This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gx-XSZas9jr6ze7bfOvn71tzktY.roa File: gx-XSZas9jr6ze7bfOvn71tzktY.roa (raw, json) Hash identifier: REUUCDRnZb15bcZTZfEcMjsXf8HPRRz7HUF2oUS2c+g= Subject key identifier: 83:1F:97:49:96:AC:F6:3A:FA:CD:EE:DB:7C:EB:E7:EF:5B:73:92:D6 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39201F62355B301053B2B9E8EFAC11 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gx-XSZas9jr6ze7bfOvn71tzktY.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35916 IP address blocks: 163.5.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:20:1f:62:35:5b:30:10:53:b2:b9:e8:ef:ac:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=831f974996acf63afacdeedb7cebe7ef5b7392d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:f6:39:02:56:e5:01:e9:4c:c9:1d:ed:0b: ea:66:37:68:c8:8b:bd:0a:86:a6:89:7c:a3:8c:bf: a1:44:76:cf:ac:6f:ad:21:a1:26:87:2d:1a:5e:c2: a2:22:b8:7e:18:25:63:70:20:c3:6e:29:93:19:25: db:19:4c:80:fb:d3:c7:f6:ba:27:73:ca:69:cc:09: d1:1f:11:50:c2:59:75:71:2a:0b:98:d7:fc:60:0d: 37:55:da:60:70:fb:95:e6:92:b7:f1:30:f5:29:49: 1a:45:d3:cd:32:02:ff:b5:8d:a5:1f:5f:f9:15:52: ef:cc:b5:9f:06:f3:6b:e6:22:6a:d5:96:b2:e3:e7: c0:92:3a:cc:28:03:19:23:cb:7f:22:d3:7b:20:ff: aa:43:ec:10:28:02:d0:6f:b7:29:02:39:ec:e7:1c: f4:e5:12:a0:19:27:3b:11:d2:65:ee:45:71:02:f3: 73:e7:1a:f3:9b:cb:ab:a8:7f:56:f7:b3:2a:01:62: d0:60:44:1e:fb:6a:d9:7d:3c:51:c0:8b:3a:a2:a3: d5:2c:fb:dc:b3:3d:76:a7:69:73:01:77:21:6f:89: a2:88:db:eb:60:58:38:f8:3b:5a:f2:d9:b6:b8:3b: 29:fe:a5:5d:2d:62:4d:0b:1d:7c:5d:02:72:13:66: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1F:97:49:96:AC:F6:3A:FA:CD:EE:DB:7C:EB:E7:EF:5B:73:92:D6 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gx-XSZas9jr6ze7bfOvn71tzktY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.202.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:79:5c:54:0f:c8:92:aa:63:ff:23:73:cb:f7:24:80:55:db: dc:4b:50:a0:85:79:e0:71:f3:9b:66:0d:db:53:96:54:a3:e0: 1a:81:9f:bd:a2:fb:ac:b5:75:15:9c:10:03:37:9f:59:a4:ae: 9f:00:eb:bb:13:b8:f1:57:53:93:7f:c2:09:5e:74:35:7b:7b: 9f:3f:f0:c2:ac:0d:70:ed:d8:c1:45:07:50:e2:a6:bf:1b:9e: a6:d3:a5:27:e9:16:36:c7:06:3b:a0:68:dc:ad:cf:71:ed:66: 56:c1:db:e7:f0:ef:4f:9e:e0:a2:a0:b2:3f:f0:3d:a7:68:05: 6f:fb:3a:c9:5b:ee:e9:66:1e:53:b6:24:ec:72:63:8a:b9:8d: ca:0e:2b:cb:91:64:53:a3:ed:94:a3:31:c1:98:71:be:32:52: 9b:4c:ea:fe:49:73:cf:30:62:52:30:03:72:90:0a:01:e2:58: 06:03:2a:bf:67:ac:0a:21:4e:58:29:bd:b2:02:31:93:c1:c5: 8b:33:1f:f1:40:cc:79:fb:af:9d:78:56:02:f1:a4:09:b3:e0: 85:78:3d:79:2b:d6:cd:c1:e0:bd:7a:71:7f:86:bf:f4:4e:4a: bd:3d:37:fa:90:94:57:16:aa:f3:60:70:0d:94:a8:67:50:19: 28:ef:8c:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSAfYjVbMBBTsrno76wRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzFmOTc0OTk2YWNmNjNhZmFjZGVlZGI3Y2ViZTdlZjViNzM5MmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo72OQJW5QHpTMkd7QvqZjdoyIu9 CoamiXyjjL+hRHbPrG+tIaEmhy0aXsKiIrh+GCVjcCDDbimTGSXbGUyA+9PH9ron c8ppzAnRHxFQwll1cSoLmNf8YA03VdpgcPuV5pK38TD1KUkaRdPNMgL/tY2lH1/5 FVLvzLWfBvNr5iJq1Zay4+fAkjrMKAMZI8t/ItN7IP+qQ+wQKALQb7cpAjns5xz0 5RKgGSc7EdJl7kVxAvNz5xrzm8urqH9W97MqAWLQYEQe+2rZfTxRwIs6oqPVLPvc sz12p2lzAXchb4miiNvrYFg4+Dta8tm2uDsp/qVdLWJNCx18XQJyE2bTnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMfl0mWrPY6+s3u23zr5+9bc5LWMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZ3gtWFNaYXM5anI2emU3YmZPdm43MXR6a3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXKMA0G CSqGSIb3DQEBCwUAA4IBAQBveVxUD8iSqmP/I3PL9ySAVdvcS1CghXngcfObZg3b U5ZUo+AagZ+9ovustXUVnBADN59ZpK6fAOu7E7jxV1OTf8IJXnQ1e3ufP/DCrA1w 7djBRQdQ4qa/G56m06Un6RY2xwY7oGjcrc9x7WZWwdvn8O9PnuCioLI/8D2naAVv +zrJW+7pZh5TtiTscmOKuY3KDivLkWRTo+2UozHBmHG+MlKbTOr+SXPPMGJSMANy kAoB4lgGAyq/Z6wKIU5YKb2yAjGTwcWLMx/xQMx5+6+deFYC8aQJs+CFeD15K9bN weC9enF/hr/0Tkq9PTf6kJRXFqrzYHANlKhnUBko74wk -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:40 2026 by rpki-client