This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/GUI2iyS6cXbhnTIBOOmswbrKBR4.roa File: GUI2iyS6cXbhnTIBOOmswbrKBR4.roa (raw, json) Hash identifier: BhZ7NYLsNrafw61nMLVYDa+lwZAq7nN5BNqq/DyfVgw= Subject key identifier: 19:42:36:8B:24:BA:71:76:E1:9D:32:01:38:E9:AC:C1:BA:CA:05:1E Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Certificate serial: 019B7F845A869F90D041C314803697566090 Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/GUI2iyS6cXbhnTIBOOmswbrKBR4.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8395 IP address blocks: 195.170.32.0/19 maxlen: 19 2a04:dbc0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5a:86:9f:90:d0:41:c3:14:80:36:97:56:60:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1942368b24ba7176e19d320138e9acc1baca051e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:f1:fb:52:f0:34:b2:72:b5:4a:d0:fe:f7: 0d:70:38:b1:85:ba:9a:8c:04:93:19:6b:3e:2c:08: ef:d7:c6:94:05:b4:7c:0d:b7:c3:93:ee:a0:10:ce: cb:6e:b9:a0:20:90:07:8a:38:b3:0f:47:ef:c2:bd: 5a:0d:dc:84:b6:48:d4:9f:f5:19:80:19:3a:20:71: 92:b9:4c:fe:9f:18:b6:7e:a2:97:06:66:78:77:ba: 11:a5:7f:9a:ec:e5:0c:c1:e9:34:21:09:17:13:07: 9f:57:76:e4:29:f2:59:ae:6d:d3:3f:e0:0a:cb:ab: 05:67:66:61:9b:00:b6:a6:9a:f7:93:8e:8b:85:6c: ca:ab:6d:6c:c1:e2:1f:27:d5:61:cc:f5:cf:19:26: d6:84:24:cd:71:ee:7c:2a:fb:1c:84:0e:de:29:49: 8e:af:c5:15:ea:2c:de:2e:3a:7a:3d:89:77:fb:c2: cd:be:4e:9a:56:24:da:a4:e5:1a:67:f4:b7:a7:ab: 85:b6:a7:d0:34:6c:8c:c0:34:4e:bc:98:ab:d2:df: 92:15:0f:38:21:f2:fb:4f:49:e9:46:94:b1:90:5b: cb:bc:f0:c6:2c:cb:24:6e:18:05:94:2a:8c:9b:8b: 9d:3e:91:d6:df:0d:d7:72:a5:56:be:bb:ff:08:38: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:42:36:8B:24:BA:71:76:E1:9D:32:01:38:E9:AC:C1:BA:CA:05:1E X509v3 Authority Key Identifier: keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/GUI2iyS6cXbhnTIBOOmswbrKBR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.170.32.0/19 IPv6: 2a04:dbc0::/30 Signature Algorithm: sha256WithRSAEncryption 11:9c:36:95:fa:cb:b9:8c:9f:38:ec:e4:6d:9b:4e:69:b7:e1: 08:03:90:e0:9f:71:9b:ff:94:32:b4:d9:8b:84:d1:40:1e:ae: 04:9e:94:34:62:e7:4b:43:6c:2e:61:65:31:16:12:a3:76:28: 4a:2d:70:c7:22:2d:58:7a:a3:45:5d:bc:5f:4c:42:7c:9d:8d: 1e:d5:a0:01:c6:96:99:28:c6:24:7e:65:da:c8:6b:84:40:80: dd:3b:c5:13:9c:33:62:b1:f7:cc:e9:f3:95:14:80:a7:0c:ce: 25:f7:dd:c1:b4:c1:3c:2c:97:66:8e:d6:b6:d1:d7:fd:89:55: fc:a7:90:f5:7e:a7:e4:09:b5:c9:26:cd:7b:17:a7:48:b0:18: 03:28:f9:6b:ec:42:6c:89:26:6e:be:de:29:7a:bd:e6:be:50: d9:5d:bb:bf:09:4d:0d:3b:6b:16:f0:53:99:66:ab:18:ea:86: 12:82:fa:16:7e:77:8b:4c:2c:f8:06:88:05:33:04:67:3a:45: e0:1b:e8:6d:f6:22:0e:1b:83:9e:4b:f9:99:c0:7c:74:90:01: 23:4c:50:08:60:c6:44:17:b1:4c:78:b9:45:74:f6:6b:20:6c: 6e:0e:00:ef:08:7c:a2:76:e8:08:8c:a0:9c:4f:39:12:45:d6: f0:47:f6:84 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hFqGn5DQQcMUgDaXVmCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzc1YjQzYWU4YTUzZDQ4Yzg4ODY3MWU2N2ZjMTdiZjI3 ZjJiN2UwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTQyMzY4YjI0YmE3MTc2ZTE5ZDMyMDEzOGU5YWNjMWJhY2EwNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F3x+1LwNLJytUrQ/vcNcDixhbqa jASTGWs+LAjv18aUBbR8DbfDk+6gEM7LbrmgIJAHijizD0fvwr1aDdyEtkjUn/UZ gBk6IHGSuUz+nxi2fqKXBmZ4d7oRpX+a7OUMwek0IQkXEwefV3bkKfJZrm3TP+AK y6sFZ2ZhmwC2ppr3k46LhWzKq21sweIfJ9VhzPXPGSbWhCTNce58KvschA7eKUmO r8UV6izeLjp6PYl3+8LNvk6aViTapOUaZ/S3p6uFtqfQNGyMwDROvJir0t+SFQ84 IfL7T0npRpSxkFvLvPDGLMskbhgFlCqMm4udPpHW3w3XcqVWvrv/CDg6xQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBlCNoskunF24Z0yATjprMG6ygUeMB8GA1UdIwQY MBaAFIM3W0OuilPUjIiGceZ/wXvyfyt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYt NzJjNGM0YjgwNGE3LzEvR1VJMml5UzZjWGJoblRJQk9PbXN3YnJLQlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYtNzJjNGM0YjgwNGE3 LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFw6ogMA0E AgACMAcDBQIqBNvAMA0GCSqGSIb3DQEBCwUAA4IBAQARnDaV+su5jJ847ORtm05p t+EIA5Dgn3Gb/5QytNmLhNFAHq4EnpQ0YudLQ2wuYWUxFhKjdihKLXDHIi1YeqNF XbxfTEJ8nY0e1aABxpaZKMYkfmXayGuEQIDdO8UTnDNisffM6fOVFICnDM4l993B tME8LJdmjta20df9iVX8p5D1fqfkCbXJJs17F6dIsBgDKPlr7EJsiSZuvt4per3m vlDZXbu/CU0NO2sW8FOZZqsY6oYSgvoWfneLTCz4BogFMwRnOkXgG+ht9iIOG4Oe S/mZwHx0kAEjTFAIYMZEF7FMeLlFdPZrIGxuDgDvCHyidugIjKCcTzkSRdbwR/aE -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:44 2026 by rpki-client