This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/gux-IxdkibcThQl39PWiMsakK0g.roa File: gux-IxdkibcThQl39PWiMsakK0g.roa (raw, json) Hash identifier: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E= Subject key identifier: 82:EC:7E:23:17:64:89:B7:13:85:09:77:F4:F5:A2:32:C6:A4:2B:48 Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5 Certificate serial: 019B79EC68502034CA001DF9A45E2DB68E0E Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/gux-IxdkibcThQl39PWiMsakK0g.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200525 IP address blocks: 185.68.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:68:50:20:34:ca:00:1d:f9:a4:5e:2d:b6:8e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5 Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82ec7e23176489b713850977f4f5a232c6a42b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:10:15:53:31:fa:5e:6d:54:91:1b:60:46: da:ff:90:12:5b:bf:8f:fa:a0:a4:e3:28:d9:31:86: de:ee:7d:c8:2a:f2:0b:c7:73:a9:b2:ea:ba:30:0a: e6:48:7a:b5:82:ff:c3:66:5f:a8:88:d6:34:57:24: fc:9e:df:9d:94:36:53:93:69:3e:bb:a8:33:f5:dd: 8a:50:b8:40:d5:b5:7b:38:cb:a3:14:57:43:5b:49: 84:72:1b:13:ef:25:05:2c:b1:2d:91:94:71:e9:52: f7:d2:64:0c:8d:12:58:80:22:41:0e:50:02:94:65: 9c:83:f6:32:76:40:28:cb:aa:cb:15:61:c5:90:5c: b9:f4:32:a8:b1:f0:2f:ae:41:16:4b:79:69:6d:e9: 88:d8:05:92:8f:bd:27:3d:9e:0e:46:08:b1:e1:13: e8:c1:07:49:76:26:66:a7:17:20:46:a9:cb:82:f1: 1e:e1:a3:31:7c:15:ef:58:6f:f4:69:00:26:2d:61: f8:19:95:e9:45:ad:1b:87:4b:a1:77:f8:de:62:3d: a4:bf:0f:62:36:57:bf:4c:4e:55:ab:6d:3b:12:77: 3f:1d:f4:d9:f1:55:da:5f:87:e7:d8:c8:da:96:95: 4d:2e:dc:d9:d2:9a:e5:f6:79:9c:58:5e:f8:ae:7c: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EC:7E:23:17:64:89:B7:13:85:09:77:F4:F5:A2:32:C6:A4:2B:48 X509v3 Authority Key Identifier: keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/gux-IxdkibcThQl39PWiMsakK0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.16.0/22 Signature Algorithm: sha256WithRSAEncryption 77:f2:59:8a:a2:ba:f0:36:a1:2d:7e:2b:8c:24:48:ba:f4:45: 57:88:c6:be:ab:59:94:4a:1f:09:b4:d3:dd:9a:5e:91:71:dc: 02:15:17:a0:f6:6d:fa:ca:33:4c:c4:d1:97:0b:8d:18:db:73: 50:9f:bb:47:19:9a:53:0b:a8:be:79:f0:84:cc:fe:60:40:da: f9:f9:03:8d:53:0c:3e:df:a9:3f:93:c4:4d:f2:37:6c:98:e5: 68:34:5a:fb:0e:f7:e6:36:0b:6a:df:c4:d3:20:a8:46:61:ad: 09:bc:86:e2:4d:24:4b:fd:bb:b0:31:b5:e2:f8:55:f9:eb:09: 58:a4:aa:b8:3e:ea:ff:1b:5d:30:ff:69:42:6d:cf:3a:c6:1a: 39:c2:10:68:86:13:7c:ad:67:19:a6:2d:33:6d:c7:e3:cd:4c: 93:ef:fe:d2:6f:32:f5:bb:ac:2c:48:a7:0f:da:a1:3f:ca:31: 4c:12:71:fc:19:b8:1b:f3:66:35:76:0d:cd:75:2f:f8:61:2e: f6:1d:d5:d7:03:8e:da:2f:c5:44:d6:7e:0b:29:1a:c2:40:a2: 43:ac:88:5d:ce:fa:97:f3:dd:cb:83:2c:71:89:e5:ac:50:da: 4e:ab:4b:b5:45:1d:b6:95:c7:84:f2:e8:22:9b:0f:35:08:fd: 7d:af:0d:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GhQIDTKAB35pF4tto4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOGEwZTBiMWIyMWYwOTMzMzNjMDc0ODE0NWIxNjI4NDE4 Y2YyYjUwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmVjN2UyMzE3NjQ4OWI3MTM4NTA5NzdmNGY1YTIzMmM2YTQyYjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oEQFVMx+l5tVJEbYEba/5ASW7+P +qCk4yjZMYbe7n3IKvILx3Opsuq6MArmSHq1gv/DZl+oiNY0VyT8nt+dlDZTk2k+ u6gz9d2KULhA1bV7OMujFFdDW0mEchsT7yUFLLEtkZRx6VL30mQMjRJYgCJBDlAC lGWcg/YydkAoy6rLFWHFkFy59DKosfAvrkEWS3lpbemI2AWSj70nPZ4ORgix4RPo wQdJdiZmpxcgRqnLgvEe4aMxfBXvWG/0aQAmLWH4GZXpRa0bh0uhd/jeYj2kvw9i Nle/TE5Vq207Enc/HfTZ8VXaX4fn2MjalpVNLtzZ0prl9nmcWF74rnxp5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFILsfiMXZIm3E4UJd/T1ojLGpCtIMB8GA1UdIwQY MBaAFKyKDgsbIfCTMzwHSBRbFihBjPK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMt ZGI4ZWZmMWIxMWEwLzEvZ3V4LUl4ZGtpYmNUaFFsMzlQV2lNc2FrSzBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMtZGI4ZWZmMWIxMWEw LzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUQQMA0G CSqGSIb3DQEBCwUAA4IBAQB38lmKorrwNqEtfiuMJEi69EVXiMa+q1mUSh8JtNPd ml6RcdwCFReg9m36yjNMxNGXC40Y23NQn7tHGZpTC6i+efCEzP5gQNr5+QONUww+ 36k/k8RN8jdsmOVoNFr7DvfmNgtq38TTIKhGYa0JvIbiTSRL/buwMbXi+FX56wlY pKq4Pur/G10w/2lCbc86xho5whBohhN8rWcZpi0zbcfjzUyT7/7SbzL1u6wsSKcP 2qE/yjFMEnH8Gbgb82Y1dg3NdS/4YS72HdXXA47aL8VE1n4LKRrCQKJDrIhdzvqX 893LgyxxieWsUNpOq0u1RR22lceE8ugimw81CP19rw0k -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:56 2026 by rpki-client