This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/GqSD-huFyN5KnbmOJE2G9Ex44l8.roa File: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (raw, json) Hash identifier: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w= Subject key identifier: 1A:A4:83:FA:1B:85:C8:DE:4A:9D:B9:8E:24:4D:86:F4:4C:78:E2:5F Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Certificate serial: 019B783545A0620A29054848D5314E6409EB Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/GqSD-huFyN5KnbmOJE2G9Ex44l8.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203179 IP address blocks: 185.143.156.0/22 maxlen: 22 2a07:3640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:45:a0:62:0a:29:05:48:48:d5:31:4e:64:09:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa483fa1b85c8de4a9db98e244d86f44c78e25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:30:46:08:44:bb:ae:b8:a1:f5:71:28:20: 91:8a:34:7a:f7:57:a6:a3:07:aa:04:4a:ac:16:31: fc:d8:c9:20:f1:c4:96:4a:9c:df:af:d2:99:2c:7a: 94:e0:ee:2c:91:86:77:27:39:2b:fc:f1:bf:8a:43: 84:14:fd:9b:87:82:a1:61:a7:7b:82:9d:44:51:fa: 4a:a6:11:52:c7:96:23:0f:8e:bd:5f:4b:55:f3:20: e6:8d:3b:e9:4e:bc:66:35:6b:85:ec:b1:e7:88:78: 73:9b:f8:12:cd:01:2e:02:61:dc:06:62:68:b0:1a: 67:b0:11:a9:de:a1:d8:27:ae:cb:eb:45:59:67:67: e9:3d:5d:10:b0:d7:79:ac:c6:24:24:7b:06:3d:32: f8:e3:7c:c4:33:9e:a1:0f:6c:c4:c6:31:ee:1d:44: 42:cc:ea:fa:92:c6:1c:1f:bc:be:e3:82:db:11:06: f2:f4:c5:f7:47:d4:66:b8:c0:4c:04:04:d9:71:be: 20:af:d2:dd:c7:b1:4b:43:bb:e1:00:a8:c5:3c:45: 22:32:95:35:5e:39:31:94:59:18:49:5c:cd:10:1d: 96:f1:94:5e:2a:a3:ee:15:be:0c:c9:ac:ab:ad:c4: 74:e0:ca:1a:c6:31:1b:b2:69:91:83:48:73:ea:94: e4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A4:83:FA:1B:85:C8:DE:4A:9D:B9:8E:24:4D:86:F4:4C:78:E2:5F X509v3 Authority Key Identifier: keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/GqSD-huFyN5KnbmOJE2G9Ex44l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.156.0/22 IPv6: 2a07:3640::/29 Signature Algorithm: sha256WithRSAEncryption 20:99:33:a3:08:d0:d4:31:ac:e5:be:dc:8a:82:e6:ea:99:c5: 84:e7:a6:b9:0c:f0:3e:34:b2:32:43:94:89:0e:05:cf:c9:b5: 62:c5:43:3d:13:29:43:0c:ee:ce:9e:b6:2e:68:14:b2:7e:7f: 91:48:f2:de:dd:45:9a:a7:34:2d:3a:fd:41:a0:62:eb:c6:c7: 60:32:b2:38:a3:77:44:24:50:94:fa:47:4b:45:cf:50:ed:f1: 47:aa:69:f7:5f:d5:87:a3:42:fa:54:4b:83:42:99:7f:69:a9: 3e:37:dc:c4:d6:11:a4:73:ee:0f:12:f1:7b:d1:6b:5a:5d:97: 58:87:38:10:5f:ac:83:a9:1c:95:84:ab:95:b0:7a:0b:b9:82: 6f:bf:66:db:1a:ca:5e:d8:7d:6d:1c:7c:23:ab:bb:ab:15:45: 03:52:89:54:ac:59:3a:33:ce:1e:6b:28:af:ce:df:c5:07:1d: e4:f7:1c:4e:92:3e:e7:30:3a:10:fb:71:f2:47:a6:75:5c:4c: 61:ef:f7:51:80:2a:04:f6:46:f5:c6:a5:a5:e3:f1:34:55:2a: 8a:33:b1:90:a8:6e:9b:cb:80:9b:f2:a1:7c:ab:39:52:bc:56: 74:db:4a:d8:e9:5a:1f:b8:44:cf:f0:8b:b3:da:b6:72:59:d3: f0:ae:9e:de -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NUWgYgopBUhI1TFOZAnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2NiN2NkMWI5ZDZmYzM5ZDcxNThmMmZlOWNmNTIxN2Ex MmQzNzQwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWE0ODNmYTFiODVjOGRlNGE5ZGI5OGUyNDRkODZmNDRjNzhlMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzkwRghEu664ofVxKCCRijR691em oweqBEqsFjH82Mkg8cSWSpzfr9KZLHqU4O4skYZ3Jzkr/PG/ikOEFP2bh4KhYad7 gp1EUfpKphFSx5YjD469X0tV8yDmjTvpTrxmNWuF7LHniHhzm/gSzQEuAmHcBmJo sBpnsBGp3qHYJ67L60VZZ2fpPV0QsNd5rMYkJHsGPTL443zEM56hD2zExjHuHURC zOr6ksYcH7y+44LbEQby9MX3R9RmuMBMBATZcb4gr9Ldx7FLQ7vhAKjFPEUiMpU1 XjkxlFkYSVzNEB2W8ZReKqPuFb4MyayrrcR04MoaxjEbsmmRg0hz6pTkNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBqkg/obhcjeSp25jiRNhvRMeOJfMB8GA1UdIwQY MBaAFF7Mt80bnW/DnXFY8v6c9SF6EtN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQt ZDIyOTY3ZTIyZWYwLzEvR3FTRC1odUZ5TjVLbmJtT0pFMkc5RXg0NGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQtZDIyOTY3ZTIyZWYw LzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY+cMA0E AgACMAcDBQMqBzZAMA0GCSqGSIb3DQEBCwUAA4IBAQAgmTOjCNDUMazlvtyKgubq mcWE56a5DPA+NLIyQ5SJDgXPybVixUM9EylDDO7OnrYuaBSyfn+RSPLe3UWapzQt Ov1BoGLrxsdgMrI4o3dEJFCU+kdLRc9Q7fFHqmn3X9WHo0L6VEuDQpl/aak+N9zE 1hGkc+4PEvF70WtaXZdYhzgQX6yDqRyVhKuVsHoLuYJvv2bbGspe2H1tHHwjq7ur FUUDUolUrFk6M84eayivzt/FBx3k9xxOkj7nMDoQ+3HyR6Z1XExh7/dRgCoE9kb1 xqWl4/E0VSqKM7GQqG6by4Cb8qF8qzlSvFZ020rY6VofuETP8Iuz2rZyWdPwrp7e -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:06 2026 by rpki-client