This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/GoKsRuNbxr5L3qFHtpnyKXAluyY.roa File: GoKsRuNbxr5L3qFHtpnyKXAluyY.roa (raw, json) Hash identifier: YvLXNuSAV/J9nOxpCJDg3XkDPCXj0rlwbWd+h+lCd+8= Subject key identifier: 1A:82:AC:46:E3:5B:C6:BE:4B:DE:A1:47:B6:99:F2:29:70:25:BB:26 Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4 Certificate serial: 019B2219196300CE3FD96330A94E0C913EA7 Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/GoKsRuNbxr5L3qFHtpnyKXAluyY.roa Signing time: Mon 15 Dec 2025 13:00:28 +0000 ROA not before: Mon 15 Dec 2025 13:00:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42707 IP address blocks: 5.57.248.0/21 maxlen: 22 5.206.208.0/20 maxlen: 21 77.75.48.0/22 maxlen: 23 83.143.76.0/22 maxlen: 24 84.39.204.0/22 maxlen: 23 91.189.224.0/21 maxlen: 22 91.195.64.0/22 maxlen: 23 109.207.72.0/22 maxlen: 23 185.148.28.0/22 maxlen: 23 185.229.80.0/22 maxlen: 23 185.231.24.0/21 maxlen: 22 185.231.24.0/22 maxlen: 23 185.231.28.0/22 maxlen: 23 185.233.212.0/22 maxlen: 23 185.236.4.0/22 maxlen: 23 185.245.88.0/22 maxlen: 23 185.247.44.0/22 maxlen: 23 185.247.48.0/22 maxlen: 23 185.248.228.0/22 maxlen: 23 185.250.136.0/22 maxlen: 23 185.252.124.0/22 maxlen: 23 185.254.48.0/22 maxlen: 23 193.33.134.0/23 maxlen: 24 193.36.164.0/22 maxlen: 23 194.49.88.0/22 maxlen: 23 195.42.224.0/22 maxlen: 23 195.42.228.0/23 maxlen: 24 2a00:5140::/32 maxlen: 32 2a00:5141::/32 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:19:63:00:ce:3f:d9:63:30:a9:4e:0c:91:3e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4 Validity Not Before: Dec 15 13:00:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a82ac46e35bc6be4bdea147b699f2297025bb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:81:aa:cb:5b:81:40:5d:d1:f3:6d:be:b6: fe:5c:02:7d:49:c4:53:ca:53:5c:6d:a0:ab:57:dd: 2c:a4:fc:79:6c:3f:8e:1e:4e:ff:45:42:1e:ee:f2: 1f:3e:4f:46:4b:59:70:12:0e:e3:0d:8d:b7:c8:b3: 0f:56:ba:6a:d0:34:47:c6:de:02:96:d7:ba:39:52: 57:28:5b:00:e6:cd:72:26:c4:93:c2:c6:a6:82:1e: 6b:fb:9e:7f:78:a3:0c:17:9e:f0:c8:76:d1:4a:87: ee:ad:db:cc:88:8d:f9:e4:1e:83:95:cd:f7:f1:74: 7f:86:3f:4a:05:35:8d:df:ee:e9:ca:40:12:77:8d: 3f:34:b5:5a:b5:af:9c:c9:0e:6c:86:56:ea:80:82: 30:0d:13:94:17:dc:a1:c2:80:2d:99:e9:51:5c:f4: cf:c9:65:73:46:23:eb:d2:26:09:9f:c2:6f:74:a9: c2:90:ce:0c:86:5c:0a:7f:de:4b:28:05:e7:e5:6f: 3d:8b:9c:6c:0a:e4:ae:8a:06:0f:06:a6:76:6f:a6: b8:fa:24:f4:d6:b6:b9:9e:00:45:ed:6c:3e:f6:0b: 03:76:79:85:76:d1:f3:6c:64:a0:d5:fc:e0:ba:30: c0:a3:94:8a:2d:02:bc:a6:44:f4:61:4c:96:22:d6: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:82:AC:46:E3:5B:C6:BE:4B:DE:A1:47:B6:99:F2:29:70:25:BB:26 X509v3 Authority Key Identifier: keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/GoKsRuNbxr5L3qFHtpnyKXAluyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.248.0/21 5.206.208.0/20 77.75.48.0/22 83.143.76.0/22 84.39.204.0/22 91.189.224.0/21 91.195.64.0/22 109.207.72.0/22 185.148.28.0/22 185.229.80.0/22 185.231.24.0/21 185.233.212.0/22 185.236.4.0/22 185.245.88.0/22 185.247.44.0-185.247.51.255 185.248.228.0/22 185.250.136.0/22 185.252.124.0/22 185.254.48.0/22 193.33.134.0/23 193.36.164.0/22 194.49.88.0/22 195.42.224.0-195.42.229.255 IPv6: 2a00:5140::/31 Signature Algorithm: sha256WithRSAEncryption 02:c2:ed:85:7c:a4:8e:ba:65:19:69:dd:17:b4:0b:0e:ff:e8: 59:79:1c:1c:8c:9b:13:16:fe:0f:28:e5:00:a4:72:58:46:56: 57:32:11:0b:2d:ec:84:79:60:11:49:a9:8a:6b:d1:2f:d2:2c: ee:d3:90:af:79:4f:ac:de:39:4d:a3:ab:64:53:1a:71:d5:15: 0f:d1:6b:29:b4:91:b9:a0:a7:28:de:48:6f:aa:54:74:d9:26: d4:f1:90:85:28:3d:5c:20:1e:c4:f3:8b:eb:82:97:41:4d:99: 2b:5f:97:d4:ff:08:24:fb:29:bb:ce:b9:14:c6:0e:34:97:cc: c5:fa:52:2b:1d:fb:da:30:72:62:69:97:5d:66:69:ae:09:cd: bc:c0:c8:e3:de:13:6e:5b:e0:95:76:34:50:95:f5:8c:95:19: 87:e9:e1:5f:84:7c:06:25:6c:5c:52:2b:e4:77:eb:a2:d9:d6: 98:b3:a9:57:80:9d:69:96:66:01:52:50:93:82:16:a4:f6:32: a7:13:91:d9:d5:f9:6d:ee:5a:2c:8b:2b:42:d9:6d:27:28:a4: 65:9e:d2:c5:b1:a8:0f:35:f6:7a:bc:d6:53:32:75:56:16:e3: f9:68:c3:81:8c:79:34:7b:1e:c4:e0:e3:d9:27:48:89:6d:1d: b4:ef:80:8c -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZsiGRljAM4/2WMwqU4MkT6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYTE5MDUwNGI2ZDllZDljMTgwOTY4NDA0MjViMTFkN2Iy MmRmZjQwHhcNMjUxMjE1MTMwMDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTgyYWM0NmUzNWJjNmJlNGJkZWExNDdiNjk5ZjIyOTcwMjViYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lqBqstbgUBd0fNtvrb+XAJ9ScRT ylNcbaCrV90spPx5bD+OHk7/RUIe7vIfPk9GS1lwEg7jDY23yLMPVrpq0DRHxt4C lte6OVJXKFsA5s1yJsSTwsamgh5r+55/eKMMF57wyHbRSofurdvMiI355B6Dlc33 8XR/hj9KBTWN3+7pykASd40/NLVata+cyQ5shlbqgIIwDROUF9yhwoAtmelRXPTP yWVzRiPr0iYJn8JvdKnCkM4MhlwKf95LKAXn5W89i5xsCuSuigYPBqZ2b6a4+iT0 1ra5ngBF7Ww+9gsDdnmFdtHzbGSg1fzgujDAo5SKLQK8pkT0YUyWItZIBwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFBqCrEbjW8a+S96hR7aZ8ilwJbsmMB8GA1UdIwQY MBaAFMGhkFBLbZ7ZwYCWhAQlsR17It/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2FHUVVFdHRudG5CZ0phRUJDV3hIWHNpM19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zODdmMjEtMTAxYi00ODdlLThhMGYt MGI4MzhhNTk5NjYyLzEvR29Lc1J1TmJ4cjVMM3FGSHRwbnlLWEFsdXlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zODdmMjEtMTAxYi00ODdlLThhMGYtMGI4MzhhNTk5NjYy LzEvd2FHUVVFdHRudG5CZ0phRUJDV3hIWHNpM19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBoQQCAAEwgZoDBAMF OfgDBAQFztADBAJNSzADBAJTj0wDBAJUJ8wDBANbveADBAJbw0ADBAJtz0gDBAK5 lBwDBAK55VADBAO55xgDBAK56dQDBAK57AQDBAK59VgwDAMEArn3LAMEArn3MAME Arn45AMEArn6iAMEArn8fAMEArn+MAMEAcEhhgMEAsEkpAMEAsIxWDAMAwQFwyrg AwQBwyrkMA0EAgACMAcDBQEqAFFAMA0GCSqGSIb3DQEBCwUAA4IBAQACwu2FfKSO umUZad0XtAsO/+hZeRwcjJsTFv4PKOUApHJYRlZXMhELLeyEeWARSamKa9Ev0izu 05CveU+s3jlNo6tkUxpx1RUP0WsptJG5oKco3khvqlR02SbU8ZCFKD1cIB7E84vr gpdBTZkrX5fU/wgk+ym7zrkUxg40l8zF+lIrHfvaMHJiaZddZmmuCc28wMjj3hNu W+CVdjRQlfWMlRmH6eFfhHwGJWxcUivkd+ui2daYs6lXgJ1plmYBUlCTghak9jKn E5HZ1flt7losiytC2W0nKKRlntLFsagPNfZ6vNZTMnVWFuP5aMOBjHk0ex7E4OPZ J0iJbR2074CM -----END CERTIFICATE-----Generated at Thu Dec 18 21:25:19 2025 by rpki-client