This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/GuQAjBCkP5OO4SvyIu8w9D6eC38.roa File: GuQAjBCkP5OO4SvyIu8w9D6eC38.roa (raw, json) Hash identifier: BhuS+EcAxQfxRsVLjCrzmOxsWrwhIEcqz2zMQpJPfMk= Subject key identifier: 1A:E4:00:8C:10:A4:3F:93:8E:E1:2B:F2:22:EF:30:F4:3E:9E:0B:7F Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628 Certificate serial: 019B7C1254B93E88DDD342DDA0BB3FB6227D Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/GuQAjBCkP5OO4SvyIu8w9D6eC38.roa Signing time: Fri 02 Jan 2026 00:18:54 +0000 ROA not before: Fri 02 Jan 2026 00:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51050 IP address blocks: 5.83.0.0/21 maxlen: 21 178.217.80.0/21 maxlen: 21 185.98.144.0/22 maxlen: 22 193.53.10.0/23 maxlen: 23 193.53.90.0/23 maxlen: 23 2a01:5cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:54:b9:3e:88:dd:d3:42:dd:a0:bb:3f:b6:22:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ae4008c10a43f938ee12bf222ef30f43e9e0b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:69:c6:54:e3:39:31:2b:80:58:9c:8b:b3: 7a:32:ce:96:d7:5d:62:ab:86:14:7c:0f:ad:8e:86: 46:b3:28:e6:89:12:90:6e:de:70:90:7c:cb:2d:56: 60:d0:f0:9a:a5:53:ae:97:07:a2:83:23:6e:9e:14: 50:42:49:f7:e0:9b:77:79:80:95:9f:3d:20:e7:32: 8a:5b:e3:33:e5:ae:5d:ca:45:77:d4:cf:29:92:46: d1:db:0f:44:3c:76:0b:b8:6f:76:69:b3:76:ff:7d: 10:4d:0c:82:40:0e:93:64:ae:a1:b1:e2:38:2d:94: 48:3a:98:50:95:73:68:84:4d:fe:98:8f:e3:d1:c5: 7d:e3:5c:82:80:c3:1b:74:89:07:01:29:08:ca:cc: 10:8c:93:af:37:03:13:4d:7a:89:64:84:35:03:c9: 42:e7:7c:00:41:c0:1c:35:3c:90:86:d8:9e:c9:06: bf:9e:0c:40:32:1c:a1:ff:a6:c7:bb:ae:e4:3c:80: 27:87:40:df:e1:da:b8:af:c6:a3:b7:f4:f2:4c:15: bf:b3:2b:c2:3e:0c:99:f7:75:e3:6b:e2:e0:d8:ba: 2c:4d:69:f5:7b:e9:fb:a9:b3:ff:e5:e9:6b:7a:8f: f0:77:93:76:52:6d:c1:d2:d9:3d:5a:80:80:f4:77: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:00:8C:10:A4:3F:93:8E:E1:2B:F2:22:EF:30:F4:3E:9E:0B:7F X509v3 Authority Key Identifier: keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/GuQAjBCkP5OO4SvyIu8w9D6eC38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.0.0/21 178.217.80.0/21 185.98.144.0/22 193.53.10.0/23 193.53.90.0/23 IPv6: 2a01:5cc0::/32 Signature Algorithm: sha256WithRSAEncryption c7:af:f2:69:bd:bb:4b:42:23:ae:44:64:db:73:f6:1b:22:a2: e9:2d:cb:44:c2:1c:60:64:e7:91:30:d6:10:ec:a2:6d:99:45: 85:57:33:cb:28:1b:c6:9d:c3:c1:14:9b:c3:7c:1e:61:15:00: dc:e0:6e:91:c2:b5:4f:89:7d:d6:de:a9:df:39:51:4d:cd:95: af:11:5c:2c:e0:1b:9e:25:99:76:c1:39:09:4d:a1:03:84:2d: 28:6b:f7:73:07:98:d1:ca:75:96:3a:f4:3b:e8:96:a1:09:c8: 5a:55:07:ba:4f:20:fc:73:e6:0d:f3:a1:83:88:44:92:34:0b: aa:c8:6e:3f:c8:7d:d0:f3:ef:75:6e:a5:31:04:1a:67:33:78: 9f:b2:90:45:8f:fe:6a:1a:1c:82:aa:25:e0:9a:d1:ed:e5:7d: db:ce:3e:3d:2e:d2:2e:53:6b:7d:e8:37:32:0d:81:1e:89:61: e0:27:de:db:32:eb:a7:52:93:cf:88:fd:3f:57:ec:35:91:be: 24:64:e8:d5:c4:f4:5f:31:9e:a8:f0:94:56:ef:45:1c:b8:50: d1:89:36:7c:1c:6f:a0:91:ad:26:53:80:f5:0a:ea:3a:6e:4d: d2:e5:07:fe:40:65:65:95:82:34:98:cf:e3:84:24:1a:bd:3c: 26:0f:77:9b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8ElS5Pojd00LdoLs/tiJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTJkMTVhOWQ4ZGZkZWNkZThmZTZiMGMxODA0ZDBhOWVl MmU2MjgwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWU0MDA4YzEwYTQzZjkzOGVlMTJiZjIyMmVmMzBmNDNlOWUwYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYVpxlTjOTErgFici7N6Ms6W111i q4YUfA+tjoZGsyjmiRKQbt5wkHzLLVZg0PCapVOulweigyNunhRQQkn34Jt3eYCV nz0g5zKKW+Mz5a5dykV31M8pkkbR2w9EPHYLuG92abN2/30QTQyCQA6TZK6hseI4 LZRIOphQlXNohE3+mI/j0cV941yCgMMbdIkHASkIyswQjJOvNwMTTXqJZIQ1A8lC 53wAQcAcNTyQhtieyQa/ngxAMhyh/6bHu67kPIAnh0Df4dq4r8ajt/TyTBW/syvC PgyZ93Xja+Lg2LosTWn1e+n7qbP/5elreo/wd5N2Um3B0tk9WoCA9He6uwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFBrkAIwQpD+TjuEr8iLvMPQ+ngt/MB8GA1UdIwQY MBaAFKGi0Vqdjf3s3o/msMGATQqe4uYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQt ODZkMTk0YWU4YTcxLzEvR3VRQWpCQ2tQNU9PNFN2eUl1OHc5RDZlQzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQtODZkMTk0YWU4YTcx LzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBVMAAwQD stlQAwQCuWKQAwQBwTUKAwQBwTVaMA0EAgACMAcDBQAqAVzAMA0GCSqGSIb3DQEB CwUAA4IBAQDHr/JpvbtLQiOuRGTbc/YbIqLpLctEwhxgZOeRMNYQ7KJtmUWFVzPL KBvGncPBFJvDfB5hFQDc4G6RwrVPiX3W3qnfOVFNzZWvEVws4BueJZl2wTkJTaED hC0oa/dzB5jRynWWOvQ76JahCchaVQe6TyD8c+YN86GDiESSNAuqyG4/yH3Q8+91 bqUxBBpnM3ifspBFj/5qGhyCqiXgmtHt5X3bzj49LtIuU2t96DcyDYEeiWHgJ97b MuunUpPPiP0/V+w1kb4kZOjVxPRfMZ6o8JRW70UcuFDRiTZ8HG+gka0mU4D1Cuo6 bk3S5Qf+QGVllYI0mM/jhCQavTwmD3eb -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:43 2026 by rpki-client