This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GxXapth5TXJfKL3THtGbcZ2d5Gc.roa File: GxXapth5TXJfKL3THtGbcZ2d5Gc.roa (raw, json) Hash identifier: GIxE2UOc9CUSVW0vSExmLz7YKeQavAKFp0T5CTs9JW0= Subject key identifier: 1B:15:DA:A6:D8:79:4D:72:5F:28:BD:D3:1E:D1:9B:71:9D:9D:E4:67 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019A9D1B85C3D3F72F7E4BBBA3F24260FA5C Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GxXapth5TXJfKL3THtGbcZ2d5Gc.roa Signing time: Wed 19 Nov 2025 17:13:37 +0000 ROA not before: Wed 19 Nov 2025 17:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 46.20.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:1b:85:c3:d3:f7:2f:7e:4b:bb:a3:f2:42:60:fa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Nov 19 17:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1b15daa6d8794d725f28bdd31ed19b719d9de467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:ea:98:87:aa:57:5a:81:d1:42:44:bb:e9: 9d:55:6d:7d:42:a0:74:4e:fa:11:d5:44:23:ae:24: 3a:00:35:68:9a:64:a7:a6:a1:29:0a:f7:7b:9c:18: 3d:1a:0b:24:ac:67:6b:d6:19:a9:de:0e:33:2c:9e: 31:3e:52:f6:99:d2:b7:6f:4f:49:0e:fd:95:35:85: 00:31:09:c8:4f:a0:d3:cd:01:d4:f0:47:21:ee:dd: 44:23:02:1f:c4:7b:b1:d7:00:c7:98:c2:a3:e8:85: 03:3f:04:92:f4:93:2c:20:85:a5:ed:11:e7:8a:7c: d0:a3:5b:79:f6:c0:74:f2:8a:fe:24:72:6a:f4:b4: 10:fd:f6:b7:9b:16:33:5b:52:9b:e8:74:e0:5b:a5: 5b:dc:dc:d6:93:d2:be:1a:4a:cc:d0:82:fa:33:d2: 84:d8:b4:64:fb:86:57:54:d1:a7:9a:d6:0b:4e:91: a5:26:09:48:e8:25:db:19:61:45:9a:e1:91:37:db: 56:d6:e5:81:26:0e:a1:b5:3c:75:2f:44:01:45:91: 0c:0b:51:5c:5a:35:8d:db:b7:81:e6:08:02:cf:c6: 13:f3:de:4b:ba:49:d3:7e:4a:9c:c8:f5:14:ec:42: a5:62:3c:69:1c:d9:0d:55:dd:e1:6e:23:12:d8:ad: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:DA:A6:D8:79:4D:72:5F:28:BD:D3:1E:D1:9B:71:9D:9D:E4:67 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GxXapth5TXJfKL3THtGbcZ2d5Gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.210.0/23 Signature Algorithm: sha256WithRSAEncryption 76:b3:d1:5c:b2:c2:7f:25:18:c3:0c:d8:22:9d:59:1d:11:ac: 40:1b:c4:f7:5f:01:66:df:75:e4:fe:50:39:f7:7b:ac:cd:64: 03:e7:8c:6d:af:f3:38:74:91:bb:10:ae:a2:1d:41:0f:1f:5b: 3a:53:e8:c8:9a:3f:84:54:60:64:3a:aa:a9:9b:e6:03:3b:46: 2a:29:3c:fb:f6:dd:f4:b7:cc:4b:6d:ac:5d:03:41:25:34:04: c7:90:c9:c2:88:d1:ab:b4:f8:ee:df:4d:0c:ca:4a:00:41:01: d5:c1:3c:29:1e:ce:d6:10:ef:9a:08:63:0f:fc:46:7e:54:3d: c2:ed:02:6d:e2:2f:3e:c9:7b:d5:d6:cd:58:78:f5:17:48:51: 4e:d4:d0:bd:d6:fa:53:20:80:b8:20:a9:95:cc:dc:f8:7a:ea: f5:b1:5a:b5:58:51:8d:7d:88:32:89:cd:20:05:12:94:81:05: 1d:05:3e:9e:ec:a8:8f:a2:46:ad:2f:61:a1:e1:f6:87:48:34: ca:b0:fe:76:e4:d9:35:a5:f4:da:bc:68:38:41:d3:ee:38:dc: 09:e5:ef:55:4e:4e:b6:de:52:1f:87:01:1b:5a:19:fe:7c:4d: cd:6a:3e:dd:12:52:b3:72:c4:90:d3:2d:e7:e4:db:ce:41:3d: e6:9d:63:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdG4XD0/cvfku7o/JCYPpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUxMTE5MTcxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjE1ZGFhNmQ4Nzk0ZDcyNWYyOGJkZDMxZWQxOWI3MTlkOWRlNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywPqmIeqV1qB0UJEu+mdVW19QqB0 TvoR1UQjriQ6ADVommSnpqEpCvd7nBg9GgskrGdr1hmp3g4zLJ4xPlL2mdK3b09J Dv2VNYUAMQnIT6DTzQHU8Ech7t1EIwIfxHux1wDHmMKj6IUDPwSS9JMsIIWl7RHn inzQo1t59sB08or+JHJq9LQQ/fa3mxYzW1Kb6HTgW6Vb3NzWk9K+GkrM0IL6M9KE 2LRk+4ZXVNGnmtYLTpGlJglI6CXbGWFFmuGRN9tW1uWBJg6htTx1L0QBRZEMC1Fc WjWN27eB5ggCz8YT895LuknTfkqcyPUU7EKlYjxpHNkNVd3hbiMS2K0yHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsV2qbYeU1yXyi90x7Rm3GdneRnMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvR3hYYXB0aDVUWEpmS0wzVEh0R2JjWjJkNUdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLhTSMA0G CSqGSIb3DQEBCwUAA4IBAQB2s9FcssJ/JRjDDNginVkdEaxAG8T3XwFm33Xk/lA5 93uszWQD54xtr/M4dJG7EK6iHUEPH1s6U+jImj+EVGBkOqqpm+YDO0YqKTz79t30 t8xLbaxdA0ElNATHkMnCiNGrtPju300MykoAQQHVwTwpHs7WEO+aCGMP/EZ+VD3C 7QJt4i8+yXvV1s1YePUXSFFO1NC91vpTIIC4IKmVzNz4eur1sVq1WFGNfYgyic0g BRKUgQUdBT6e7KiPokatL2Gh4faHSDTKsP525Nk1pfTavGg4QdPuONwJ5e9VTk62 3lIfhwEbWhn+fE3Naj7dElKzcsSQ0y3n5NvOQT3mnWNl -----END CERTIFICATE-----Generated at Sat Dec 6 10:49:55 2025 by rpki-client