This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/gPxz3AsvpazPSscQmOwXd8XHipo.roa File: gPxz3AsvpazPSscQmOwXd8XHipo.roa (raw, json) Hash identifier: IOFul4cQGXwnFtQ64s8onrLCe2V7iS99e1JtKsceQBo= Subject key identifier: 80:FC:73:DC:0B:2F:A5:AC:CF:4A:C7:10:98:EC:17:77:C5:C7:8A:9A Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744 Certificate serial: 019B7D5B3699AE5552DC6F3922A980636EBF Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/gPxz3AsvpazPSscQmOwXd8XHipo.roa Signing time: Fri 02 Jan 2026 06:18:08 +0000 ROA not before: Fri 02 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 719 IP address blocks: 158.233.0.0/23 maxlen: 23 158.233.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:36:99:ae:55:52:dc:6f:39:22:a9:80:63:6e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744 Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80fc73dc0b2fa5accf4ac71098ec1777c5c78a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:29:82:1e:73:6a:63:07:cc:5a:5e:9b:60:41: 52:54:f4:8e:2b:f3:a2:91:90:6b:00:e0:ce:c1:dc: 19:55:49:99:75:0a:1c:39:bb:6d:5c:10:9b:67:7e: 89:d4:f1:8d:16:a5:3a:2a:1b:ed:16:10:c2:04:4c: bc:3e:80:97:ed:1f:ac:87:b7:ba:81:23:35:9c:2c: 30:8a:13:b1:2e:46:47:7d:af:42:75:35:58:ea:bf: 09:b2:c6:64:46:6b:f8:6f:7c:47:36:5f:62:b2:3f: 33:93:b0:56:af:61:13:4d:d9:fc:71:10:da:3d:fe: 1c:7f:81:14:e8:ea:3a:29:e9:7b:7a:fe:eb:a5:2f: b8:6e:b4:8a:9d:0e:93:27:b0:c9:5c:d1:9c:94:b3: 76:00:97:a8:de:54:bd:a1:cc:f1:a8:8c:43:7f:8a: 5b:d0:58:95:95:3a:e9:57:67:1a:a3:d0:ba:9e:35: 2f:b9:0d:db:31:0a:4e:df:83:08:bf:a6:04:9f:76: 18:f8:97:4d:e5:df:ee:d3:5c:2c:b4:b7:76:a3:9a: 25:17:f6:06:a2:df:d2:96:7b:f4:67:81:2b:52:83: eb:96:e5:8b:0a:41:62:75:0d:fd:eb:a1:be:98:e2: 9d:99:ef:1c:c5:cf:88:27:31:8c:cf:0d:13:73:ac: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:73:DC:0B:2F:A5:AC:CF:4A:C7:10:98:EC:17:77:C5:C7:8A:9A X509v3 Authority Key Identifier: keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/gPxz3AsvpazPSscQmOwXd8XHipo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.233.0.0/22 Signature Algorithm: sha256WithRSAEncryption a6:f3:a1:80:34:04:c5:fa:30:50:1b:18:2a:8e:15:b5:25:47: 8a:e3:04:3a:12:25:ea:08:1e:be:0d:c7:74:d8:a9:45:f8:c4: 9a:9a:16:63:a6:14:ce:64:78:8a:fd:46:64:c3:ad:de:0a:22: c2:99:bf:04:24:7a:b7:ff:f7:97:9a:66:8e:54:4c:2a:91:ba: b7:55:21:15:28:d5:7f:ae:cb:04:b5:09:45:e9:43:7b:c0:21: e8:97:9b:af:45:3b:c2:6a:d5:77:d3:4f:e6:84:e9:cc:a6:20: 3f:9c:f8:ba:77:8f:5f:77:06:7e:da:76:fd:c2:e1:8e:8a:06: b2:d6:31:92:e7:75:02:1b:d9:c0:46:08:52:a0:31:04:a5:12: 63:a4:48:84:59:d6:9f:3e:ae:6b:c0:a8:fa:e1:d6:c1:2c:8f: 65:06:45:4e:3f:a7:4f:9f:f1:2d:4e:7b:bc:ae:be:18:3c:a6: 9e:45:d4:8c:72:bf:d5:88:fc:3d:63:04:a0:ab:e1:a6:0e:2a: 75:b7:fb:a8:d5:6e:de:f3:79:74:47:53:20:fc:33:a8:c9:a6: 8e:0b:72:3e:74:fc:1c:7f:3a:f3:37:d5:76:c3:b6:88:12:96: 53:4d:87:d1:77:af:26:71:51:bf:0e:c7:e2:90:87:ed:02:e4: 5a:80:a8:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WzaZrlVS3G85IqmAY26/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjgxNDM1ZWQxMzc4OTg5NWYzNzVkYzM0ZDA0Y2U5MWFj YTQ3NDQwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGZjNzNkYzBiMmZhNWFjY2Y0YWM3MTA5OGVjMTc3N2M1Yzc4YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SmCHnNqYwfMWl6bYEFSVPSOK/Oi kZBrAODOwdwZVUmZdQocObttXBCbZ36J1PGNFqU6KhvtFhDCBEy8PoCX7R+sh7e6 gSM1nCwwihOxLkZHfa9CdTVY6r8JssZkRmv4b3xHNl9isj8zk7BWr2ETTdn8cRDa Pf4cf4EU6Oo6Kel7ev7rpS+4brSKnQ6TJ7DJXNGclLN2AJeo3lS9oczxqIxDf4pb 0FiVlTrpV2cao9C6njUvuQ3bMQpO34MIv6YEn3YY+JdN5d/u01wstLd2o5olF/YG ot/Slnv0Z4ErUoPrluWLCkFidQ3966G+mOKdme8cxc+IJzGMzw0Tc6wIfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFID8c9wLL6Wsz0rHEJjsF3fFx4qaMB8GA1UdIwQY MBaAFFv4FDXtE3iYlfN13DTQTOkaykdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEt NDhlNGNjNmIzM2EzLzEvZ1B4ejNBc3ZwYXpQU3NjUW1Pd1hkOFhIaXBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEtNDhlNGNjNmIzM2Ez LzEvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnukAMA0G CSqGSIb3DQEBCwUAA4IBAQCm86GANATF+jBQGxgqjhW1JUeK4wQ6EiXqCB6+Dcd0 2KlF+MSamhZjphTOZHiK/UZkw63eCiLCmb8EJHq3//eXmmaOVEwqkbq3VSEVKNV/ rssEtQlF6UN7wCHol5uvRTvCatV300/mhOnMpiA/nPi6d49fdwZ+2nb9wuGOigay 1jGS53UCG9nARghSoDEEpRJjpEiEWdafPq5rwKj64dbBLI9lBkVOP6dPn/EtTnu8 rr4YPKaeRdSMcr/ViPw9YwSgq+GmDip1t/uo1W7e83l0R1Mg/DOoyaaOC3I+dPwc fzrzN9V2w7aIEpZTTYfRd68mcVG/DsfikIftAuRagKhA -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:18 2026 by rpki-client