This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GU-7utHF6YlKZlPkxSQPc3Ttv7E.roa File: GU-7utHF6YlKZlPkxSQPc3Ttv7E.roa (raw, json) Hash identifier: JxAla5MDVteHv831R06yWlmTcWKTE8tYI9m3iIlA0i0= Subject key identifier: 19:4F:BB:BA:D1:C5:E9:89:4A:66:53:E4:C5:24:0F:73:74:ED:BF:B1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E8C9ED788ED7BEEDB1622CA090D8 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GU-7utHF6YlKZlPkxSQPc3Ttv7E.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201749 IP address blocks: 5.175.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e8:c9:ed:78:8e:d7:be:ed:b1:62:2c:a0:90:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=194fbbbad1c5e9894a6653e4c5240f7374edbfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:a9:ae:1e:c6:9f:39:88:26:73:0f:27:77: f3:19:3c:f1:96:02:f5:14:30:27:fd:6f:e3:c0:28: 54:89:a8:79:06:0a:7f:3c:39:78:03:8b:8d:67:0c: df:58:a3:c9:07:3d:8c:52:be:58:14:8b:46:b9:68: 9d:b1:66:96:0c:f6:1e:c1:c3:68:ae:b8:0c:7e:71: c8:8e:c2:7e:4e:63:a3:f3:10:7d:de:af:02:6f:4f: a1:8b:40:ea:75:bd:b8:aa:89:8b:a2:64:25:13:05: 04:38:33:21:65:60:ad:01:d8:a3:79:cc:ac:69:0b: c3:63:08:38:39:c8:ac:5e:8e:6d:89:e3:9b:67:29: 9a:ae:f8:17:47:3c:46:d7:d7:bf:7c:e3:fc:a8:2f: 5f:21:67:f2:0d:99:bb:9f:db:97:b6:85:ef:02:16: 8a:ed:ea:d3:15:03:41:c0:99:cd:64:d4:29:ba:4a: 6e:dd:c9:09:c5:af:34:89:4a:e9:df:1b:12:db:b6: 18:ae:28:6d:b7:1e:52:8a:b9:1b:e7:1d:44:15:0e: 5b:5e:33:21:83:4f:d5:d4:d4:e2:c5:90:b6:cd:07: 06:f0:16:12:d6:3b:59:a4:ee:b5:5a:5a:f7:38:93: 4f:91:7a:41:20:22:8d:30:fe:a2:03:fa:3a:e6:d7: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4F:BB:BA:D1:C5:E9:89:4A:66:53:E4:C5:24:0F:73:74:ED:BF:B1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GU-7utHF6YlKZlPkxSQPc3Ttv7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.159.0/24 Signature Algorithm: sha256WithRSAEncryption dd:a8:bd:7e:fb:ad:e3:e1:f8:90:dc:14:6d:fc:1b:77:14:b9: 1f:c4:b3:30:9e:20:38:14:87:6e:c8:83:22:1a:57:d1:36:c7: 80:51:bd:eb:3a:f6:b4:3d:05:6a:1d:38:57:aa:3d:76:da:2a: 82:d0:b4:d9:6a:93:f8:be:7a:55:78:f6:32:76:b5:3d:6f:21: 73:1a:b0:3c:77:12:3d:4c:7f:b6:61:4e:66:b0:ac:cb:57:ad: 6a:c2:9a:bc:30:00:a6:b7:c7:fe:0d:5a:2d:27:92:41:01:eb: ba:f2:98:25:cf:46:bf:02:28:45:e8:9f:ea:7f:87:32:7f:4c: 36:14:8c:69:50:d4:3d:2c:7d:ad:17:4c:a5:47:3b:2a:da:65: 74:fc:a4:3e:6e:81:13:95:62:2f:0f:98:9a:61:6a:db:7e:ec: 96:ff:8d:95:9a:74:fb:3b:61:93:e9:3c:5a:12:1d:61:79:06: be:0d:6e:09:dc:0b:ce:10:3f:db:6d:06:7e:fa:d0:41:08:8d: 40:1b:f2:fd:6e:65:6a:9c:39:3d:ca:51:cf:ea:65:32:c7:78: d5:c3:8f:cf:88:57:a2:76:03:36:dd:9b:d0:c9:2c:c8:ed:3c: dd:21:8a:ea:72:c8:01:60:be:1a:8b:14:9b:d6:37:bc:4d:f6: f4:1e:01:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EujJ7XiO177tsWIsoJDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTRmYmJiYWQxYzVlOTg5NGE2NjUzZTRjNTI0MGY3Mzc0ZWRiZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry+prh7GnzmIJnMPJ3fzGTzxlgL1 FDAn/W/jwChUiah5Bgp/PDl4A4uNZwzfWKPJBz2MUr5YFItGuWidsWaWDPYewcNo rrgMfnHIjsJ+TmOj8xB93q8Cb0+hi0Dqdb24qomLomQlEwUEODMhZWCtAdijecys aQvDYwg4OcisXo5tieObZymarvgXRzxG19e/fOP8qC9fIWfyDZm7n9uXtoXvAhaK 7erTFQNBwJnNZNQpukpu3ckJxa80iUrp3xsS27YYrihttx5Sirkb5x1EFQ5bXjMh g0/V1NTixZC2zQcG8BYS1jtZpO61Wlr3OJNPkXpBICKNMP6iA/o65tdsQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBlPu7rRxemJSmZT5MUkD3N07b+xMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR1UtN3V0SEY2WWxLWmxQa3hTUVBjM1R0djdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+fMA0G CSqGSIb3DQEBCwUAA4IBAQDdqL1++63j4fiQ3BRt/Bt3FLkfxLMwniA4FIduyIMi GlfRNseAUb3rOva0PQVqHThXqj122iqC0LTZapP4vnpVePYydrU9byFzGrA8dxI9 TH+2YU5msKzLV61qwpq8MACmt8f+DVotJ5JBAeu68pglz0a/AihF6J/qf4cyf0w2 FIxpUNQ9LH2tF0ylRzsq2mV0/KQ+boETlWIvD5iaYWrbfuyW/42VmnT7O2GT6Txa Eh1heQa+DW4J3AvOED/bbQZ++tBBCI1AG/L9bmVqnDk9ylHP6mUyx3jVw4/PiFei dgM23ZvQySzI7TzdIYrqcsgBYL4aixSb1je8Tfb0HgHx -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:12 2026 by rpki-client