This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GUfLxU7K9YX64VdKmqrDWzGvYHQ.roa File: GUfLxU7K9YX64VdKmqrDWzGvYHQ.roa (raw, json) Hash identifier: tBWiRmBNtEmM7BJbd7P6aGrPglTQC2K+YbVXcybJ2ZQ= Subject key identifier: 19:47:CB:C5:4E:CA:F5:85:FA:E1:57:4A:9A:AA:C3:5B:31:AF:60:74 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B16EB2D1D25703329519EBE5B46C67618 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GUfLxU7K9YX64VdKmqrDWzGvYHQ.roa Signing time: Sat 13 Dec 2025 08:54:29 +0000 ROA not before: Sat 13 Dec 2025 08:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 163.5.8.0/24 maxlen: 24 163.5.28.0/24 maxlen: 24 163.5.30.0/24 maxlen: 24 163.5.38.0/24 maxlen: 24 163.5.47.0/24 maxlen: 24 163.5.53.0/24 maxlen: 24 163.5.58.0/24 maxlen: 24 163.5.59.0/24 maxlen: 24 163.5.97.0/24 maxlen: 24 163.5.106.0/24 maxlen: 24 163.5.112.0/24 maxlen: 24 163.5.118.0/24 maxlen: 24 163.5.121.0/24 maxlen: 24 163.5.129.0/24 maxlen: 24 163.5.132.0/24 maxlen: 24 163.5.139.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 163.5.146.0/24 maxlen: 24 163.5.151.0/24 maxlen: 24 163.5.157.0/24 maxlen: 24 163.5.160.0/24 maxlen: 24 163.5.167.0/24 maxlen: 24 163.5.175.0/24 maxlen: 24 163.5.178.0/24 maxlen: 24 163.5.179.0/24 maxlen: 24 163.5.182.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.196.0/24 maxlen: 24 163.5.201.0/24 maxlen: 24 163.5.203.0/24 maxlen: 24 163.5.204.0/24 maxlen: 24 163.5.205.0/24 maxlen: 24 163.5.214.0/24 maxlen: 24 163.5.218.0/24 maxlen: 24 163.5.224.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.238.0/24 maxlen: 24 163.5.241.0/24 maxlen: 24 163.5.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:eb:2d:1d:25:70:33:29:51:9e:be:5b:46:c6:76:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 13 08:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1947cbc54ecaf585fae1574a9aaac35b31af6074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:5c:61:99:b6:f2:57:17:b8:e4:b3:21:44: 72:58:74:81:40:4d:43:9c:33:fa:24:1e:a6:ec:c9: 22:82:6c:7e:ac:03:da:79:8f:04:8c:b2:2b:3c:c0: 76:48:e8:59:6a:2e:44:d2:05:c7:45:8e:c3:9f:35: eb:05:fa:23:39:b6:85:72:26:72:c9:52:94:91:7b: e5:ab:b2:d1:f6:70:35:91:69:8e:96:92:d3:b2:59: fc:7f:d2:46:48:a1:a5:be:48:7f:20:a7:af:6c:fd: be:5e:40:e4:ab:88:f3:11:2c:1c:51:b2:d6:af:3a: 08:b7:f9:c0:61:f5:b7:d0:4e:ee:17:38:52:ef:08: 3e:d9:1a:5b:d7:ee:4a:39:5d:a4:63:60:20:c5:3b: 0d:3e:ae:b4:cd:42:3f:0b:fb:e2:5b:82:31:73:cf: 71:df:8f:30:34:58:cc:c9:fd:2a:c7:af:e1:e9:63: 81:95:6e:fd:24:d8:08:ad:27:28:6d:5b:2a:e8:19: 31:3e:15:64:4b:fc:4f:90:4f:3b:84:25:6d:24:92: fa:49:9e:ed:1a:78:fb:91:a5:25:05:10:81:cd:0e: 91:57:55:92:2c:02:51:94:0e:a4:20:05:18:cf:00: 93:f1:b3:22:47:8e:54:55:ed:7e:ce:14:a5:a5:21: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:47:CB:C5:4E:CA:F5:85:FA:E1:57:4A:9A:AA:C3:5B:31:AF:60:74 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GUfLxU7K9YX64VdKmqrDWzGvYHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.8.0/24 163.5.28.0/24 163.5.30.0/24 163.5.38.0/24 163.5.47.0/24 163.5.53.0/24 163.5.58.0/23 163.5.97.0/24 163.5.106.0/24 163.5.112.0/24 163.5.118.0/24 163.5.121.0/24 163.5.129.0/24 163.5.132.0/24 163.5.139.0/24 163.5.143.0/24 163.5.146.0/24 163.5.151.0/24 163.5.157.0/24 163.5.160.0/24 163.5.167.0/24 163.5.175.0/24 163.5.178.0/23 163.5.182.0/24 163.5.189.0/24 163.5.196.0/24 163.5.201.0/24 163.5.203.0-163.5.205.255 163.5.214.0/24 163.5.218.0/24 163.5.224.0/24 163.5.228.0/24 163.5.238.0/24 163.5.241.0/24 163.5.244.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:25:bf:98:cd:20:c7:b3:b2:48:25:d2:b8:b6:7e:2a:49:4b: 53:52:7e:a0:e0:32:d2:dc:0c:5a:e5:c6:e1:1d:ed:1f:10:29: a8:32:3a:f3:62:30:7e:c5:ab:c4:53:df:9e:07:ba:50:ed:73: fc:2d:3f:ab:60:f0:12:82:1c:2f:b4:84:05:cd:47:d6:00:6f: bb:85:0d:47:19:5f:39:12:e2:5e:1b:d3:42:ae:e0:b4:1b:5c: ed:c5:f0:7a:6d:e0:dd:0e:d5:4e:ab:ab:d4:25:76:6d:12:57: df:94:20:eb:ed:54:9f:4c:8d:3c:54:27:ee:94:1b:d5:a5:62: df:24:f5:79:9f:25:0e:9c:33:34:b6:5b:6f:54:f5:44:0e:27: be:09:57:32:de:b0:53:4a:ff:e2:0d:49:8a:d1:36:2e:31:62: 13:2c:22:99:56:fc:cb:ce:58:9a:a3:2d:8d:0a:0c:4d:ff:a9: 61:e7:b8:64:d2:03:d4:e4:cd:c8:13:f2:00:5c:63:25:4e:b2: c8:17:0f:30:9c:dd:7a:5f:76:79:33:03:86:ab:14:d3:a4:95: 0c:db:e9:28:09:be:33:b8:b4:a5:75:2d:e7:ab:ed:ae:6c:b9: bb:2c:f7:53:40:bc:43:a7:0d:a1:e7:b3:0a:a8:94:fb:98:8a: 0a:49:57:e6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZsW6y0dJXAzKVGevltGxnYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjEzMDg1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTQ3Y2JjNTRlY2FmNTg1ZmFlMTU3NGE5YWFhYzM1YjMxYWY2MDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzBcYZm28lcXuOSzIURyWHSBQE1D nDP6JB6m7Mkigmx+rAPaeY8EjLIrPMB2SOhZai5E0gXHRY7DnzXrBfojObaFciZy yVKUkXvlq7LR9nA1kWmOlpLTsln8f9JGSKGlvkh/IKevbP2+XkDkq4jzESwcUbLW rzoIt/nAYfW30E7uFzhS7wg+2Rpb1+5KOV2kY2AgxTsNPq60zUI/C/viW4Ixc89x 348wNFjMyf0qx6/h6WOBlW79JNgIrScobVsq6BkxPhVkS/xPkE87hCVtJJL6SZ7t Gnj7kaUlBRCBzQ6RV1WSLAJRlA6kIAUYzwCT8bMiR45UVe1+zhSlpSF08QIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFBlHy8VOyvWF+uFXSpqqw1sxr2B0MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvR1VmTHhVN0s5WVg2NFZkS21xckRXekd2WUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCB4QQCAAEwgdoDBACj BQgDBACjBRwDBACjBR4DBACjBSYDBACjBS8DBACjBTUDBAGjBToDBACjBWEDBACj BWoDBACjBXADBACjBXYDBACjBXkDBACjBYEDBACjBYQDBACjBYsDBACjBY8DBACj BZIDBACjBZcDBACjBZ0DBACjBaADBACjBacDBACjBa8DBAGjBbIDBACjBbYDBACj Bb0DBACjBcQDBACjBckwDAMEAKMFywMEAaMFzAMEAKMF1gMEAKMF2gMEAKMF4AME AKMF5AMEAKMF7gMEAKMF8QMEAKMF9DANBgkqhkiG9w0BAQsFAAOCAQEAbSW/mM0g x7OySCXSuLZ+KklLU1J+oOAy0twMWuXG4R3tHxApqDI682IwfsWrxFPfnge6UO1z /C0/q2DwEoIcL7SEBc1H1gBvu4UNRxlfORLiXhvTQq7gtBtc7cXwem3g3Q7VTqur 1CV2bRJX35Qg6+1Un0yNPFQn7pQb1aVi3yT1eZ8lDpwzNLZbb1T1RA4nvglXMt6w U0r/4g1JitE2LjFiEywimVb8y85YmqMtjQoMTf+pYee4ZNID1OTNyBPyAFxjJU6y yBcPMJzdel92eTMDhqsU06SVDNvpKAm+M7i0pXUt56vtrmy5uyz3U0C8Q6cNoeez CqiU+5iKCklX5g== -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:56 2025 by rpki-client