This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/GARLhjoCY1mEifSMgHt3b3BOaHE.roa File: GARLhjoCY1mEifSMgHt3b3BOaHE.roa (raw, json) Hash identifier: 1d3/nrn41VkXwlPSthRsl6eFjVEWud4PfGpAlTVZnhg= Subject key identifier: 18:04:4B:86:3A:02:63:59:84:89:F4:8C:80:7B:77:6F:70:4E:68:71 Certificate issuer: /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73 Certificate serial: 019B7758A056C02C364C38AFFA99349674A0 Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/GARLhjoCY1mEifSMgHt3b3BOaHE.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205555 IP address blocks: 5.182.156.0/22 maxlen: 22 5.182.156.0/24 maxlen: 24 5.182.157.0/24 maxlen: 24 5.182.158.0/24 maxlen: 24 5.182.159.0/24 maxlen: 24 185.214.52.0/24 maxlen: 24 185.214.53.0/24 maxlen: 24 185.214.54.0/24 maxlen: 24 185.214.55.0/24 maxlen: 24 2a0b:95c0::/32 maxlen: 32 2a0b:95c0::/48 maxlen: 48 2a0b:95c0:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a0:56:c0:2c:36:4c:38:af:fa:99:34:96:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18044b863a0263598489f48c807b776f704e6871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:24:bd:c2:8c:dc:59:80:5b:52:18:90:17: 08:db:eb:2c:06:f0:30:17:2b:33:3b:9d:02:00:3c: 1e:a7:21:b0:b1:cf:d8:55:33:ec:a9:c7:16:c7:32: 57:c9:a7:98:aa:ed:22:ca:e9:f2:31:15:94:fc:6e: 9f:fe:49:81:51:37:72:74:45:1d:a0:83:85:03:22: 69:33:84:a7:c3:57:be:d8:0d:d6:31:86:08:30:3a: 16:db:6b:f7:11:a9:ef:0c:58:95:25:83:35:f1:99: 7d:90:14:6f:f9:b2:26:99:7e:77:cb:03:5a:7d:c5: 64:0d:cd:1b:e3:50:17:45:a1:f7:1c:09:d7:ee:22: 36:06:7b:e6:37:f7:99:5b:f9:9d:ce:7b:ad:1f:0a: 1e:a6:ff:eb:37:b6:5a:74:83:23:90:ab:e8:8a:b7: 66:e9:c5:12:b5:94:00:45:d9:ba:70:2c:13:46:93: a8:21:ed:37:92:14:8f:fa:d2:cc:5e:0c:5f:ee:ee: ce:12:d7:25:71:2e:43:b4:98:af:02:31:e4:c4:31: 26:02:f5:d2:88:ae:19:7e:13:da:a1:d5:a8:4e:21: dd:2a:75:ab:22:0b:e4:7b:87:f1:a6:86:c5:49:7b: a7:99:f2:1c:6d:86:7e:4e:6a:a6:a1:94:6b:46:c7: b4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:04:4B:86:3A:02:63:59:84:89:F4:8C:80:7B:77:6F:70:4E:68:71 X509v3 Authority Key Identifier: keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/GARLhjoCY1mEifSMgHt3b3BOaHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.156.0/22 185.214.52.0/22 IPv6: 2a0b:95c0::/32 Signature Algorithm: sha256WithRSAEncryption cf:ee:58:46:2d:06:f9:02:c6:80:ca:2c:1f:0b:6a:3b:d4:4b: f2:a9:62:12:99:5a:0c:06:d5:76:a8:c3:e9:64:b4:62:cb:23: e2:a8:23:7d:82:a2:e5:3b:e0:60:5f:97:ba:22:bb:7e:57:26: 3f:eb:98:1f:12:38:1e:86:8c:7f:c6:d1:4f:b8:92:a2:33:de: 5c:f3:9c:da:8b:15:25:f0:55:97:be:fc:8d:ab:39:5e:ca:04: 93:f0:f4:fe:c6:6f:b3:91:3c:df:d3:00:0e:44:6a:a2:7a:e2: 10:ab:ef:98:1f:46:37:2e:e3:51:79:dd:3b:c2:56:1b:eb:98: 74:e3:9b:b8:89:eb:f3:a0:57:f6:2a:81:dc:7a:f8:47:68:09: 56:98:5f:52:cc:22:40:ad:64:fa:4d:be:99:ca:a7:70:79:9c: 7f:64:85:1a:a0:03:a3:42:72:88:90:aa:1e:6f:77:bb:5c:e6: eb:8e:77:57:64:72:a8:ab:dd:63:50:ff:cd:64:75:df:31:dc: 76:21:5d:78:b5:5f:90:a2:cf:58:91:0c:5d:be:bd:35:15:bb: f1:d7:d6:25:69:d0:9e:c5:1c:1c:c3:b6:63:17:bd:5d:61:8e: de:11:15:7e:51:b5:0b:a6:c5:03:25:83:27:c1:0d:b4:37:1c: 03:f1:d7:b2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WKBWwCw2TDiv+pk0lnSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjFjOTFiNjNiYmJkYTg4MDRhNzQ5ZjNkNjEwZThiMjE3 ZjliNzMwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODA0NGI4NjNhMDI2MzU5ODQ4OWY0OGM4MDdiNzc2ZjcwNGU2ODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOgkvcKM3FmAW1IYkBcI2+ssBvAw FyszO50CADwepyGwsc/YVTPsqccWxzJXyaeYqu0iyunyMRWU/G6f/kmBUTdydEUd oIOFAyJpM4Snw1e+2A3WMYYIMDoW22v3EanvDFiVJYM18Zl9kBRv+bImmX53ywNa fcVkDc0b41AXRaH3HAnX7iI2BnvmN/eZW/mdznutHwoepv/rN7ZadIMjkKvoirdm 6cUStZQARdm6cCwTRpOoIe03khSP+tLMXgxf7u7OEtclcS5DtJivAjHkxDEmAvXS iK4ZfhPaodWoTiHdKnWrIgvke4fxpobFSXunmfIcbYZ+TmqmoZRrRse0CQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBgES4Y6AmNZhIn0jIB7d29wTmhxMB8GA1UdIwQY MBaAFEohyRtju72ogEp0nz1hDoshf5tzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQt NDdmYmU0YzRhNGZkLzEvR0FSTGhqb0NZMW1FaWZTTWdIdDNiM0JPYUhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQtNDdmYmU0YzRhNGZk LzEvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBbacAwQC udY0MA0EAgACMAcDBQAqC5XAMA0GCSqGSIb3DQEBCwUAA4IBAQDP7lhGLQb5AsaA yiwfC2o71EvyqWISmVoMBtV2qMPpZLRiyyPiqCN9gqLlO+BgX5e6Irt+VyY/65gf Ejgehox/xtFPuJKiM95c85zaixUl8FWXvvyNqzleygST8PT+xm+zkTzf0wAORGqi euIQq++YH0Y3LuNRed07wlYb65h045u4ievzoFf2KoHcevhHaAlWmF9SzCJArWT6 Tb6ZyqdweZx/ZIUaoAOjQnKIkKoeb3e7XObrjndXZHKoq91jUP/NZHXfMdx2IV14 tV+Qos9YkQxdvr01Fbvx19YladCexRwcw7ZjF71dYY7eERV+UbULpsUDJYMnwQ20 NxwD8dey -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:49 2026 by rpki-client