+7/lM4Afb
VZe/IWYXusLcKYtL1D39Tgq3N8bh9zlMow0sNt2KvvBCkB0q9Y0KyLKvbf96urbo
Im91/eYNouMtpwAREGlRxhmkx/PX7CjZidUDCwgR3xGpLUR3f8oTDcySAU4gnm8y
pXljPqhplrV9MYBzGenkrZ8FWZ4qJIy7n7Oi3uvx7QRExCPqHtPOhuX65LdoHy0f
AS0TBzYycNlRtHX6snHzfWdBLaWED/fEwdARKYOBHBNS4Nqa9VbPEVIFdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFv6hnykHiIws5ubqvLmmemyAkqMB8GA1UdIwQY
MBaAFCbMnVAHwAWJkym87jZjMIo31A6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgt
M2NiYTRiZTRjMjllLzEvZ1dfcUdmS1FlSWpDem01dXE4dWFaNmJJQ1NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgtM2NiYTRiZTRjMjll
LzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua/sMA0G
CSqGSIb3DQEBCwUAA4IBAQBqsegNLvxPsIX0H5MUzxs8d5Tpo70vCn1eb0a3b5Na
/tG/PlvHxqguPZqCjdpkoa4qzKCACONEF6q8AjycUvM4GtxozTOGoKdeB+8OUNOI
ih4VcmVGxINgN06BueHOlSEQwRBm+/okK3C1JVvYrJX66SVf6teKlLu9BpxSbv4Q
OYISCY4hvxx6RvkZ7YLLa6qHwrzc3b3Dc6bJOxM4XgYEL+6joo4ts7BHnpZy7SsG
S711eO1/2V/Vz6+OQ70/9f/HsgArikv5Kut+p6JdpnBDuTNPrmG6ZbKsnRJxY4Nn
IkrimcS8WIe0SdifZAEg/zF0YVC3dImrr51O73TfdIzE
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:47 2026 by rpki-client