This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GQ-BGofnZviHB8txvvteGTd3uwc.roa File: GQ-BGofnZviHB8txvvteGTd3uwc.roa (raw, json) Hash identifier: d3XO3+qloWMCC6zstQnS/YxijOjtw0WV+vr5qu2ORpw= Subject key identifier: 19:0F:81:1A:87:E7:66:F8:87:07:CB:71:BE:FB:5E:19:37:77:BB:07 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A6193A80646634E15AC3F9624158FB6E1 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GQ-BGofnZviHB8txvvteGTd3uwc.roa Signing time: Sat 08 Nov 2025 03:47:37 +0000 ROA not before: Sat 08 Nov 2025 03:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206659 IP address blocks: 5.231.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:93:a8:06:46:63:4e:15:ac:3f:96:24:15:8f:b6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 8 03:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=190f811a87e766f88707cb71befb5e193777bb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:99:89:88:05:ae:92:d0:01:12:f0:a7:c3: e4:72:af:66:10:65:74:c2:74:a6:2d:df:8d:91:4d: 99:57:dd:b8:d0:2f:3a:d8:cf:a1:4c:1e:ca:bb:96: 42:3e:83:25:bb:4d:03:98:5b:74:4f:86:d5:9f:d6: 69:5f:17:68:5a:9f:4c:bb:eb:09:8e:5e:e1:e9:71: ba:7e:56:34:7e:61:23:e0:e3:7c:ee:4f:a3:29:5b: 7a:e5:2b:19:57:59:c9:af:71:3b:f4:8f:a9:7f:84: d2:bb:07:33:7b:4d:0b:42:c0:fb:3b:98:f1:3b:e8: 3c:e2:0a:ba:9f:9e:b1:1c:57:dd:9b:31:dc:68:53: eb:40:58:90:b6:63:7f:ba:01:97:c4:87:97:5e:f7: 4b:62:5d:a5:dc:21:3b:f0:b3:b2:27:9d:da:7d:ef: 44:82:e0:e2:0c:76:5a:68:4c:3d:46:39:15:e9:64: 05:57:13:da:d3:0f:2e:1b:1e:d9:f2:ba:b6:d1:06: 34:db:32:64:01:5d:f5:0b:20:cc:4d:ec:a3:be:79: ed:e6:7c:92:1a:4f:80:d4:30:de:4b:06:19:f3:7b: 54:fa:3b:06:5d:87:94:35:24:70:09:16:04:ba:64: ca:e8:5d:4f:28:16:07:aa:0b:d1:8e:9b:b6:57:c5: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:81:1A:87:E7:66:F8:87:07:CB:71:BE:FB:5E:19:37:77:BB:07 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GQ-BGofnZviHB8txvvteGTd3uwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.97.0/24 Signature Algorithm: sha256WithRSAEncryption 19:6b:c9:e2:f7:05:ea:70:4a:23:48:74:7b:87:c9:d6:89:84: ed:f3:f2:bf:df:1d:e7:fd:13:49:9d:20:95:46:9e:39:a3:70: 3e:5e:f8:cf:82:45:b3:33:73:ec:11:3a:29:f5:1e:06:ec:e5: 77:2c:02:70:d4:72:91:d7:00:65:ae:87:7a:87:c4:6e:2a:79: fc:68:5e:3d:44:dd:ee:de:0f:e2:db:3f:a2:5a:bc:0f:23:bb: be:a2:b5:ee:d8:a3:06:0c:eb:3e:f4:05:90:21:58:dd:2d:74: b8:ce:b3:53:53:77:c9:3d:2d:73:1c:6d:6e:85:17:57:e9:8f: 0a:92:d9:b6:56:24:8b:7b:29:de:13:36:67:7d:d7:cb:86:4b: 85:e7:d7:3f:f0:fb:32:e3:0c:58:78:ab:a9:57:c5:0b:53:1e: eb:03:e1:5a:f0:ed:5c:bb:b7:83:61:75:16:20:21:28:8b:bf: 65:43:a0:41:ae:c7:3d:8a:a5:bc:e5:ce:6b:1c:25:33:50:2c: e9:41:81:60:25:4d:9d:72:3a:45:76:34:4f:b3:a2:b0:83:bc: 13:95:b8:19:ef:ff:c3:55:8c:2d:59:3e:36:53:8e:a3:a8:62: bd:7e:97:42:eb:18:45:ce:20:05:81:97:18:ec:03:6c:8d:42: 0f:af:24:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZphk6gGRmNOFaw/liQVj7bhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA4MDM0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTBmODExYTg3ZTc2NmY4ODcwN2NiNzFiZWZiNWUxOTM3NzdiYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqGZiYgFrpLQARLwp8Pkcq9mEGV0 wnSmLd+NkU2ZV9240C862M+hTB7Ku5ZCPoMlu00DmFt0T4bVn9ZpXxdoWp9Mu+sJ jl7h6XG6flY0fmEj4ON87k+jKVt65SsZV1nJr3E79I+pf4TSuwcze00LQsD7O5jx O+g84gq6n56xHFfdmzHcaFPrQFiQtmN/ugGXxIeXXvdLYl2l3CE78LOyJ53afe9E guDiDHZaaEw9RjkV6WQFVxPa0w8uGx7Z8rq20QY02zJkAV31CyDMTeyjvnnt5nyS Gk+A1DDeSwYZ83tU+jsGXYeUNSRwCRYEumTK6F1PKBYHqgvRjpu2V8V3rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBkPgRqH52b4hwfLcb77Xhk3d7sHMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR1EtQkdvZm5admlIQjh0eHZ2dGVHVGQzdXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABedhMA0G CSqGSIb3DQEBCwUAA4IBAQAZa8ni9wXqcEojSHR7h8nWiYTt8/K/3x3n/RNJnSCV Rp45o3A+XvjPgkWzM3PsETop9R4G7OV3LAJw1HKR1wBlrod6h8RuKnn8aF49RN3u 3g/i2z+iWrwPI7u+orXu2KMGDOs+9AWQIVjdLXS4zrNTU3fJPS1zHG1uhRdX6Y8K ktm2ViSLeyneEzZnfdfLhkuF59c/8Psy4wxYeKupV8ULUx7rA+Fa8O1cu7eDYXUW ICEoi79lQ6BBrsc9iqW85c5rHCUzUCzpQYFgJU2dcjpFdjRPs6Kwg7wTlbgZ7//D VYwtWT42U46jqGK9fpdC6xhFziAFgZcY7ANsjUIPryQ7 -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:54 2025 by rpki-client