This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa File: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (raw, json) Hash identifier: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk= Subject key identifier: 19:AD:9F:E5:C9:27:B6:C5:6C:4A:73:14:1F:BC:31:56:61:90:A8:0E Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160729532CD6D2FA3DC0B304FA58BF Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa Signing time: Fri 02 Jan 2026 14:21:48 +0000 ROA not before: Fri 02 Jan 2026 14:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 92.62.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:07:29:53:2c:d6:d2:fa:3d:c0:b3:04:fa:58:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19ad9fe5c927b6c56c4a73141fbc31566190a80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:74:ec:79:c7:d7:d1:f1:3b:2b:0f:30:c6: bb:73:20:05:e2:f6:ed:88:5e:b6:93:bd:bc:d5:4e: 1e:8f:ee:e2:c3:d2:57:bf:86:a6:2f:a7:3b:6e:5c: 94:d3:de:e4:35:b4:dc:79:bc:24:91:ff:da:f6:9e: 20:83:53:0b:af:ac:98:91:0b:d9:55:33:be:bc:42: 02:69:f0:85:4c:e2:e6:61:58:cf:17:cb:59:f0:f7: 01:5c:bf:ec:b3:26:5c:da:f3:e0:ee:df:16:a0:71: b1:d9:76:79:ae:66:aa:0c:70:8d:bb:06:28:58:d8: d7:17:6b:66:bc:c1:7f:b8:0c:5a:99:36:7b:91:65: 91:96:b2:78:16:8f:8f:90:27:b9:17:96:7f:77:f9: 6e:24:f0:f2:b0:9d:00:ef:d6:ca:c9:e0:90:8c:97: 7d:bc:a6:09:de:f1:d5:21:24:a6:47:ed:b0:d9:a5: af:08:eb:81:1c:cd:8e:36:d9:3c:e4:77:02:65:d3: b3:0b:be:f6:9d:a5:93:8c:96:4b:3e:7d:6f:60:e8: 05:bd:ad:80:ac:93:0e:08:eb:e5:90:80:25:eb:7e: dd:26:59:70:5a:e9:d8:2c:65:ca:fd:a0:59:88:06: 29:63:ee:25:a6:21:75:f8:d8:5b:64:1b:20:7d:fb: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AD:9F:E5:C9:27:B6:C5:6C:4A:73:14:1F:BC:31:56:61:90:A8:0E X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.255.0/24 Signature Algorithm: sha256WithRSAEncryption 62:8a:e4:cb:17:38:ec:ce:cc:c4:94:b9:50:1b:25:c1:6b:97: 52:c8:c5:26:03:03:f3:22:37:01:df:22:c9:51:87:8c:13:83: c6:66:ea:d8:57:e1:f1:64:83:fd:e5:56:50:72:44:02:27:d1: be:a2:e6:65:4a:83:10:46:a0:6e:13:36:8b:b4:b5:3a:19:ad: 8b:7f:d1:30:8a:f3:12:6b:b6:fe:e3:44:4a:31:d3:5f:5e:4d: 8d:7e:08:a5:42:1c:fd:f9:67:bd:f4:dd:6e:92:24:5f:44:12: 0c:0a:a2:a8:90:5b:c6:5f:17:b2:9d:9b:06:95:d5:b1:24:75: 3d:5a:82:a8:2e:6b:e9:bc:ea:89:14:ed:5c:a3:06:7a:06:bc: 35:20:0b:a3:16:d6:27:21:44:a2:79:b5:31:ee:29:b3:f5:73: e5:46:a5:3f:38:9d:34:f8:0d:5a:f7:fd:e8:0d:d8:02:e3:29: 51:16:da:b5:3e:4d:e4:80:51:1f:54:25:2f:68:64:52:3a:04: 4d:b9:b6:bd:95:2c:21:eb:bd:09:fe:5d:be:a1:d8:db:cb:0a: a0:6c:75:0a:45:83:47:70:8a:7e:50:2e:bb:6b:54:86:8d:a7: f5:ae:6e:11:77:5c:21:22:78:e9:8e:fe:ea:ac:72:6d:0c:a1: eb:a4:8d:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgcpUyzW0vo9wLME+li/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWFkOWZlNWM5MjdiNmM1NmM0YTczMTQxZmJjMzE1NjYxOTBhODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm907HnH19HxOysPMMa7cyAF4vbt iF62k7281U4ej+7iw9JXv4amL6c7blyU097kNbTcebwkkf/a9p4gg1MLr6yYkQvZ VTO+vEICafCFTOLmYVjPF8tZ8PcBXL/ssyZc2vPg7t8WoHGx2XZ5rmaqDHCNuwYo WNjXF2tmvMF/uAxamTZ7kWWRlrJ4Fo+PkCe5F5Z/d/luJPDysJ0A79bKyeCQjJd9 vKYJ3vHVISSmR+2w2aWvCOuBHM2ONtk85HcCZdOzC772naWTjJZLPn1vYOgFva2A rJMOCOvlkIAl637dJllwWunYLGXK/aBZiAYpY+4lpiF1+NhbZBsgfft0+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmtn+XJJ7bFbEpzFB+8MVZhkKgOMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvR2EyZjVja250c1ZzU25NVUg3d3hWbUdRcUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD7/MA0G CSqGSIb3DQEBCwUAA4IBAQBiiuTLFzjszszElLlQGyXBa5dSyMUmAwPzIjcB3yLJ UYeME4PGZurYV+HxZIP95VZQckQCJ9G+ouZlSoMQRqBuEzaLtLU6Ga2Lf9EwivMS a7b+40RKMdNfXk2NfgilQhz9+We99N1ukiRfRBIMCqKokFvGXxeynZsGldWxJHU9 WoKoLmvpvOqJFO1cowZ6Brw1IAujFtYnIUSiebUx7imz9XPlRqU/OJ00+A1a9/3o DdgC4ylRFtq1Pk3kgFEfVCUvaGRSOgRNuba9lSwh670J/l2+odjbywqgbHUKRYNH cIp+UC67a1SGjaf1rm4Rd1whInjpjv7qrHJtDKHrpI1c -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:39 2026 by rpki-client