This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/GQ5NG7NUJ0mTiMMoguANnU3zhCU.roa File: GQ5NG7NUJ0mTiMMoguANnU3zhCU.roa (raw, json) Hash identifier: RLZOdnWaQDPusAoiFOrFgYMm/8VCugzHSsyaalfrB2g= Subject key identifier: 19:0E:4D:1B:B3:54:27:49:93:88:C3:28:82:E0:0D:9D:4D:F3:84:25 Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Certificate serial: 019A810A75381CA6355A796E3C9469E93099 Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/GQ5NG7NUJ0mTiMMoguANnU3zhCU.roa Signing time: Fri 14 Nov 2025 06:25:37 +0000 ROA not before: Fri 14 Nov 2025 06:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202498 IP address blocks: 178.130.140.0/24 maxlen: 24 178.130.141.0/24 maxlen: 24 178.130.142.0/24 maxlen: 24 178.130.143.0/24 maxlen: 24 193.143.64.0/24 maxlen: 24 193.143.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:0a:75:38:1c:a6:35:5a:79:6e:3c:94:69:e9:30:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Validity Not Before: Nov 14 06:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=190e4d1bb35427499388c32882e00d9d4df38425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:54:a2:aa:59:b8:0b:05:3a:89:6b:94:e5: e8:bc:3e:76:43:01:fe:92:64:01:d0:9f:4c:21:2c: ed:5d:13:f7:33:40:e2:eb:27:e2:db:1e:1b:85:28: c8:af:85:eb:b8:65:95:a2:0a:82:99:fe:22:2d:dd: 3a:ae:f0:d6:c7:a5:ce:7a:2c:0d:8c:1d:d1:9f:c4: 5f:81:58:a4:91:9d:43:e7:08:e1:c1:b6:03:a2:e0: 42:8b:38:9f:f5:a4:5e:a1:54:02:a5:3a:d6:cb:de: 15:2d:04:d0:6a:f6:81:ab:35:b9:f5:e4:12:64:8d: 3b:77:ad:17:ce:94:6c:bc:48:4f:4f:8f:5d:ae:0d: c2:db:e8:06:d6:2c:fa:83:10:4a:5a:25:df:1e:9b: 6b:a3:a8:bb:0c:ea:a6:66:23:a9:0f:7c:6f:63:16: 3d:c5:75:6a:9d:f8:78:a1:22:0f:0d:dc:27:eb:8f: f4:c9:22:65:ba:77:bd:a8:67:2d:0c:9f:da:c8:ea: 55:54:c7:f6:86:d1:bd:f8:6e:6c:07:c6:94:9d:39: 8d:cc:5a:bc:db:80:f4:24:ba:f8:c5:7d:cb:2c:04: 4b:85:75:82:e4:75:86:71:b4:36:03:60:ac:5a:6d: ed:1d:17:6a:d8:de:d5:a6:c9:6a:31:bc:08:56:17: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0E:4D:1B:B3:54:27:49:93:88:C3:28:82:E0:0D:9D:4D:F3:84:25 X509v3 Authority Key Identifier: keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/GQ5NG7NUJ0mTiMMoguANnU3zhCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.130.140.0/22 193.143.64.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:b9:7f:c3:3a:86:62:71:55:48:8f:70:5a:c9:95:24:2c:b5: be:c3:10:ed:15:f5:1a:f9:6c:de:92:ec:ef:4a:af:b2:90:f5: f6:d0:0a:51:b8:47:38:e4:34:b1:78:6d:9b:b4:47:40:38:dd: 5d:d2:01:b3:54:41:3c:a0:86:d7:ea:80:72:b7:e8:0c:37:63: cc:6c:f5:a7:87:09:27:88:a4:a9:46:bb:c8:d3:8c:24:42:41: 92:0e:d3:57:07:88:dd:9d:0e:bf:8f:50:4d:b4:4d:ba:1b:9a: b0:b1:6e:98:b4:52:ea:2c:8d:26:f9:c9:db:90:e3:f2:40:bc: 53:20:0a:b3:39:b9:c1:05:4c:1c:a0:f4:e2:2b:7d:3e:43:01: b7:18:ed:f2:6e:de:0a:7d:94:75:8e:bb:d3:86:4c:1b:80:4f: e7:01:45:af:0d:3b:3a:28:f6:ca:6d:51:6a:b6:d1:1b:3b:ab: d4:0a:72:2b:3f:7c:96:a6:37:a1:c8:bd:18:75:a5:d0:59:83: 05:05:cf:d7:83:e2:d5:1b:a2:61:55:78:0f:c6:5c:bb:17:35: f7:4e:eb:fd:fd:31:11:ee:c7:d5:22:88:09:21:38:9a:98:91: a2:5c:36:05:3a:30:0f:00:e6:cc:13:40:64:52:68:4d:48:b1: f8:53:aa:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqBCnU4HKY1WnluPJRp6TCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3 OTUyZDEwHhcNMjUxMTE0MDYyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTBlNGQxYmIzNTQyNzQ5OTM4OGMzMjg4MmUwMGQ5ZDRkZjM4NDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjRUoqpZuAsFOolrlOXovD52QwH+ kmQB0J9MISztXRP3M0Di6yfi2x4bhSjIr4XruGWVogqCmf4iLd06rvDWx6XOeiwN jB3Rn8RfgVikkZ1D5wjhwbYDouBCizif9aReoVQCpTrWy94VLQTQavaBqzW59eQS ZI07d60XzpRsvEhPT49drg3C2+gG1iz6gxBKWiXfHptro6i7DOqmZiOpD3xvYxY9 xXVqnfh4oSIPDdwn64/0ySJlune9qGctDJ/ayOpVVMf2htG9+G5sB8aUnTmNzFq8 24D0JLr4xX3LLARLhXWC5HWGcbQ2A2CsWm3tHRdq2N7VpslqMbwIVheZ/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBkOTRuzVCdJk4jDKILgDZ1N84QlMB8GA1UdIwQY MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt MGY1ZDM3OTdhMzI1LzEvR1E1Tkc3TlVKMG1UaU1Nb2d1QU5uVTN6aENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1 LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsoKMAwQB wY9AMA0GCSqGSIb3DQEBCwUAA4IBAQBPuX/DOoZicVVIj3BayZUkLLW+wxDtFfUa +WzekuzvSq+ykPX20ApRuEc45DSxeG2btEdAON1d0gGzVEE8oIbX6oByt+gMN2PM bPWnhwkniKSpRrvI04wkQkGSDtNXB4jdnQ6/j1BNtE26G5qwsW6YtFLqLI0m+cnb kOPyQLxTIAqzObnBBUwcoPTiK30+QwG3GO3ybt4KfZR1jrvThkwbgE/nAUWvDTs6 KPbKbVFqttEbO6vUCnIrP3yWpjehyL0YdaXQWYMFBc/Xg+LVG6JhVXgPxly7FzX3 Tuv9/TER7sfVIogJITiamJGiXDYFOjAPAObME0BkUmhNSLH4U6q0 -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:23 2025 by rpki-client