This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/GuPly7j8d_8hrdV6973zg9KyNI8.roa File: GuPly7j8d_8hrdV6973zg9KyNI8.roa (raw, json) Hash identifier: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM= Subject key identifier: 1A:E3:E5:CB:B8:FC:77:FF:21:AD:D5:7A:F7:BD:F3:83:D2:B2:34:8F Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C136020C8CCC247A72E3FA45E5836F9 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/GuPly7j8d_8hrdV6973zg9KyNI8.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210141 IP address blocks: 188.213.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:60:20:c8:cc:c2:47:a7:2e:3f:a4:5e:58:36:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ae3e5cbb8fc77ff21add57af7bdf383d2b2348f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:34:d8:08:a0:10:13:b8:b5:3b:93:44:4f: 6c:f1:38:fd:92:fc:3e:69:42:17:44:e6:d0:0e:4e: 19:c3:26:3f:f4:98:f6:ef:a4:08:dd:5a:ab:2e:02: f2:2c:65:27:c4:12:b6:9b:73:f0:09:7a:34:b5:07: 5e:d9:e9:09:03:20:00:08:dd:e1:7f:b2:71:a9:3d: 1c:e2:79:d5:6f:2b:63:cc:89:fa:59:16:2e:7c:57: 49:b8:06:7f:ef:72:ce:ae:27:b4:d6:3b:4c:0e:31: 34:b9:74:ef:94:2d:bf:13:32:3e:a4:c0:65:02:be: f8:c6:5a:6b:1c:7b:a1:f7:2d:aa:ed:2c:4d:90:d9: 67:c4:16:fb:e2:aa:7e:64:96:3a:76:3d:73:98:69: 07:b0:0b:7b:f4:a5:eb:a2:f4:8b:22:b5:08:a5:c6: ed:e3:34:fc:0e:0d:b8:f2:a1:9f:a4:93:8c:c6:8d: f4:e4:7d:08:ed:d6:fb:5f:a6:35:08:d4:03:d5:4c: fe:8f:bb:13:c9:91:12:74:49:0e:1f:05:ca:55:5c: 6c:e0:55:fc:a4:11:b7:3f:61:fb:40:85:71:c1:87: 5b:87:6a:02:bd:3e:9a:4c:0a:d5:d4:54:2b:11:d4: 8b:2f:f6:ac:e8:bb:17:10:cb:ad:1d:86:2f:8f:dd: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E3:E5:CB:B8:FC:77:FF:21:AD:D5:7A:F7:BD:F3:83:D2:B2:34:8F X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/GuPly7j8d_8hrdV6973zg9KyNI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.213.213.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:93:b1:f7:c3:4c:3e:53:6c:89:56:f9:ec:24:1f:99:1e:c3: 24:77:a7:ba:a2:88:b9:6e:81:ad:00:b9:62:de:3e:c0:cc:50: d9:e5:b0:63:8e:d4:65:b5:55:f5:0b:1d:b1:b6:56:50:24:64: b6:72:33:f1:d5:79:e2:82:1f:4e:88:e4:2b:c9:77:b6:db:65: a2:39:46:38:2b:7f:45:9f:f1:d9:3d:5d:2a:1e:a7:ee:e7:89: 0b:b5:63:92:88:3b:37:49:9e:dd:ef:a2:7e:cd:c8:5d:90:4d: 8d:1e:79:2d:8b:f7:93:94:19:9e:0c:4d:ae:79:7d:15:d3:66: b6:c2:9d:ba:53:36:ec:50:87:2c:2b:27:fa:70:a1:a4:5d:e0: 99:59:fa:88:cc:0c:13:1f:89:8a:f7:e4:0d:b2:96:01:bb:98: d2:39:de:cd:db:d1:d6:de:b9:70:51:1e:73:71:90:73:ac:99: a6:1d:48:06:98:86:e7:ed:e2:6e:6f:e0:75:4d:e3:86:a8:5b: c4:c9:f3:b6:9a:24:ec:eb:f9:2f:47:2b:99:49:bc:2d:d7:8e: 27:f8:57:ec:ec:2a:f5:1f:f8:31:7a:9b:c7:0b:3d:e3:30:b0: db:56:eb:60:16:e8:f3:7c:04:f5:11:7e:30:7c:38:3c:36:00: d8:b3:db:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2AgyMzCR6cuP6ReWDb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWUzZTVjYmI4ZmM3N2ZmMjFhZGQ1N2FmN2JkZjM4M2QyYjIzNDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fY02AigEBO4tTuTRE9s8Tj9kvw+ aUIXRObQDk4ZwyY/9Jj276QI3VqrLgLyLGUnxBK2m3PwCXo0tQde2ekJAyAACN3h f7JxqT0c4nnVbytjzIn6WRYufFdJuAZ/73LOrie01jtMDjE0uXTvlC2/EzI+pMBl Ar74xlprHHuh9y2q7SxNkNlnxBb74qp+ZJY6dj1zmGkHsAt79KXrovSLIrUIpcbt 4zT8Dg248qGfpJOMxo305H0I7db7X6Y1CNQD1Uz+j7sTyZESdEkOHwXKVVxs4FX8 pBG3P2H7QIVxwYdbh2oCvT6aTArV1FQrEdSLL/as6LsXEMutHYYvj91yswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrj5cu4/Hf/Ia3Veve984PSsjSPMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvR3VQbHk3ajhkXzhocmRWNjk3M3pnOUt5Tkk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNXVMA0G CSqGSIb3DQEBCwUAA4IBAQCbk7H3w0w+U2yJVvnsJB+ZHsMkd6e6ooi5boGtALli 3j7AzFDZ5bBjjtRltVX1Cx2xtlZQJGS2cjPx1Xnigh9OiOQryXe222WiOUY4K39F n/HZPV0qHqfu54kLtWOSiDs3SZ7d76J+zchdkE2NHnkti/eTlBmeDE2ueX0V02a2 wp26UzbsUIcsKyf6cKGkXeCZWfqIzAwTH4mK9+QNspYBu5jSOd7N29HW3rlwUR5z cZBzrJmmHUgGmIbn7eJub+B1TeOGqFvEyfO2miTs6/kvRyuZSbwt144n+Ffs7Cr1 H/gxepvHCz3jMLDbVutgFujzfAT1EX4wfDg8NgDYs9us -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:41 2026 by rpki-client