This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GuXG-P4p0H6n8SNdz8iwVe0uKos.roa File: GuXG-P4p0H6n8SNdz8iwVe0uKos.roa (raw, json) Hash identifier: Nz3gHwu7VS3k1autmDzIFUUUrL27iOgjfNkv4r5GvYk= Subject key identifier: 1A:E5:C6:F8:FE:29:D0:7E:A7:F1:23:5D:CF:C8:B0:55:ED:2E:2A:8B Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C1DCEF1BB03750B10F9873CC28A1 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GuXG-P4p0H6n8SNdz8iwVe0uKos.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59432 IP address blocks: 31.42.123.0/24 maxlen: 24 109.122.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c1:dc:ef:1b:b0:37:50:b1:0f:98:73:cc:28:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ae5c6f8fe29d07ea7f1235dcfc8b055ed2e2a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:7a:3d:5f:6c:e9:e9:58:26:5e:c2:f7:46: 3d:8a:06:f8:66:31:2f:77:d2:f6:4e:bc:22:de:0e: ce:94:dd:28:49:40:1c:3f:d2:a2:76:f5:df:c5:f0: fc:52:e6:3e:fc:81:22:89:a4:0e:9f:f4:79:ea:dd: 86:7b:64:84:12:f5:b9:a6:b1:26:95:5c:80:28:1f: bc:e9:88:8d:fc:eb:c1:45:e7:87:f2:a0:46:63:d5: 69:db:9a:f1:1c:99:7e:52:a8:6b:a4:83:17:0b:ca: a8:cd:33:49:79:c3:92:e1:b0:36:0d:47:57:80:3f: b6:87:28:d6:c8:67:ee:58:0e:7f:75:75:f6:21:05: b6:4b:e1:35:eb:17:e4:a9:eb:8a:f6:03:51:cf:44: dd:41:f2:f4:46:33:87:20:ad:c8:cd:77:42:85:45: 7d:8d:93:fb:d0:4e:4c:22:32:4b:c3:a8:af:b3:26: 5e:03:a7:0a:a1:09:d3:87:b0:ae:0b:7f:e5:cf:ab: 58:b4:d3:00:59:c1:f0:94:0b:0a:58:05:da:fb:80: 82:11:78:a2:bb:33:14:2a:15:e9:34:02:f6:ee:0c: 24:59:6a:f8:75:8c:92:fc:22:29:0a:aa:74:00:b8: 17:79:37:d3:48:c2:e4:36:6a:28:0d:65:75:d0:ba: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E5:C6:F8:FE:29:D0:7E:A7:F1:23:5D:CF:C8:B0:55:ED:2E:2A:8B X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GuXG-P4p0H6n8SNdz8iwVe0uKos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.123.0/24 109.122.58.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:1d:d8:79:fd:1f:1d:4e:0d:a3:6f:59:98:9f:70:65:ac:c4: 37:60:93:1e:18:e2:46:64:04:fe:37:c4:42:22:2b:87:21:02: cf:8e:ca:a6:6c:8e:f2:b0:ee:fd:13:b5:77:6f:34:3f:ab:e3: 12:f7:c1:10:e9:5a:cc:42:4d:10:cf:f4:76:a2:91:04:29:64: 60:cc:24:9d:03:46:a5:06:26:0c:23:21:a4:a9:27:93:4b:5b: d5:38:83:83:ee:66:dc:9c:6e:68:b9:ad:a0:f6:a2:fe:1e:72: 9e:d1:60:39:31:53:12:ae:56:f1:f3:40:36:b7:af:27:cf:74: f0:a2:00:5c:cc:47:82:2d:44:b0:36:6b:e8:81:91:3b:48:13: 8e:70:da:ef:77:21:6b:25:54:d8:cf:98:3f:cd:eb:14:be:cb: 30:4f:e7:27:ef:e7:ee:b0:95:2b:26:40:f5:01:73:f4:be:2a: 90:49:fe:fd:84:74:b3:2e:bc:19:15:c2:a1:4e:41:16:03:d1: b7:42:cb:77:83:5e:37:98:0b:aa:2e:18:a7:0d:e0:a8:7c:84: c7:f2:98:c5:c4:e5:92:ea:fc:68:fc:5d:ab:36:15:56:b2:b9: 32:22:d9:7d:fe:0c:fd:89:09:59:56:ea:e1:8e:10:0c:49:44: 28:35:07:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OMHc7xuwN1CxD5hzzCihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWU1YzZmOGZlMjlkMDdlYTdmMTIzNWRjZmM4YjA1NWVkMmUyYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNN6PV9s6elYJl7C90Y9igb4ZjEv d9L2Trwi3g7OlN0oSUAcP9KidvXfxfD8UuY+/IEiiaQOn/R56t2Ge2SEEvW5prEm lVyAKB+86YiN/OvBReeH8qBGY9Vp25rxHJl+UqhrpIMXC8qozTNJecOS4bA2DUdX gD+2hyjWyGfuWA5/dXX2IQW2S+E16xfkqeuK9gNRz0TdQfL0RjOHIK3IzXdChUV9 jZP70E5MIjJLw6ivsyZeA6cKoQnTh7CuC3/lz6tYtNMAWcHwlAsKWAXa+4CCEXii uzMUKhXpNAL27gwkWWr4dYyS/CIpCqp0ALgXeTfTSMLkNmooDWV10LrJowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBrlxvj+KdB+p/EjXc/IsFXtLiqLMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvR3VYRy1QNHAwSDZuOFNOZHo4aXdWZTB1S29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyp7AwQA bXo6MA0GCSqGSIb3DQEBCwUAA4IBAQAMHdh5/R8dTg2jb1mYn3BlrMQ3YJMeGOJG ZAT+N8RCIiuHIQLPjsqmbI7ysO79E7V3bzQ/q+MS98EQ6VrMQk0Qz/R2opEEKWRg zCSdA0alBiYMIyGkqSeTS1vVOIOD7mbcnG5oua2g9qL+HnKe0WA5MVMSrlbx80A2 t68nz3TwogBczEeCLUSwNmvogZE7SBOOcNrvdyFrJVTYz5g/zesUvsswT+cn7+fu sJUrJkD1AXP0viqQSf79hHSzLrwZFcKhTkEWA9G3Qst3g143mAuqLhinDeCofITH 8pjFxOWS6vxo/F2rNhVWsrkyItl9/gz9iQlZVurhjhAMSUQoNQec -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:48 2026 by rpki-client