This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Gias09ASbWXb_aQKiFfOMuiQKcg.roa File: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (raw, json) Hash identifier: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU= Subject key identifier: 1A:26:AC:D3:D0:12:6D:65:DB:FD:A4:0A:88:57:CE:32:E8:90:29:C8 Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b Certificate serial: 019B79ECCC70690932428B08FAE5F7B9D386 Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Gias09ASbWXb_aQKiFfOMuiQKcg.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 45.11.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cc:70:69:09:32:42:8b:08:fa:e5:f7:b9:d3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a26acd3d0126d65dbfda40a8857ce32e89029c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:54:7f:87:a4:20:ac:e9:0b:48:66:a9:ad:f2: 3b:82:5d:87:76:f3:01:a5:b4:c4:55:13:78:c8:5b: 39:29:be:2d:55:da:72:27:d1:1a:cb:03:f7:75:83: e4:29:47:f8:0e:a9:94:dc:db:47:04:0d:14:6c:30: c2:ee:a5:32:25:80:39:a8:10:54:1b:e3:50:32:a3: 3d:62:38:3a:58:b3:99:60:f1:15:82:4f:e7:5c:9a: 9b:bf:fb:7d:4e:5b:f2:57:3f:26:c0:4f:12:25:e7: 52:47:5d:89:89:ce:3c:8b:c8:c7:94:9d:8f:f6:4c: 26:ef:f6:ea:04:69:ac:12:83:91:b4:6e:14:09:b8: 87:82:d0:45:4e:36:71:30:d2:20:2e:2d:5c:42:cd: da:7c:92:4e:55:86:a8:13:b1:ad:f8:ca:55:bf:8c: 8b:e1:f9:71:1b:f0:29:25:54:3a:88:1b:5a:dc:e5: 7e:fb:73:82:f3:c5:59:2c:3c:36:2c:ae:df:ea:62: 35:57:6b:91:2a:01:40:5b:4c:3f:74:08:0c:0c:0c: 05:4f:3e:bf:4c:3f:17:36:6c:ad:4b:36:89:8c:02: d8:ae:a4:01:5c:2c:ef:43:44:eb:2f:6b:6c:4d:94: c9:ff:f0:d4:77:19:a5:15:be:0a:24:d5:aa:b5:f2: 31:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:26:AC:D3:D0:12:6D:65:DB:FD:A4:0A:88:57:CE:32:E8:90:29:C8 X509v3 Authority Key Identifier: keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Gias09ASbWXb_aQKiFfOMuiQKcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.174.0/24 Signature Algorithm: sha256WithRSAEncryption 82:34:16:55:e5:7f:9e:9d:ed:53:90:ee:76:f5:a4:1d:b2:b6: f7:fd:7b:ee:8e:ee:41:8c:77:eb:6d:1d:29:eb:fe:81:14:62: 60:46:bb:48:f3:e4:a0:a0:88:ae:12:1f:e2:48:1b:44:4e:c2: ea:35:a4:3c:d7:1c:0b:84:75:bd:72:67:6d:cd:fc:6f:74:3b: a8:a2:0f:fc:db:53:ba:29:fd:a4:02:5f:3d:ea:a8:bb:9b:1e: 78:54:40:2f:f6:ec:2a:42:4f:b7:29:92:cc:61:ba:18:3f:59: cf:49:7a:68:0b:7a:56:ad:00:31:29:72:5e:c7:0b:72:f0:bd: a7:29:3c:71:b4:d7:cf:70:c5:68:6a:b6:cb:1e:8a:e3:69:81: 9c:cb:5b:75:1d:02:29:2e:fd:c7:c8:4b:66:cd:a2:6d:ec:07: 26:e3:c5:8e:ff:01:fe:fc:d5:8b:91:f2:db:90:50:9a:bb:e2: 58:aa:4b:9e:27:a5:5c:71:5c:a5:0a:c5:de:57:c4:40:0c:35: c7:34:34:ca:d4:42:99:b2:d3:44:d0:ed:e1:33:35:5a:82:ef: f6:8b:61:65:4b:fe:e7:f3:bd:c2:a6:cd:be:9b:2a:78:4b:39: 67:82:a4:27:fa:1c:fa:3c:bd:6d:e6:8d:5b:5f:e2:2f:cc:c3: 9a:79:de:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MxwaQkyQosI+uX3udOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk NTk3MmIwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTI2YWNkM2QwMTI2ZDY1ZGJmZGE0MGE4ODU3Y2UzMmU4OTAyOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lR/h6QgrOkLSGaprfI7gl2HdvMB pbTEVRN4yFs5Kb4tVdpyJ9EaywP3dYPkKUf4DqmU3NtHBA0UbDDC7qUyJYA5qBBU G+NQMqM9Yjg6WLOZYPEVgk/nXJqbv/t9TlvyVz8mwE8SJedSR12Jic48i8jHlJ2P 9kwm7/bqBGmsEoORtG4UCbiHgtBFTjZxMNIgLi1cQs3afJJOVYaoE7Gt+MpVv4yL 4flxG/ApJVQ6iBta3OV++3OC88VZLDw2LK7f6mI1V2uRKgFAW0w/dAgMDAwFTz6/ TD8XNmytSzaJjALYrqQBXCzvQ0TrL2tsTZTJ//DUdxmlFb4KJNWqtfIxSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBomrNPQEm1l2/2kCohXzjLokCnIMB8GA1UdIwQY MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt NjNiMzM4MDhhNmE4LzEvR2lhczA5QVNiV1hiX2FRS2lGZk9NdWlRS2NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4 LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQuuMA0G CSqGSIb3DQEBCwUAA4IBAQCCNBZV5X+ene1TkO529aQdsrb3/Xvuju5BjHfrbR0p 6/6BFGJgRrtI8+SgoIiuEh/iSBtETsLqNaQ81xwLhHW9cmdtzfxvdDuoog/821O6 Kf2kAl896qi7mx54VEAv9uwqQk+3KZLMYboYP1nPSXpoC3pWrQAxKXJexwty8L2n KTxxtNfPcMVoarbLHorjaYGcy1t1HQIpLv3HyEtmzaJt7Acm48WO/wH+/NWLkfLb kFCau+JYqkueJ6VccVylCsXeV8RADDXHNDTK1EKZstNE0O3hMzVagu/2i2FlS/7n 873Cps2+myp4SzlngqQn+hz6PL1t5o1bX+IvzMOaed7l -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:25 2026 by rpki-client