This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/G-GZ443-EHFADO4B2PIjruGrydE.roa
File: G-GZ443-EHFADO4B2PIjruGrydE.roa (raw, json)
Hash identifier: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=
Subject key identifier: 1B:E1:99:E3:8D:FE:10:71:40:0C:EE:01:D8:F2:23:AE:E1:AB:C9:D1
Certificate issuer: /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial: 019B7CEDE14A09ADE1ABC2623A1733611C72
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/G-GZ443-EHFADO4B2PIjruGrydE.roa
Signing time: Fri 02 Jan 2026 04:18:43 +0000
ROA not before: Fri 02 Jan 2026 04:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203421
IP address blocks: 62.3.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:e1:4a:09:ad:e1:ab:c2:62:3a:17:33:61:1c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Validity
Not Before: Jan 2 04:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1be199e38dfe1071400cee01d8f223aee1abc9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:5b:e5:75:b9:d6:2a:d7:16:74:fa:72:ab:
ee:5a:df:62:e9:c9:83:bf:e3:18:d0:4d:e8:14:01:
e6:6f:e9:44:1d:78:53:0b:b0:45:69:36:26:93:12:
01:cb:0e:6b:ed:ed:a2:20:e2:8f:65:c3:28:76:e6:
2f:0d:f5:11:c4:7a:05:95:53:8c:89:79:1f:60:f3:
14:de:ef:f6:db:d2:08:30:c2:9f:1c:8c:3b:da:34:
b4:d6:4e:96:74:da:cc:f3:68:c3:16:3e:93:37:b8:
e6:eb:bd:40:98:40:a0:42:a5:fa:b3:8d:58:d6:95:
4c:2c:78:8b:3c:5c:27:81:bb:d0:7e:45:4b:94:19:
40:0f:d6:ce:11:b4:c5:1f:78:a3:f0:9a:45:2a:2f:
fe:24:3b:9a:8b:f2:18:20:14:a6:ce:e8:0d:44:ab:
b9:67:3c:64:8c:86:51:44:aa:dd:96:8f:6b:b9:9c:
62:43:a9:de:e3:a3:c5:22:5f:35:42:06:c3:52:d0:
df:01:88:fb:b7:b5:fa:ca:56:5f:1a:77:a8:4f:b6:
a0:89:4f:5e:b0:9e:fb:29:3c:44:be:08:d6:19:b9:
db:f2:c0:b7:6a:73:d3:13:2c:dd:76:2a:44:04:f6:
55:f0:15:cc:28:aa:16:a4:18:07:40:7b:0c:9b:93:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E1:99:E3:8D:FE:10:71:40:0C:EE:01:D8:F2:23:AE:E1:AB:C9:D1
X509v3 Authority Key Identifier:
keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/G-GZ443-EHFADO4B2PIjruGrydE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.52.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ea:ba:cb:a3:88:8b:33:5c:38:63:28:1a:19:03:b6:55:51:
d8:b6:63:f3:2d:61:fa:ac:b4:84:15:c6:30:38:60:36:91:8d:
6c:2b:dc:21:95:da:91:a6:32:2b:a1:e3:ba:be:c1:63:03:9e:
cb:f0:6a:25:14:94:c0:d6:2c:1b:a2:ee:a8:e9:54:5c:fb:8f:
93:9c:80:12:8d:4a:9e:5f:f8:a4:c5:85:be:1a:fd:38:12:ef:
a8:f5:aa:bd:c6:65:84:fc:b2:84:ed:35:de:d4:fc:07:a7:82:
73:97:26:7b:4f:40:53:4f:7f:9c:bc:f3:b9:04:60:82:95:50:
0c:a0:8f:4e:31:a4:68:79:9b:09:04:6e:b6:96:41:30:a2:cf:
b5:a9:ac:9a:63:08:aa:21:01:72:71:ea:de:0a:43:d5:7d:47:
6b:2a:0c:ac:0b:05:b2:f0:c3:56:c8:88:e8:2b:3a:5d:fa:38:
dc:ba:08:ab:d5:c0:10:9a:cd:ec:64:a3:e1:c7:43:4b:3e:69:
f1:bb:82:bc:9c:19:35:44:58:e2:9d:8b:fd:f9:66:8e:f1:be:
a4:15:42:bf:26:81:80:ea:51:00:38:99:f3:6b:de:2e:f7:e5:
fd:14:bb:eb:7c:2b:e7:28:78:14:09:35:24:ea:8f:ef:66:38:
e8:df:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:04:00 2026 by rpki-client