This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/ga1BrMjD7wY_QoN5ExMTad0kou0.roa File: ga1BrMjD7wY_QoN5ExMTad0kou0.roa (raw, json) Hash identifier: /2/Lg7lZekU4p6NvtnYYz9mRfacgER7O7n79Ibm5W4s= Subject key identifier: 81:AD:41:AC:C8:C3:EF:06:3F:42:83:79:13:13:13:69:DD:24:A2:ED Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Certificate serial: 019B7BA519117002D468473AE43D3B64C243 Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/ga1BrMjD7wY_QoN5ExMTad0kou0.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 194.88.222.0/24 maxlen: 24 194.88.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:19:11:70:02:d4:68:47:3a:e4:3d:3b:64:c2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81ad41acc8c3ef063f42837913131369dd24a2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:09:85:9e:8e:5a:6c:6c:ab:9b:db:5d:0f: 9f:f1:8b:86:b6:b6:7d:b2:22:54:c3:e2:3b:3d:1c: 09:bf:5d:c4:b5:ea:ca:5f:a4:7e:3b:da:00:1c:1f: e2:3f:10:80:90:73:60:3a:5f:58:5a:17:5c:ba:de: bc:84:87:87:02:aa:c7:d5:65:ab:73:c4:40:2a:88: 4b:0c:59:9c:81:76:75:27:fc:ae:78:04:a4:dc:42: fc:76:c4:79:d3:a1:83:4e:be:eb:2b:d1:3a:59:6a: d8:8b:5e:f8:11:9e:fe:6e:54:94:75:92:75:bf:4a: 8d:85:da:1d:f3:d4:ef:bf:69:16:17:49:d9:ed:3e: ab:af:07:65:f1:3e:53:41:42:e9:54:b9:63:fd:a5: f4:cf:f3:f5:d3:57:a9:74:ff:92:76:e7:13:79:50: 56:b3:99:0d:93:4b:72:96:4b:65:10:f6:50:5b:ac: a7:ce:10:7d:7b:a6:34:c8:31:7c:25:ae:65:2d:43: 59:b3:5b:09:10:de:50:66:53:d5:c4:c3:42:64:8b: f9:81:83:d8:7b:2c:1e:54:02:ef:0d:b3:26:31:89: 19:51:36:3e:a2:98:60:22:b1:9a:04:96:1f:72:7b: 62:aa:a0:61:8d:33:4f:8e:14:27:f7:36:dc:cb:f0: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AD:41:AC:C8:C3:EF:06:3F:42:83:79:13:13:13:69:DD:24:A2:ED X509v3 Authority Key Identifier: keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/ga1BrMjD7wY_QoN5ExMTad0kou0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.222.0/23 Signature Algorithm: sha256WithRSAEncryption 89:34:5f:e1:a3:60:12:0c:07:5b:e9:91:17:54:48:a5:cf:05: 69:97:e7:5e:30:35:0f:f3:58:bb:d0:8b:4d:5d:8e:33:85:62: df:c9:a6:c0:84:63:23:df:9e:c0:60:4c:a8:5a:01:e2:d4:4a: 32:66:0b:d8:72:09:64:8f:fe:d3:bb:d9:f0:dd:e9:c8:a2:2b: 5a:c5:97:b4:51:6f:b6:98:a7:d0:cf:1e:d5:0a:83:cb:30:14: 18:54:ab:2b:f6:5b:4a:f2:81:5e:72:ea:85:37:f5:9a:b1:94: be:52:82:88:8f:40:6e:08:0e:b7:aa:a3:c3:e0:09:de:a4:5f: 8f:8d:3e:5c:94:08:3b:3a:c0:10:4a:22:ae:ec:14:9d:94:96: f8:8a:5e:8b:8a:ec:6b:94:59:23:e3:b2:e4:5f:d6:ea:3e:33: 76:33:65:af:76:d0:4e:a8:45:7b:ad:54:80:b8:99:02:8f:de: d0:a6:d8:42:7b:4b:01:16:16:98:ff:2b:d6:78:d1:18:d4:20: e4:f2:1a:4e:b5:2b:db:c8:ad:0f:47:e1:de:81:9e:7f:e1:fb: 7d:ea:9f:22:a4:3a:53:ca:0e:1c:31:41:0e:e6:66:02:fa:ab: e2:51:83:0a:9a:8a:db:50:5d:c3:59:72:11:9d:7b:03:2b:69: 36:e0:62:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRkRcALUaEc65D07ZMJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux ZTllZGMwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWFkNDFhY2M4YzNlZjA2M2Y0MjgzNzkxMzEzMTM2OWRkMjRhMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpcJhZ6OWmxsq5vbXQ+f8YuGtrZ9 siJUw+I7PRwJv13EterKX6R+O9oAHB/iPxCAkHNgOl9YWhdcut68hIeHAqrH1WWr c8RAKohLDFmcgXZ1J/yueASk3EL8dsR506GDTr7rK9E6WWrYi174EZ7+blSUdZJ1 v0qNhdod89Tvv2kWF0nZ7T6rrwdl8T5TQULpVLlj/aX0z/P101epdP+SducTeVBW s5kNk0tylktlEPZQW6ynzhB9e6Y0yDF8Ja5lLUNZs1sJEN5QZlPVxMNCZIv5gYPY eyweVALvDbMmMYkZUTY+ophgIrGaBJYfcntiqqBhjTNPjhQn9zbcy/CDswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGtQazIw+8GP0KDeRMTE2ndJKLtMB8GA1UdIwQY MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt MTAwZWVkODEyYzQwLzEvZ2ExQnJNakQ3d1lfUW9ONUV4TVRhZDBrb3UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwljeMA0G CSqGSIb3DQEBCwUAA4IBAQCJNF/ho2ASDAdb6ZEXVEilzwVpl+deMDUP81i70ItN XY4zhWLfyabAhGMj357AYEyoWgHi1EoyZgvYcglkj/7Tu9nw3enIoitaxZe0UW+2 mKfQzx7VCoPLMBQYVKsr9ltK8oFecuqFN/WasZS+UoKIj0BuCA63qqPD4AnepF+P jT5clAg7OsAQSiKu7BSdlJb4il6LiuxrlFkj47LkX9bqPjN2M2WvdtBOqEV7rVSA uJkCj97QpthCe0sBFhaY/yvWeNEY1CDk8hpOtSvbyK0PR+HegZ5/4ft96p8ipDpT yg4cMUEO5mYC+qviUYMKmorbUF3DWXIRnXsDK2k24GL6 -----END CERTIFICATE-----Generated at Wed Jan 21 06:08:43 2026 by rpki-client