This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/GXuUD6nAp7RfhD5guLaEdCtJhos.roa File: GXuUD6nAp7RfhD5guLaEdCtJhos.roa (raw, json) Hash identifier: 5cLq1XiFXQljJjhGmJhwjtVSIZlhSNusJxMQnbQOGSg= Subject key identifier: 19:7B:94:0F:A9:C0:A7:B4:5F:84:3E:60:B8:B6:84:74:2B:49:86:8B Certificate issuer: /CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de Certificate serial: 019AE9098E6F5D6054C79ABE56ADFA552F9C Authority key identifier: 51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/GXuUD6nAp7RfhD5guLaEdCtJhos.roa Signing time: Thu 04 Dec 2025 11:05:08 +0000 ROA not before: Thu 04 Dec 2025 11:05:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 52149 IP address blocks: 195.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:09:8e:6f:5d:60:54:c7:9a:be:56:ad:fa:55:2f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de Validity Not Before: Dec 4 11:05:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=197b940fa9c0a7b45f843e60b8b684742b49868b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:07:63:a6:4c:7b:e9:d3:41:7a:4c:b3:f5: f0:d6:74:22:68:5c:3b:0d:d0:67:bc:4d:da:33:7a: eb:fc:99:7a:ba:9b:5c:93:ba:68:d9:0c:22:ec:3d: bb:bd:62:9a:43:7e:2f:83:bc:84:b0:b8:25:d7:6f: ca:fb:f6:18:1c:8a:c3:43:49:13:a9:bb:56:7f:dc: 2b:02:ee:77:3a:f7:b1:7b:32:7e:31:af:a7:8c:15: 56:8c:2b:1e:11:37:e9:a7:a7:22:84:7e:3f:c0:9f: b9:49:19:31:fa:5d:de:b7:0e:7e:2d:d8:62:f9:92: 52:60:f3:2b:63:09:56:f9:28:4f:15:47:d2:0e:b9: 99:a7:7f:c3:8f:17:bf:d4:b7:6e:2e:87:b2:6c:d7: ed:36:d9:45:02:27:07:18:6b:3a:db:67:3e:f8:3a: 4a:8f:3a:04:84:d1:df:bd:31:af:92:9e:5b:41:d7: 64:ab:5a:a3:bb:d0:f1:5f:e2:f7:5e:90:90:32:28: 03:44:af:8c:4f:b1:0d:1b:6d:c8:50:f6:42:5b:3a: 30:68:b0:3e:70:bc:a1:f9:a9:8a:f0:20:e1:a4:ef: aa:90:7c:8f:62:16:1c:30:45:f3:ff:c2:e1:e3:0b: 54:85:bd:14:b5:49:4f:95:87:6b:09:97:bd:24:de: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:94:0F:A9:C0:A7:B4:5F:84:3E:60:B8:B6:84:74:2B:49:86:8B X509v3 Authority Key Identifier: keyid:51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/GXuUD6nAp7RfhD5guLaEdCtJhos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.156.0/24 Signature Algorithm: sha256WithRSAEncryption 61:77:8b:73:ef:64:fa:8e:c5:28:de:2a:83:64:2f:b7:e6:4c: f0:c1:97:80:9d:e0:00:a9:23:4d:d0:f1:67:09:27:11:18:01: f7:4d:c5:ef:dd:9c:16:e9:92:fa:af:4c:1e:18:b1:17:12:1d: 57:38:ef:d0:f3:4a:f0:11:b1:3f:e1:39:d0:97:86:a0:41:b7: 67:c9:5a:e1:c4:47:a1:c7:3a:69:b8:bb:6e:cf:7b:a6:16:17: 5a:89:b9:89:5e:30:28:20:c2:31:0c:0f:48:77:5e:03:6f:da: 31:54:39:86:c9:de:6c:3a:04:a7:59:09:ea:b8:b1:46:ff:8c: cf:36:45:5a:af:30:3f:f2:ba:0b:f4:6d:56:4d:89:48:7e:b5: 82:5f:be:0d:7f:e2:1c:9b:61:c2:17:1b:59:98:61:c8:72:fe: fc:3d:15:b4:0e:fe:27:43:6b:d9:05:a8:60:cd:64:b7:9a:3f: c6:cb:87:45:fd:78:cd:dd:2d:65:9c:24:07:13:81:d1:37:aa: 6c:04:2a:1f:06:06:8d:b0:bc:68:de:86:0b:71:b3:4e:80:dc: 24:5a:be:04:77:19:2f:22:2f:e9:c6:16:00:19:80:4d:48:d7: 5a:68:8b:1a:55:ea:d8:da:5c:f1:b9:87:4c:6d:7c:b9:e7:ea: 2b:37:19:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrpCY5vXWBUx5q+Vq36VS+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjE3NDUyYjVmMWJmMmZmNzA3NmVlMDU5ZmYyNzVjMGNi MTEyZGUwHhcNMjUxMjA0MTEwNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTdiOTQwZmE5YzBhN2I0NWY4NDNlNjBiOGI2ODQ3NDJiNDk4NjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j4HY6ZMe+nTQXpMs/Xw1nQiaFw7 DdBnvE3aM3rr/Jl6uptck7po2Qwi7D27vWKaQ34vg7yEsLgl12/K+/YYHIrDQ0kT qbtWf9wrAu53OvexezJ+Ma+njBVWjCseETfpp6cihH4/wJ+5SRkx+l3etw5+Ldhi +ZJSYPMrYwlW+ShPFUfSDrmZp3/Djxe/1LduLoeybNftNtlFAicHGGs622c++DpK jzoEhNHfvTGvkp5bQddkq1qju9DxX+L3XpCQMigDRK+MT7ENG23IUPZCWzowaLA+ cLyh+amK8CDhpO+qkHyPYhYcMEXz/8Lh4wtUhb0UtUlPlYdrCZe9JN5CwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBl7lA+pwKe0X4Q+YLi2hHQrSYaLMB8GA1UdIwQY MBaAFFHxdFK18b8v9wdu4Fn/J1wMsRLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MzU4ZWItMWQ0My00NGY0LWJjMDAt MDdhYmZmNjcyMDJjLzEvR1h1VUQ2bkFwN1JmaEQ1Z3VMYUVkQ3RKaG9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81MzU4ZWItMWQ0My00NGY0LWJjMDAtMDdhYmZmNjcyMDJj LzEvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxScMA0G CSqGSIb3DQEBCwUAA4IBAQBhd4tz72T6jsUo3iqDZC+35kzwwZeAneAAqSNN0PFn CScRGAH3TcXv3ZwW6ZL6r0weGLEXEh1XOO/Q80rwEbE/4TnQl4agQbdnyVrhxEeh xzppuLtuz3umFhdaibmJXjAoIMIxDA9Id14Db9oxVDmGyd5sOgSnWQnquLFG/4zP NkVarzA/8roL9G1WTYlIfrWCX74Nf+Icm2HCFxtZmGHIcv78PRW0Dv4nQ2vZBahg zWS3mj/Gy4dF/XjN3S1lnCQHE4HRN6psBCofBgaNsLxo3oYLcbNOgNwkWr4Edxkv Ii/pxhYAGYBNSNdaaIsaVerY2lzxuYdMbXy55+orNxnj -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:40 2025 by rpki-client