This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/GsOQ3vHLALBSt2vVQO29hA2BDVs.roa File: GsOQ3vHLALBSt2vVQO29hA2BDVs.roa (raw, json) Hash identifier: aWsUfnYc/JWm4k92bPXDyfEmKfbouMQNVW8ooA99juw= Subject key identifier: 1A:C3:90:DE:F1:CB:00:B0:52:B7:6B:D5:40:ED:BD:84:0D:81:0D:5B Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565 Certificate serial: 019B7BA41ACACA70244A774C2F2EADBD6634 Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/GsOQ3vHLALBSt2vVQO29hA2BDVs.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208550 IP address blocks: 45.158.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1a:ca:ca:70:24:4a:77:4c:2f:2e:ad:bd:66:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565 Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ac390def1cb00b052b76bd540edbd840d810d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:3c:f1:f6:e4:9d:80:68:17:96:59:f2:61: 4d:e0:3e:d6:f7:0d:d2:76:1d:e1:18:f9:86:8e:07: 47:bd:a4:1e:51:00:0a:b4:1c:9b:89:55:46:14:20: f6:77:53:cc:b0:13:63:dd:85:7c:c0:66:32:5f:2f: cd:63:05:63:10:00:18:44:0b:2f:a6:c8:8b:a5:44: 3e:c9:7a:6b:12:ed:1d:b7:be:3d:71:5a:bb:f7:6e: e9:72:ac:93:dc:bd:31:1c:55:42:3e:bd:0c:61:f2: 40:35:4b:f9:4e:a2:23:6f:3f:bd:c9:c8:5e:a8:67: 15:df:c2:eb:b7:4f:9d:04:f2:97:f2:b7:cf:c5:db: b7:83:9b:35:8a:64:ac:69:16:04:78:ec:83:b3:f2: de:db:50:ae:1b:67:1d:53:16:91:ce:a0:93:d7:24: 64:9c:af:42:49:6d:bc:14:01:bb:eb:d9:b4:a5:fa: a6:ac:e2:8b:fe:0d:0d:a5:00:ca:fa:9a:fe:5a:d8: e8:e9:00:0c:14:64:7b:39:51:2b:df:23:fd:d8:5d: 66:37:15:5e:92:1f:94:2b:2d:5d:2a:36:61:a7:5e: 1a:fd:4c:ae:64:78:40:e4:48:62:b7:bb:9b:fe:3c: c8:19:b6:07:bc:3f:fe:78:1a:ba:3c:0c:29:9b:3b: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:90:DE:F1:CB:00:B0:52:B7:6B:D5:40:ED:BD:84:0D:81:0D:5B X509v3 Authority Key Identifier: keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/GsOQ3vHLALBSt2vVQO29hA2BDVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.52.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:03:2d:dd:15:b0:37:fb:8c:d3:d1:f7:20:ce:8f:7e:6e:5f: 82:4f:f0:78:d2:d0:3b:3f:c8:1b:93:7c:c1:8e:99:a7:7a:79: a5:f3:50:0c:72:3d:e5:ee:05:d2:ca:cf:e2:21:50:9d:0a:9b: 5a:12:8e:6b:c6:84:75:3b:4c:6d:b4:45:1e:6c:30:0c:70:02: f9:2a:34:30:90:74:aa:06:9d:1c:33:d9:68:15:99:bf:a6:c9: 90:42:01:0f:89:2a:ac:7a:75:a3:df:4b:a0:21:fb:0e:5f:48: 09:fa:36:93:5d:f6:8f:ce:f9:f3:80:48:b3:3b:99:bb:2d:8b: ac:df:55:6f:f5:bb:f1:77:dd:85:7b:02:dd:78:ee:29:a5:35: 15:7f:5f:e0:30:63:8d:94:fc:e4:9c:31:4c:7e:f6:ce:1a:56: b7:35:c5:9a:a5:a9:a3:69:02:ab:71:90:44:51:4f:f7:05:80: 5f:f5:0f:db:ba:db:e5:aa:61:8d:fd:9b:0c:13:8a:49:20:34: e0:8c:87:d4:6c:56:38:d8:28:02:d5:23:fc:00:08:85:66:67: 48:db:b0:36:6b:52:14:2d:35:92:f0:5b:19:31:0f:9a:2a:60: f4:83:99:11:b8:b1:a3:fe:fc:ae:91:d6:e3:c7:94:1a:53:dc: 94:de:f3:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBrKynAkSndMLy6tvWY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy Y2E1NjUwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWMzOTBkZWYxY2IwMGIwNTJiNzZiZDU0MGVkYmQ4NDBkODEwZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW088fbknYBoF5ZZ8mFN4D7W9w3S dh3hGPmGjgdHvaQeUQAKtBybiVVGFCD2d1PMsBNj3YV8wGYyXy/NYwVjEAAYRAsv psiLpUQ+yXprEu0dt749cVq7927pcqyT3L0xHFVCPr0MYfJANUv5TqIjbz+9yche qGcV38Lrt0+dBPKX8rfPxdu3g5s1imSsaRYEeOyDs/Le21CuG2cdUxaRzqCT1yRk nK9CSW28FAG769m0pfqmrOKL/g0NpQDK+pr+Wtjo6QAMFGR7OVEr3yP92F1mNxVe kh+UKy1dKjZhp14a/UyuZHhA5Ehit7ub/jzIGbYHvD/+eBq6PAwpmzvsFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrDkN7xywCwUrdr1UDtvYQNgQ1bMB8GA1UdIwQY MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It MmQ1ZDY4ODQxNzNmLzEvR3NPUTN2SExBTEJTdDJ2VlFPMjloQTJCRFZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ40MA0G CSqGSIb3DQEBCwUAA4IBAQCfAy3dFbA3+4zT0fcgzo9+bl+CT/B40tA7P8gbk3zB jpmnenml81AMcj3l7gXSys/iIVCdCptaEo5rxoR1O0xttEUebDAMcAL5KjQwkHSq Bp0cM9loFZm/psmQQgEPiSqsenWj30ugIfsOX0gJ+jaTXfaPzvnzgEizO5m7LYus 31Vv9bvxd92FewLdeO4ppTUVf1/gMGONlPzknDFMfvbOGla3NcWapamjaQKrcZBE UU/3BYBf9Q/butvlqmGN/ZsME4pJIDTgjIfUbFY42CgC1SP8AAiFZmdI27A2a1IU LTWS8FsZMQ+aKmD0g5kRuLGj/vyukdbjx5QaU9yU3vMW -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:55 2026 by rpki-client