This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa File: GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa (raw, json) Hash identifier: zDxdPWOaOyVyBd2CSMyYPVbN3CHQHLMBOzpB+fsTOpQ= Subject key identifier: 19:49:16:19:4F:B9:61:24:96:C8:FA:CE:C2:AF:80:45:09:2F:3F:13 Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf Certificate serial: 019B7758C69BB777B65A797CB5B8196EF74F Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198286 IP address blocks: 91.233.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c6:9b:b7:77:b6:5a:79:7c:b5:b8:19:6e:f7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=194916194fb9612496c8facec2af8045092f3f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:9d:2e:0e:5b:e2:0b:44:25:47:02:1d:21: f9:55:3d:88:42:3e:f6:e5:d9:3b:6a:a7:38:78:7d: 73:84:97:ec:a9:64:a4:58:f3:51:2a:b3:b8:16:5a: 90:a2:40:66:cd:71:dc:11:7f:ad:ea:c3:a9:f0:ad: 4c:a0:10:9b:e6:88:18:f6:67:40:2c:b1:fb:ec:28: f3:0a:6a:84:60:47:df:44:bc:45:25:53:4f:70:5b: da:ba:7b:d9:55:ca:07:0c:13:c8:c8:d5:84:ff:98: dc:e6:65:5e:aa:82:f4:43:11:5c:bd:a3:7b:2c:48: fc:71:c3:1f:5e:8d:71:39:c6:48:78:da:2e:54:6d: c6:01:d4:23:dd:24:4c:5d:7a:84:8f:d1:62:0e:34: c5:3f:23:1d:bb:6d:f7:3f:80:11:87:2f:c8:1f:20: 99:2d:e1:7b:f9:45:5c:16:95:0f:8e:b1:1c:41:80: e0:af:1c:63:46:7a:2a:75:35:41:db:46:3b:29:0c: f1:ef:8c:f2:3b:8a:34:51:91:22:7e:1d:51:d0:3d: 13:91:cb:14:56:a6:59:db:72:72:05:15:2e:4a:18: eb:a6:d4:e8:f2:48:b9:61:be:f8:d6:21:9d:bc:9b: c2:b5:0a:bb:0e:49:66:cc:bc:c3:0d:2f:16:f2:ef: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:49:16:19:4F:B9:61:24:96:C8:FA:CE:C2:AF:80:45:09:2F:3F:13 X509v3 Authority Key Identifier: keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.51.0/24 Signature Algorithm: sha256WithRSAEncryption b1:3a:c5:8f:e0:a0:0b:d2:af:ba:30:b5:03:cf:b9:ba:c1:35: e4:e2:dd:de:d6:14:a6:52:48:4d:f0:4f:02:fb:e9:98:ec:9a: 10:e8:c7:0e:2c:07:3a:79:3b:5f:f4:22:4b:1f:1a:ae:a0:b7: 57:00:f9:0c:4c:3c:a3:2e:79:3d:68:36:13:0c:f2:ca:47:33: eb:6a:d5:c8:c1:37:0b:73:78:29:95:7e:47:04:cf:b0:3a:64: 5f:eb:3a:73:9f:ab:9e:04:a8:e0:07:1f:5a:7d:63:6b:0e:86: ea:2e:97:ba:12:c8:47:52:39:7a:53:fe:b4:0d:70:21:3f:79: f1:2f:ca:62:fd:76:bb:5d:47:a0:1a:68:ae:4e:d3:88:7c:33: c3:e0:08:29:80:67:e2:c4:7b:1b:ef:03:aa:88:be:94:5a:11: 5e:00:8e:36:54:2d:ad:f7:e6:6a:9c:43:17:1c:ee:0e:ba:93: 74:ca:a3:05:cb:f5:e1:0c:94:2a:07:ad:a7:8c:26:cb:d4:5b: e1:44:68:4d:98:ea:e5:34:f0:ac:bc:13:7b:c5:99:a5:0d:d1: b6:b6:9a:94:d2:81:70:63:d5:a5:5a:53:5b:c5:93:a7:eb:28: b5:35:5f:89:e4:02:1e:25:4f:15:d0:45:68:df:c7:65:95:59: 97:19:a4:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMabt3e2Wnl8tbgZbvdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjhlYmEwMDEzNTljZGQ0MTgzNDZmNjUxYzBhMTg3Yzg5 ZmJhYmYwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTQ5MTYxOTRmYjk2MTI0OTZjOGZhY2VjMmFmODA0NTA5MmYzZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVWdLg5b4gtEJUcCHSH5VT2IQj72 5dk7aqc4eH1zhJfsqWSkWPNRKrO4FlqQokBmzXHcEX+t6sOp8K1MoBCb5ogY9mdA LLH77CjzCmqEYEffRLxFJVNPcFvaunvZVcoHDBPIyNWE/5jc5mVeqoL0QxFcvaN7 LEj8ccMfXo1xOcZIeNouVG3GAdQj3SRMXXqEj9FiDjTFPyMdu233P4ARhy/IHyCZ LeF7+UVcFpUPjrEcQYDgrxxjRnoqdTVB20Y7KQzx74zyO4o0UZEifh1R0D0TkcsU VqZZ23JyBRUuShjrptTo8ki5Yb741iGdvJvCtQq7DklmzLzDDS8W8u9USwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBlJFhlPuWEklsj6zsKvgEUJLz8TMB8GA1UdIwQY MBaAFEco66ABNZzdQYNG9lHAoYfIn7q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEt Mjk0ZDljZjc5ZTJlLzEvR1VrV0dVLTVZU1NXeVByT3dxLUFSUWt2UHhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEtMjk0ZDljZjc5ZTJl LzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+kzMA0G CSqGSIb3DQEBCwUAA4IBAQCxOsWP4KAL0q+6MLUDz7m6wTXk4t3e1hSmUkhN8E8C ++mY7JoQ6McOLAc6eTtf9CJLHxquoLdXAPkMTDyjLnk9aDYTDPLKRzPratXIwTcL c3gplX5HBM+wOmRf6zpzn6ueBKjgBx9afWNrDobqLpe6EshHUjl6U/60DXAhP3nx L8pi/Xa7XUegGmiuTtOIfDPD4AgpgGfixHsb7wOqiL6UWhFeAI42VC2t9+ZqnEMX HO4OupN0yqMFy/XhDJQqB62njCbL1FvhRGhNmOrlNPCsvBN7xZmlDdG2tpqU0oFw Y9WlWlNbxZOn6yi1NV+J5AIeJU8V0EVo38dllVmXGaT+ -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:30 2026 by rpki-client