This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/GUQW3oeRBPoGPp_6XnIg_YS248M.roa File: GUQW3oeRBPoGPp_6XnIg_YS248M.roa (raw, json) Hash identifier: oD0wBdW+ygOBHBdC0skIWPthzTXGMd5Me6Sk/yskuP8= Subject key identifier: 19:44:16:DE:87:91:04:FA:06:3E:9F:FA:5E:72:20:FD:84:B6:E3:C3 Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990 Certificate serial: 019B7DCA9546C3D6E581A1EF825F8AD1C81A Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/GUQW3oeRBPoGPp_6XnIg_YS248M.roa Signing time: Fri 02 Jan 2026 08:19:46 +0000 ROA not before: Fri 02 Jan 2026 08:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209025 IP address blocks: 185.75.22.0/23 maxlen: 23 2a10:cd44::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:95:46:c3:d6:e5:81:a1:ef:82:5f:8a:d1:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990 Validity Not Before: Jan 2 08:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=194416de879104fa063e9ffa5e7220fd84b6e3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:92:d7:00:b7:4a:3c:cb:1e:d4:68:a3:5e:a6: 31:5f:41:85:8e:a1:64:5d:f9:bb:05:1a:0e:f3:91: 0e:a8:2b:0d:c7:a1:8c:d1:46:aa:e8:9e:4f:9d:ed: e5:9b:28:ea:08:61:b6:f6:4a:05:68:7e:83:b9:e9: 18:a5:f1:f6:cc:9b:e1:0f:4b:25:8c:62:87:89:9c: 38:c5:b6:49:d9:a2:54:b3:28:01:bd:61:e3:52:d3: 0a:28:3f:db:59:b9:97:70:2d:e8:e3:26:6f:2f:aa: a2:52:a1:df:14:79:02:af:e3:5e:7d:8f:e1:e3:66: 54:6c:bb:c3:18:44:92:59:ec:5a:60:fc:cb:18:ea: f1:d0:ab:14:44:10:e6:49:c0:01:51:7d:a7:3e:2b: 26:0f:61:02:f4:1d:04:8e:8c:d4:be:49:6e:20:46: 34:dc:7f:14:a7:42:14:48:b3:af:4c:37:5f:09:1c: 89:4d:4a:8f:6c:e1:d9:47:f3:c2:5f:ea:24:dd:ff: 57:aa:3b:8b:ba:cf:f5:2f:7b:e4:aa:2e:28:63:2f: de:dd:74:36:09:a0:37:4a:31:15:58:7a:33:a5:70: ea:7c:99:03:d2:e1:ed:86:6e:98:00:24:00:46:bf: 4a:ea:41:7d:c0:e8:8b:e7:9a:6f:f2:9e:59:13:14: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:44:16:DE:87:91:04:FA:06:3E:9F:FA:5E:72:20:FD:84:B6:E3:C3 X509v3 Authority Key Identifier: keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/GUQW3oeRBPoGPp_6XnIg_YS248M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.22.0/23 IPv6: 2a10:cd44::/30 Signature Algorithm: sha256WithRSAEncryption 0f:cb:a9:19:a3:c4:70:48:04:9c:f6:a0:d7:fc:37:96:f6:c3: 86:c7:09:b2:1a:af:38:75:ef:ef:0f:40:07:17:5a:74:b7:9f: b0:d5:81:68:9b:cb:16:eb:47:3a:c3:5e:db:1a:34:c5:7c:b2: ed:6a:0b:1a:0d:27:4c:fc:06:33:aa:86:b2:26:33:48:06:18: 53:29:d7:76:2e:e9:da:f5:1b:6f:f8:8d:a0:f6:e2:7f:dc:b4: 7a:1e:e0:81:be:77:44:ae:7a:1d:8f:ef:56:c5:d0:c0:77:96: 46:91:88:fc:98:bc:3b:e9:5c:2c:c7:f4:f7:2f:d0:80:d4:08: 29:a6:5a:d1:9b:ef:09:70:6e:61:04:9f:f7:75:5c:77:8d:da: 40:7b:ec:f1:a7:49:90:55:e1:4e:b1:f8:ec:df:14:ef:b5:79: 02:82:b0:3d:3b:42:61:e2:3f:b5:af:d9:e2:03:a2:9e:d4:62: 65:80:f0:8e:04:56:d5:30:fc:cf:d9:82:66:21:28:6e:85:32: ea:8b:45:f9:97:6d:f2:27:6f:a0:0c:67:f7:36:31:0d:b9:d2: 50:10:69:a7:e1:02:cb:dc:de:de:07:86:4e:3f:48:6d:b5:c3: 2e:b7:12:9e:f8:3b:b9:81:5f:1f:17:22:a7:59:e8:26:80:5f: fd:06:4e:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ypVGw9blgaHvgl+K0cgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2IzNmY4NTA2YzExOGJmYzQxZjVkYWUzNjIyNjRhOTY4 MTQ5OTAwHhcNMjYwMTAyMDgxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTQ0MTZkZTg3OTEwNGZhMDYzZTlmZmE1ZTcyMjBmZDg0YjZlM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZLXALdKPMse1GijXqYxX0GFjqFk Xfm7BRoO85EOqCsNx6GM0Uaq6J5Pne3lmyjqCGG29koFaH6DuekYpfH2zJvhD0sl jGKHiZw4xbZJ2aJUsygBvWHjUtMKKD/bWbmXcC3o4yZvL6qiUqHfFHkCr+NefY/h 42ZUbLvDGESSWexaYPzLGOrx0KsURBDmScABUX2nPismD2EC9B0EjozUvkluIEY0 3H8Up0IUSLOvTDdfCRyJTUqPbOHZR/PCX+ok3f9XqjuLus/1L3vkqi4oYy/e3XQ2 CaA3SjEVWHozpXDqfJkD0uHthm6YACQARr9K6kF9wOiL55pv8p5ZExTTPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBlEFt6HkQT6Bj6f+l5yIP2EtuPDMB8GA1UdIwQY MBaAFCLLNvhQbBGL/EH12uNiJkqWgUmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYt MjM2Nzg5NTg3OTk3LzEvR1VRVzNvZVJCUG9HUHBfNlhuSWdfWVMyNDhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYtMjM2Nzg5NTg3OTk3 LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuUsWMA0E AgACMAcDBQIqEM1EMA0GCSqGSIb3DQEBCwUAA4IBAQAPy6kZo8RwSASc9qDX/DeW 9sOGxwmyGq84de/vD0AHF1p0t5+w1YFom8sW60c6w17bGjTFfLLtagsaDSdM/AYz qoayJjNIBhhTKdd2Luna9Rtv+I2g9uJ/3LR6HuCBvndErnodj+9WxdDAd5ZGkYj8 mLw76Vwsx/T3L9CA1AgpplrRm+8JcG5hBJ/3dVx3jdpAe+zxp0mQVeFOsfjs3xTv tXkCgrA9O0Jh4j+1r9niA6Ke1GJlgPCOBFbVMPzP2YJmIShuhTLqi0X5l23yJ2+g DGf3NjENudJQEGmn4QLL3N7eB4ZOP0httcMutxKe+Du5gV8fFyKnWegmgF/9Bk4F -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:37 2026 by rpki-client