This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa
File: GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa (raw, json)
Hash identifier: 1cVanJIyzbdaXi+XNYZJuMmXonQvqhc1hNQx9fPiOlY=
Subject key identifier: 1A:55:0F:9B:3B:47:8F:4E:6F:67:55:6E:A7:73:43:1B:F2:E0:E0:F1
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 019ACF48872DACC0A69741155B86CDC31D96
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa
Signing time: Sat 29 Nov 2025 11:03:48 +0000
ROA not before: Sat 29 Nov 2025 11:03:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 193.34.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:cf:48:87:2d:ac:c0:a6:97:41:15:5b:86:cd:c3:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Nov 29 11:03:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a550f9b3b478f4e6f67556ea773431bf2e0e0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:41:5e:b5:fd:36:0e:eb:59:c6:db:2e:ef:
0c:8f:5a:b9:f0:34:5e:8d:03:f6:cd:1c:84:5f:66:
9b:59:4d:f0:e5:60:e8:f9:7c:8a:16:fb:f7:b1:21:
15:64:fa:17:59:e8:64:f0:15:5d:52:5e:fd:a8:b5:
4c:d5:14:d0:84:12:75:81:98:f8:de:48:a0:7d:97:
0d:d9:46:ca:5d:ba:94:aa:70:dc:77:ef:70:3b:01:
e9:2c:5b:90:2c:43:9d:02:05:92:79:a3:43:5b:a6:
19:66:59:4a:8d:8c:eb:9b:51:1a:18:9b:2b:9c:7e:
7a:11:33:08:6b:95:95:bd:bd:0c:b7:58:bb:ef:3c:
21:e8:b0:c7:dd:a8:e1:af:32:f1:0d:c1:9f:f4:f4:
40:08:6f:9a:04:50:ea:84:a0:3c:42:53:0a:0a:4d:
7d:29:c5:35:32:83:1c:f9:07:5b:a9:d4:54:0d:a4:
09:db:25:58:11:0a:a0:7e:bc:03:a5:3c:57:b9:2c:
67:4e:61:4d:4a:c7:2b:e7:73:e5:9e:c4:b2:01:2e:
f2:f3:d0:1b:29:b2:b4:d8:5c:51:12:0f:2a:e7:e5:
e0:1b:e0:d3:80:00:d0:4b:f5:07:f4:09:c0:d6:f8:
90:01:7d:1d:61:1c:62:88:d0:43:4d:a4:bf:d9:65:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:55:0F:9B:3B:47:8F:4E:6F:67:55:6E:A7:73:43:1B:F2:E0:E0:F1
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:11:0f:dd:50:41:db:1b:68:57:d0:00:ed:01:7c:46:3f:48:
14:8f:9e:e0:54:e8:7d:b0:35:c1:41:57:7c:0c:6e:26:6a:23:
0c:5b:eb:71:59:8a:2d:7d:4b:a7:82:9c:1c:5f:0d:8c:7a:c5:
48:0d:15:94:57:2f:37:a5:4b:b0:c9:5b:93:54:90:7c:77:1a:
81:af:6c:c2:d2:89:41:9c:b6:67:43:f1:2a:12:d8:29:15:21:
e7:67:0e:9e:63:ea:07:72:d8:92:e8:41:c4:36:54:d2:7c:68:
40:77:5e:4d:e7:0f:55:57:5a:c9:99:1e:54:42:9b:03:f7:d5:
19:89:c7:af:05:eb:51:17:60:41:fb:12:1d:15:ae:0d:14:43:
ca:30:68:df:bb:4c:30:81:b8:f9:59:48:69:28:34:10:f6:b2:
5f:03:da:d4:01:8f:42:1e:cc:91:1b:97:15:5b:d7:76:a3:99:
b2:78:4b:75:6e:15:91:24:98:fb:10:d1:76:6a:08:f2:20:f4:
f5:22:38:90:8a:43:44:64:3c:55:92:d4:77:f3:cd:2b:8a:0f:
70:39:18:21:34:a2:03:1f:71:ed:3f:3b:cb:4f:04:c0:6a:28:
9f:fb:12:da:88:8d:da:89:aa:fb:f1:01:47:4d:73:88:b9:36:
b1:66:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:11:22 2025 by rpki-client