This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GuSX_IVIx_Ky_Xb20PItxX1jtD8.roa File: GuSX_IVIx_Ky_Xb20PItxX1jtD8.roa (raw, json) Hash identifier: Y411qndsfKn6ltfp+1nTsKlSALT52XK7w2s8hyn6/AM= Subject key identifier: 1A:E4:97:FC:85:48:C7:F2:B2:FD:76:F6:D0:F2:2D:C5:7D:63:B4:3F Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ACB32EA3535C48055CFE3C0630B5B2ECC Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GuSX_IVIx_Ky_Xb20PItxX1jtD8.roa Signing time: Fri 28 Nov 2025 16:01:42 +0000 ROA not before: Fri 28 Nov 2025 16:01:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214915 IP address blocks: 5.175.180.0/24 maxlen: 24 77.90.16.0/24 maxlen: 24 77.90.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:32:ea:35:35:c4:80:55:cf:e3:c0:63:0b:5b:2e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 28 16:01:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ae497fc8548c7f2b2fd76f6d0f22dc57d63b43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:16:35:93:cb:21:2f:d9:19:f3:a5:0b:a7: 5f:d3:15:ca:45:b0:70:c1:1f:6e:9d:68:d6:46:05: 83:1e:f4:a1:58:6e:da:2e:c2:f3:59:82:5e:6f:ec: de:26:0f:f5:5c:66:bf:f2:ca:41:c6:81:21:48:62: 76:01:27:3c:04:a1:9e:ec:51:4e:80:97:ac:76:08: e8:cc:29:df:e4:57:70:93:0d:b6:be:81:fb:08:29: 45:08:55:36:ae:bb:32:f9:58:a3:c0:ae:a7:75:3e: 58:6a:98:72:21:b8:34:4a:ca:8a:3e:aa:14:95:9c: e8:51:42:09:c4:d7:d1:a8:60:89:d6:fe:7b:91:97: c6:7c:4c:99:18:72:25:c1:ca:db:86:f8:6a:7c:b6: ef:5d:b7:e3:58:a7:17:95:34:d4:54:aa:82:9d:45: 76:8e:f2:e1:9a:60:52:93:d2:5f:16:cd:d5:33:03: af:7a:d8:e5:38:e8:af:69:bd:c3:b5:ba:1f:09:18: 81:3c:c7:ba:44:fa:57:ea:0a:9e:52:11:8e:de:8d: bc:ba:77:7d:11:cf:7b:14:48:87:33:7c:99:42:68: a4:3c:b3:65:3b:1e:e5:d7:97:2e:68:8b:af:fb:2e: 7e:c1:ac:99:58:22:a5:64:c2:a7:4c:e7:2e:72:0d: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:97:FC:85:48:C7:F2:B2:FD:76:F6:D0:F2:2D:C5:7D:63:B4:3F X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GuSX_IVIx_Ky_Xb20PItxX1jtD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.180.0/24 77.90.16.0/24 77.90.27.0/24 Signature Algorithm: sha256WithRSAEncryption c1:39:c1:20:32:d6:b1:9b:48:55:02:d6:2d:4a:3a:98:f4:b7: 64:51:5b:1f:f7:33:81:6b:3f:fc:41:10:0d:f2:d0:68:b5:0d: 58:15:ca:73:fa:b5:e1:41:28:00:ad:2a:f7:6e:a7:1e:8f:e5: 44:f7:6a:5c:ca:68:a3:97:4f:87:dd:af:96:60:fb:6f:2f:df: 79:6d:26:24:c9:fe:5c:7d:dd:29:1b:dd:0d:c2:e4:3f:a7:a8: ba:20:b1:38:ff:8f:32:5a:77:15:cd:3c:7c:d2:a1:c7:5d:30: 5e:c8:d4:2c:ea:75:25:44:12:2d:19:e4:82:39:f5:ed:c2:ca: 53:bd:d0:89:0f:14:93:4c:3d:87:70:fe:52:b7:7f:84:e6:db: 4b:e3:41:96:bd:8f:14:d5:b1:d8:08:e6:82:8b:10:0a:83:b5: 23:ee:84:4c:ae:56:b5:41:b9:e5:dd:79:9a:c2:ef:25:aa:b6: 10:ec:1e:13:d6:80:0e:2d:60:6e:11:e5:17:0e:1d:df:2c:b8: 0d:42:3c:cc:f0:19:78:79:e4:3f:b1:98:ea:f6:3d:d7:2e:9c: b6:59:a0:83:e4:3a:60:b7:3d:3b:6e:82:c7:f7:8c:de:b8:af: 1a:ca:e4:1f:e1:0c:f6:75:34:79:fd:29:8e:c5:2f:06:b8:e7: b3:c7:ed:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrLMuo1NcSAVc/jwGMLWy7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI4MTYwMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWU0OTdmYzg1NDhjN2YyYjJmZDc2ZjZkMGYyMmRjNTdkNjNiNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuoWNZPLIS/ZGfOlC6df0xXKRbBw wR9unWjWRgWDHvShWG7aLsLzWYJeb+zeJg/1XGa/8spBxoEhSGJ2ASc8BKGe7FFO gJesdgjozCnf5Fdwkw22voH7CClFCFU2rrsy+VijwK6ndT5YaphyIbg0SsqKPqoU lZzoUUIJxNfRqGCJ1v57kZfGfEyZGHIlwcrbhvhqfLbvXbfjWKcXlTTUVKqCnUV2 jvLhmmBSk9JfFs3VMwOvetjlOOivab3DtbofCRiBPMe6RPpX6gqeUhGO3o28und9 Ec97FEiHM3yZQmikPLNlOx7l15cuaIuv+y5+wayZWCKlZMKnTOcucg0vEQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBrkl/yFSMfysv129tDyLcV9Y7Q/MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR3VTWF9JVkl4X0t5X1hiMjBQSXR4WDFqdEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa+0AwQA TVoQAwQATVobMA0GCSqGSIb3DQEBCwUAA4IBAQDBOcEgMtaxm0hVAtYtSjqY9Ldk UVsf9zOBaz/8QRAN8tBotQ1YFcpz+rXhQSgArSr3bqcej+VE92pcymijl0+H3a+W YPtvL995bSYkyf5cfd0pG90NwuQ/p6i6ILE4/48yWncVzTx80qHHXTBeyNQs6nUl RBItGeSCOfXtwspTvdCJDxSTTD2HcP5St3+E5ttL40GWvY8U1bHYCOaCixAKg7Uj 7oRMrla1Qbnl3Xmawu8lqrYQ7B4T1oAOLWBuEeUXDh3fLLgNQjzM8Bl4eeQ/sZjq 9j3XLpy2WaCD5Dpgtz07boLH94zeuK8ayuQf4Qz2dTR5/SmOxS8GuOezx+2B -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:57 2025 by rpki-client