This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/Gu_fhg3mQGnsmp84Oa5OuiW-MeE.roa File: Gu_fhg3mQGnsmp84Oa5OuiW-MeE.roa (raw, json) Hash identifier: FC9xrWGxGyKPiigpNRPhEq2JFaMmbZsuawbqyf2372M= Subject key identifier: 1A:EF:DF:86:0D:E6:40:69:EC:9A:9F:38:39:AE:4E:BA:25:BE:31:E1 Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Certificate serial: 019AD069D56B97974F5C44225EF5430ACBB8 Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/Gu_fhg3mQGnsmp84Oa5OuiW-MeE.roa Signing time: Sat 29 Nov 2025 16:19:48 +0000 ROA not before: Sat 29 Nov 2025 16:19:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199393 IP address blocks: 194.169.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:69:d5:6b:97:97:4f:5c:44:22:5e:f5:43:0a:cb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Validity Not Before: Nov 29 16:19:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1aefdf860de64069ec9a9f3839ae4eba25be31e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:74:4d:8b:1a:f7:77:59:a8:ef:4d:fc:db:6c: 5c:44:92:2d:4f:e2:d5:5b:9d:ad:39:b6:0d:c8:7d: 4c:2f:f0:27:74:4f:b8:4f:71:e1:cc:d5:d0:85:e5: 71:25:94:ef:46:f9:dd:83:d0:ae:d2:be:fa:e1:92: 70:3d:bb:cc:7d:a9:71:74:ff:62:fb:75:64:8e:5d: cd:98:bd:41:92:52:b9:64:a9:7f:64:33:c3:21:1b: 40:1a:5c:46:d0:2e:76:1b:cc:c9:33:6e:5f:19:bb: 3e:8e:4a:19:0c:bb:96:f1:f0:ce:d2:ea:98:7e:ea: ad:e9:10:0a:d7:7f:d2:bf:58:48:55:61:c2:44:63: d1:27:c9:70:74:2c:da:20:c8:e2:8b:cd:c8:1f:d3: 68:7b:f1:7d:bf:4f:c7:cd:cc:3a:71:fe:54:ad:fc: 45:32:97:62:68:f0:b4:bc:91:34:be:ec:22:7d:ab: b4:b6:01:1a:a4:06:34:e1:28:6d:20:4e:1d:02:9c: 5c:08:b8:06:69:97:7f:89:2c:5c:bb:f7:cf:9c:a5: e4:2b:7c:92:f2:d1:a1:4f:d8:dc:13:85:d9:41:67: d1:a7:5b:75:cc:ba:e9:b3:d2:ff:17:df:b0:c6:0c: 4a:78:28:9a:c9:ef:b9:7a:1f:24:ca:e4:28:06:50: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:DF:86:0D:E6:40:69:EC:9A:9F:38:39:AE:4E:BA:25:BE:31:E1 X509v3 Authority Key Identifier: keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/Gu_fhg3mQGnsmp84Oa5OuiW-MeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.183.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:90:cb:72:ef:cf:71:7a:ec:f9:aa:97:ef:25:8d:50:f1:8d: 86:d1:cc:80:78:98:ab:7a:b3:2a:76:c4:7d:de:b3:bb:e3:4c: 6b:96:08:9d:fe:f2:6f:b6:51:fa:62:63:5c:ae:d9:89:9a:20: f9:98:39:2c:5b:8d:2d:dc:f2:25:72:e4:f8:3b:55:11:46:86: 42:49:69:0b:53:8f:43:49:05:aa:da:19:31:6e:37:fe:ba:7f: 23:05:1d:b7:46:37:56:6a:a8:c3:24:f1:76:3d:69:90:07:44: 52:c5:ff:02:97:e9:9f:4c:e1:21:53:79:82:ba:a8:01:0e:eb: ff:26:42:56:e0:98:60:f1:b6:39:7d:00:0a:b2:7c:00:48:1c: 18:f9:61:7f:c7:27:47:35:41:8f:88:3b:d7:40:71:86:21:54: fc:c2:1f:55:fb:6c:8a:e8:9c:43:84:6a:b6:4b:1f:98:e6:86: 7e:17:cc:7c:a5:6e:a4:69:94:f8:71:f0:c1:48:e5:7e:ab:cd: 58:05:ba:ba:9b:e4:4a:ce:77:da:e0:75:44:18:db:47:7e:87: 46:43:f6:8d:3f:41:d9:0d:d3:6f:e6:bc:77:64:d8:06:5b:7f: b1:d7:8d:51:3f:a5:05:2b:5b:44:b6:b8:96:e2:89:0e:82:3c: e2:66:77:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrQadVrl5dPXEQiXvVDCsu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTA3ZjkwZDlmOWQ5MDJmY2YwNGJkMGI0NjE1MmMzODI3 YTdkNTAwHhcNMjUxMTI5MTYxOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWVmZGY4NjBkZTY0MDY5ZWM5YTlmMzgzOWFlNGViYTI1YmUzMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33RNixr3d1mo703822xcRJItT+LV W52tObYNyH1ML/AndE+4T3HhzNXQheVxJZTvRvndg9Cu0r764ZJwPbvMfalxdP9i +3Vkjl3NmL1BklK5ZKl/ZDPDIRtAGlxG0C52G8zJM25fGbs+jkoZDLuW8fDO0uqY fuqt6RAK13/Sv1hIVWHCRGPRJ8lwdCzaIMjii83IH9Noe/F9v0/Hzcw6cf5UrfxF MpdiaPC0vJE0vuwifau0tgEapAY04ShtIE4dApxcCLgGaZd/iSxcu/fPnKXkK3yS 8tGhT9jcE4XZQWfRp1t1zLrps9L/F9+wxgxKeCiaye+5eh8kyuQoBlBbawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrv34YN5kBp7JqfODmuTrolvjHhMB8GA1UdIwQY MBaAFCWQf5DZ+dkC/PBL0LRhUsOCen1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2Mt MDg5Yzg5ZWY2M2M4LzEvR3VfZmhnM21RR25zbXA4NE9hNU91aVctTWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2MtMDg5Yzg5ZWY2M2M4 LzEvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqm3MA0G CSqGSIb3DQEBCwUAA4IBAQAMkMty789xeuz5qpfvJY1Q8Y2G0cyAeJirerMqdsR9 3rO740xrlgid/vJvtlH6YmNcrtmJmiD5mDksW40t3PIlcuT4O1URRoZCSWkLU49D SQWq2hkxbjf+un8jBR23RjdWaqjDJPF2PWmQB0RSxf8Cl+mfTOEhU3mCuqgBDuv/ JkJW4Jhg8bY5fQAKsnwASBwY+WF/xydHNUGPiDvXQHGGIVT8wh9V+2yK6JxDhGq2 Sx+Y5oZ+F8x8pW6kaZT4cfDBSOV+q81YBbq6m+RKznfa4HVEGNtHfodGQ/aNP0HZ DdNv5rx3ZNgGW3+x141RP6UFK1tEtriW4okOgjziZndu -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:14 2025 by rpki-client