This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/gbUUrkz6Ct0Ni1jOM--ZsaYyFn0.roa File: gbUUrkz6Ct0Ni1jOM--ZsaYyFn0.roa (raw, json) Hash identifier: 7nGtTRF/Lm1+N5aIvKX7N/BfUodpWSTQxXrT552riXk= Subject key identifier: 81:B5:14:AE:4C:FA:0A:DD:0D:8B:58:CE:33:EF:99:B1:A6:32:16:7D Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B451EDF80B263FB753D96D0184D5675D5 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/gbUUrkz6Ct0Ni1jOM--ZsaYyFn0.roa Signing time: Mon 22 Dec 2025 08:13:29 +0000 ROA not before: Mon 22 Dec 2025 08:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.136.39.0/24 maxlen: 24 194.31.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:1e:df:80:b2:63:fb:75:3d:96:d0:18:4d:56:75:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Dec 22 08:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=81b514ae4cfa0add0d8b58ce33ef99b1a632167d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:4a:68:b0:b9:d9:6f:e7:13:02:14:f8:4a: 8e:01:3f:6f:47:5e:4e:f1:35:cf:59:a6:25:05:88: 59:94:19:e2:28:6b:d3:93:ab:98:3f:04:97:17:9c: 0f:3a:37:64:e1:24:99:c2:90:71:e8:cf:c7:33:96: 1c:b7:bc:fa:9b:85:51:8f:9c:48:a2:48:07:2b:a9: 3d:31:ef:ba:98:a6:05:ba:02:46:e3:9d:77:92:a0: dd:68:7c:6b:2b:f6:ef:af:3f:5e:38:09:cc:bd:1c: 9c:34:1f:e2:ad:19:ae:ff:58:a0:f3:02:93:87:2b: f4:b3:c7:35:17:ea:ac:b6:23:20:4d:a0:e7:d3:98: 5b:f5:4c:2c:c7:ea:ed:06:c1:af:fc:28:0b:7c:f2: 19:c2:71:2f:f7:44:56:b1:be:74:70:c3:63:7c:0e: 4a:b9:7f:3a:d2:48:97:84:3a:b6:20:f5:06:a5:00: 9a:fb:6b:6e:eb:2e:c6:1e:87:c4:10:b2:38:01:56: 48:f4:69:f2:13:3a:da:ac:7c:61:c1:e3:72:d9:76: 5c:e1:c7:d2:2f:78:b3:db:f9:5c:65:6c:bc:b8:2d: 41:20:e2:c7:48:ee:a0:7a:13:9a:b6:41:1c:bb:f0: c5:7a:7f:f7:73:5e:aa:3f:51:f8:c3:7c:9a:fb:cf: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B5:14:AE:4C:FA:0A:DD:0D:8B:58:CE:33:EF:99:B1:A6:32:16:7D X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/gbUUrkz6Ct0Ni1jOM--ZsaYyFn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.39.0/24 194.31.165.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:8b:10:08:5b:76:99:45:fa:57:b7:80:8c:44:3c:22:9c:f6: 47:2f:cd:96:8f:b2:26:6e:3c:ce:da:72:56:0a:10:99:0c:e5: 37:3d:8c:9c:87:af:49:14:32:86:8a:5a:39:db:64:05:49:1a: e3:f5:f9:36:be:0a:ed:8d:66:41:2e:35:eb:6a:33:03:be:da: bf:36:fe:9a:d7:05:4a:46:47:78:b3:29:84:3c:92:cd:ff:bb: c1:b7:83:40:85:05:37:48:d4:e4:a7:d2:f9:a5:b7:3a:4f:15: 5a:cb:04:76:fc:1e:e4:4a:ca:31:dc:88:90:91:e7:8a:8e:3f: 85:15:d1:f9:02:93:a3:8c:c7:1f:90:d6:f0:f9:7e:92:ea:7f: a7:88:6d:8c:ad:4d:98:ef:2d:07:a5:fb:21:6e:18:25:eb:42: 76:f6:df:0b:8b:ea:ff:a8:1a:be:98:03:2c:1a:a0:dd:7a:29: 0f:ee:cc:04:fe:87:96:19:2a:f5:e4:ef:cc:1b:68:b2:cb:cd: 96:83:7b:c7:7b:fc:c1:e9:e0:d4:15:cf:7d:ba:79:e6:a5:fe: f3:82:33:c8:70:81:5a:b8:12:76:b8:9f:b0:11:73:04:8f:c0: 47:21:20:f0:37:d1:05:39:4c:46:d0:33:2f:98:41:d7:0b:ef: 63:34:9a:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtFHt+AsmP7dT2W0BhNVnXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMjIyMDgxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWI1MTRhZTRjZmEwYWRkMGQ4YjU4Y2UzM2VmOTliMWE2MzIxNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ZKaLC52W/nEwIU+EqOAT9vR15O 8TXPWaYlBYhZlBniKGvTk6uYPwSXF5wPOjdk4SSZwpBx6M/HM5Yct7z6m4VRj5xI okgHK6k9Me+6mKYFugJG4513kqDdaHxrK/bvrz9eOAnMvRycNB/irRmu/1ig8wKT hyv0s8c1F+qstiMgTaDn05hb9Uwsx+rtBsGv/CgLfPIZwnEv90RWsb50cMNjfA5K uX860kiXhDq2IPUGpQCa+2tu6y7GHofEELI4AVZI9GnyEzrarHxhweNy2XZc4cfS L3iz2/lcZWy8uC1BIOLHSO6gehOatkEcu/DFen/3c16qP1H4w3ya+885iQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIG1FK5M+grdDYtYzjPvmbGmMhZ9MB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvZ2JVVXJrejZDdDBOaTFqT00tLVpzYVl5Rm4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYgnAwQA wh+lMA0GCSqGSIb3DQEBCwUAA4IBAQCcixAIW3aZRfpXt4CMRDwinPZHL82Wj7Im bjzO2nJWChCZDOU3PYych69JFDKGilo522QFSRrj9fk2vgrtjWZBLjXrajMDvtq/ Nv6a1wVKRkd4symEPJLN/7vBt4NAhQU3SNTkp9L5pbc6TxVaywR2/B7kSsox3IiQ keeKjj+FFdH5ApOjjMcfkNbw+X6S6n+niG2MrU2Y7y0Hpfshbhgl60J29t8Li+r/ qBq+mAMsGqDdeikP7swE/oeWGSr15O/MG2iyy82Wg3vHe/zB6eDUFc99unnmpf7z gjPIcIFauBJ2uJ+wEXMEj8BHISDwN9EFOUxG0DMvmEHXC+9jNJr2 -----END CERTIFICATE-----Generated at Tue Dec 30 21:12:47 2025 by rpki-client