This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/GqX_oWrB830HkB8zEb8oJqY0nyE.roa File: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (raw, json) Hash identifier: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo= Subject key identifier: 1A:A5:FF:A1:6A:C1:F3:7D:07:90:1F:33:11:BF:28:26:A6:34:9F:21 Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d Certificate serial: 019B7F14D02C4A6C85C924D1BC0220203228 Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/GqX_oWrB830HkB8zEb8oJqY0nyE.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59877 IP address blocks: 45.67.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d0:2c:4a:6c:85:c9:24:d1:bc:02:20:20:32:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa5ffa16ac1f37d07901f3311bf2826a6349f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:c5:bc:a5:8a:ca:ac:26:0b:d3:30:ce:da: 60:63:7b:79:f3:db:ce:5f:c6:ce:de:c6:59:3c:63: d1:3f:1f:fb:81:c2:b2:6c:6e:9f:24:10:21:34:a4: b3:9c:1d:b7:9a:d7:d5:38:c2:28:e3:c8:ee:41:62: 09:4d:6f:f6:29:f8:77:88:0f:b5:1b:88:67:75:c4: a2:6b:d9:9b:64:49:47:3e:72:99:0d:02:66:e5:d2: 06:f5:dd:b2:4b:6a:6f:b7:23:e2:58:e0:67:0e:69: a9:8f:85:9f:41:5c:24:97:0c:ab:53:53:a2:5f:ee: 65:3d:72:48:03:bc:73:9f:e1:75:d2:db:59:73:e6: 88:1b:df:38:b0:e3:7d:59:59:a7:e0:60:c5:a7:07: 59:b8:ae:99:6f:29:f2:97:9a:96:ae:22:17:f1:52: 92:70:a9:b9:df:e4:8b:82:18:47:e3:bc:08:a4:8e: cc:dc:2b:c3:b2:5c:a7:3a:08:b3:69:82:48:c5:7e: 5a:aa:e1:53:4c:83:56:24:e9:5a:82:3e:64:7c:a4: c0:5b:55:5d:37:33:41:4c:b5:76:cb:d1:39:c4:04: 32:0d:67:eb:45:bc:67:0b:84:4e:c1:6f:71:de:5d: a4:ee:09:98:96:12:39:b6:bc:ad:56:03:28:82:f1: e8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A5:FF:A1:6A:C1:F3:7D:07:90:1F:33:11:BF:28:26:A6:34:9F:21 X509v3 Authority Key Identifier: keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/GqX_oWrB830HkB8zEb8oJqY0nyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.253.0/24 Signature Algorithm: sha256WithRSAEncryption 28:27:60:42:bc:a6:b5:32:d3:86:ab:b6:0b:d4:5b:5a:20:22: 6a:47:78:44:da:a8:02:1d:17:7f:01:a5:e1:15:c9:6b:e5:b7: ad:95:3c:c6:4f:9c:4e:d4:99:76:3e:b3:e7:fb:fd:1a:c0:14: 96:79:60:97:47:4d:08:0c:99:b5:6c:bf:45:e0:03:8f:a0:c3: ed:99:df:85:54:2b:ad:08:22:5b:27:b8:9a:bf:ad:36:b6:8b: 2a:59:39:44:5e:22:2e:c8:44:d1:3f:69:11:d5:44:63:a1:c4: 26:87:f8:65:a3:d9:45:5c:5e:38:86:d7:92:59:f2:6f:fa:4a: b1:69:ba:af:d9:67:1e:75:4f:3d:51:e0:22:88:db:42:08:41: 25:3e:7e:bf:62:2d:52:e5:5b:a3:8a:f3:92:de:f7:9b:02:64: 41:f2:24:a1:d1:cf:ef:c0:a8:fe:30:79:25:28:a9:32:de:71: 95:f4:7b:f7:d7:90:6a:79:68:00:af:2c:a5:83:d3:fe:6f:06: eb:6b:b6:70:80:61:e4:62:d4:23:f3:07:7a:c5:be:6e:f1:fe: 79:de:9d:6e:19:b4:7f:a2:d5:8b:48:91:b9:f5:af:34:f8:98: 73:b2:99:db:b4:7e:1a:33:02:ba:12:b5:79:fa:70:3f:58:51: 23:3f:87:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNAsSmyFySTRvAIgIDIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0 ZGQ0N2QwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWE1ZmZhMTZhYzFmMzdkMDc5MDFmMzMxMWJmMjgyNmE2MzQ5ZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxbFvKWKyqwmC9MwztpgY3t589vO X8bO3sZZPGPRPx/7gcKybG6fJBAhNKSznB23mtfVOMIo48juQWIJTW/2Kfh3iA+1 G4hndcSia9mbZElHPnKZDQJm5dIG9d2yS2pvtyPiWOBnDmmpj4WfQVwklwyrU1Oi X+5lPXJIA7xzn+F10ttZc+aIG984sON9WVmn4GDFpwdZuK6Zbynyl5qWriIX8VKS cKm53+SLghhH47wIpI7M3CvDslynOgizaYJIxX5aquFTTINWJOlagj5kfKTAW1Vd NzNBTLV2y9E5xAQyDWfrRbxnC4ROwW9x3l2k7gmYlhI5trytVgMogvHoYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBql/6FqwfN9B5AfMxG/KCamNJ8hMB8GA1UdIwQY MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt NjkzYmY2N2U2MWYzLzEvR3FYX29XckI4MzBIa0I4ekViOG9KcVkwbnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUP9MA0G CSqGSIb3DQEBCwUAA4IBAQAoJ2BCvKa1MtOGq7YL1FtaICJqR3hE2qgCHRd/AaXh Fclr5betlTzGT5xO1Jl2PrPn+/0awBSWeWCXR00IDJm1bL9F4AOPoMPtmd+FVCut CCJbJ7iav602tosqWTlEXiIuyETRP2kR1URjocQmh/hlo9lFXF44hteSWfJv+kqx abqv2WcedU89UeAiiNtCCEElPn6/Yi1S5VujivOS3vebAmRB8iSh0c/vwKj+MHkl KKky3nGV9Hv315BqeWgAryylg9P+bwbra7ZwgGHkYtQj8wd6xb5u8f553p1uGbR/ otWLSJG59a80+JhzspnbtH4aMwK6ErV5+nA/WFEjP4cE -----END CERTIFICATE-----Generated at Tue Jan 27 09:57:44 2026 by rpki-client