This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/gu3gbqmYc42MBrN2tTrBxhokk-w.roa File: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (raw, json) Hash identifier: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ= Subject key identifier: 82:ED:E0:6E:A9:98:73:8D:8C:06:B3:76:B5:3A:C1:C6:1A:24:93:EC Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Certificate serial: 019B7D5CE15769CAB7E9B237B9D820F84ED5 Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/gu3gbqmYc42MBrN2tTrBxhokk-w.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 80.249.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e1:57:69:ca:b7:e9:b2:37:b9:d8:20:f8:4e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82ede06ea998738d8c06b376b53ac1c61a2493ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bd:cc:c0:c7:1d:eb:e2:bb:21:50:02:e7:cf: d5:24:6b:0a:be:b4:7f:1a:d8:78:a2:a3:32:66:91: bd:2a:0f:a7:84:02:f5:cc:dc:b7:3a:4b:80:ac:37: 14:b0:3d:74:ac:08:9c:1c:8c:33:98:d9:4d:57:c7: 2a:0c:cb:9f:0a:15:83:ba:7e:11:d6:48:05:e2:d1: 41:e3:63:d5:b9:fb:97:d5:be:6b:fe:f5:2a:2f:1e: c5:a4:da:db:b6:57:59:c0:a4:fb:9a:b8:9a:e8:8c: ef:df:e0:c3:da:78:79:48:17:9f:f0:76:55:4a:8a: ff:ed:95:e9:bb:8a:bd:7f:23:48:91:4e:a8:65:60: 82:83:ef:ed:c4:cf:56:5f:c9:d2:85:21:8a:da:25: 86:39:4f:d3:64:a1:0e:70:04:4c:74:54:2b:c3:cc: 28:f6:9d:7e:87:7d:4a:dd:22:04:a2:1f:f3:62:15: 6d:52:4e:58:95:e3:5a:8b:e2:f0:44:c8:44:90:3a: 2d:54:73:51:39:80:cf:89:d8:08:83:e0:c8:d6:0d: 46:01:e5:4e:1a:fa:49:f1:10:56:0e:92:2d:67:70: 93:6a:25:20:e5:ac:c7:1c:a1:48:41:9c:1a:ce:79: ae:44:e0:43:0d:16:d8:0a:80:8a:a9:b6:68:54:55: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:ED:E0:6E:A9:98:73:8D:8C:06:B3:76:B5:3A:C1:C6:1A:24:93:EC X509v3 Authority Key Identifier: keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/gu3gbqmYc42MBrN2tTrBxhokk-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.249.121.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:df:fe:d8:63:67:9d:58:9b:f1:14:ae:92:34:d3:0b:0a:ce: 2b:09:98:17:36:de:32:a1:8b:8d:70:e2:60:c8:83:7c:36:8f: 98:69:21:e3:03:31:ea:d1:5f:4b:c7:ed:33:a2:4d:46:12:06: ac:91:21:31:b5:6d:08:09:10:6a:74:78:ed:90:54:cd:9d:23: 38:6f:43:19:14:d7:66:f5:f3:17:7f:f4:86:ea:43:54:4f:10: 7b:8a:39:97:90:f8:7c:af:60:c6:77:4d:99:ad:cd:ec:38:31: 14:66:98:e8:85:9a:22:04:f1:19:54:de:95:ae:a4:4e:1c:2a: 84:f7:49:06:49:43:4f:67:10:77:4f:8f:79:0f:8a:35:07:a1: 14:41:15:f1:44:ca:07:ae:ed:24:32:e4:33:12:f8:4b:30:83: 96:18:c7:ec:e4:5e:0b:5a:64:e2:ca:47:4d:8a:c4:7e:22:03: 2a:90:c1:4e:11:b1:50:9f:3a:55:8f:bb:5d:a1:99:0f:b5:01: 8c:33:99:36:35:84:e7:df:e7:b0:15:6a:cf:f8:2b:b4:99:60: a5:c7:ee:86:60:b5:4e:c4:ca:62:07:11:a1:9a:8c:53:39:95: a0:63:93:e8:2c:ee:fa:5d:ca:63:cc:23:dd:1e:d0:53:3c:1c: a9:be:5b:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOFXacq36bI3udgg+E7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm ZTJjNTIwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmVkZTA2ZWE5OTg3MzhkOGMwNmIzNzZiNTNhYzFjNjFhMjQ5M2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b3MwMcd6+K7IVAC58/VJGsKvrR/ Gth4oqMyZpG9Kg+nhAL1zNy3OkuArDcUsD10rAicHIwzmNlNV8cqDMufChWDun4R 1kgF4tFB42PVufuX1b5r/vUqLx7FpNrbtldZwKT7mria6Izv3+DD2nh5SBef8HZV Sor/7ZXpu4q9fyNIkU6oZWCCg+/txM9WX8nShSGK2iWGOU/TZKEOcARMdFQrw8wo 9p1+h31K3SIEoh/zYhVtUk5YleNai+LwRMhEkDotVHNROYDPidgIg+DI1g1GAeVO GvpJ8RBWDpItZ3CTaiUg5azHHKFIQZwaznmuROBDDRbYCoCKqbZoVFW+pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFILt4G6pmHONjAazdrU6wcYaJJPsMB8GA1UdIwQY MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt OWYzYzA5YmI3NDFjLzEvZ3UzZ2JxbVljNDJNQnJOMnRUckJ4aG9ray13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPl5MA0G CSqGSIb3DQEBCwUAA4IBAQBc3/7YY2edWJvxFK6SNNMLCs4rCZgXNt4yoYuNcOJg yIN8No+YaSHjAzHq0V9Lx+0zok1GEgaskSExtW0ICRBqdHjtkFTNnSM4b0MZFNdm 9fMXf/SG6kNUTxB7ijmXkPh8r2DGd02Zrc3sODEUZpjohZoiBPEZVN6VrqROHCqE 90kGSUNPZxB3T495D4o1B6EUQRXxRMoHru0kMuQzEvhLMIOWGMfs5F4LWmTiykdN isR+IgMqkMFOEbFQnzpVj7tdoZkPtQGMM5k2NYTn3+ewFWrP+Cu0mWClx+6GYLVO xMpiBxGhmoxTOZWgY5PoLO76XcpjzCPdHtBTPBypvlvk -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:49 2026 by rpki-client