This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ge_qG75CaLMKt1s8rP1tYixjlSM.roa File: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (raw, json) Hash identifier: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90= Subject key identifier: 81:EF:EA:1B:BE:42:68:B3:0A:B7:5B:3C:AC:FD:6D:62:2C:63:95:23 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389FFC1ECB74403268518004A33B09 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ge_qG75CaLMKt1s8rP1tYixjlSM.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209637 IP address blocks: 195.74.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9f:fc:1e:cb:74:40:32:68:51:80:04:a3:3b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81efea1bbe4268b30ab75b3cacfd6d622c639523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:04:fb:d6:3b:ac:69:15:d0:76:b1:9f:a2: cd:a4:1b:3c:08:06:19:aa:20:4b:97:58:3c:76:6f: 91:08:a7:1e:95:14:7a:79:ee:20:fe:aa:30:a8:1c: 6b:36:e9:8a:a2:70:26:1e:16:1f:e6:22:de:0c:a1: e2:aa:cb:c5:8e:28:3c:05:e4:d2:5f:76:7a:da:eb: 26:ed:c2:bb:d1:b1:43:67:04:e0:23:c9:e5:69:2b: 32:d4:a8:7c:00:f3:01:49:b6:64:b6:d9:46:31:10: bd:c8:36:20:6e:eb:51:67:54:18:bd:10:d5:4a:bc: 47:26:36:1a:50:01:88:b8:70:f9:84:8e:9d:e7:b8: b0:6c:96:30:3e:4d:b2:f0:4e:1c:5c:66:15:60:59: f6:ca:10:1e:1f:e6:e2:bb:f9:f9:89:40:4a:46:1b: 47:a9:aa:8f:b5:4e:a6:4d:45:5f:92:ae:c8:5f:cc: 19:96:bd:cb:22:1f:94:22:5d:74:16:f6:7a:5f:bf: ac:11:d5:de:12:3b:f3:cc:75:2c:76:0c:cc:0b:2d: a6:fa:10:1a:ca:34:48:b9:91:c5:27:e0:44:cd:5f: 5f:a5:9b:ed:a6:25:6f:69:0f:b1:fd:26:7e:44:48: 68:46:c6:34:9e:88:21:22:60:6e:51:e0:b8:9c:22: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EF:EA:1B:BE:42:68:B3:0A:B7:5B:3C:AC:FD:6D:62:2C:63:95:23 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ge_qG75CaLMKt1s8rP1tYixjlSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.74.65.0/24 Signature Algorithm: sha256WithRSAEncryption 95:f4:c4:3c:68:35:7d:24:51:0a:31:e0:ac:f4:05:5d:a5:b6: 2c:35:01:29:9e:fe:04:bf:91:4d:bd:22:5d:9c:a9:63:ac:96: 50:3b:24:28:ac:3a:6c:11:34:56:57:78:df:0c:85:ff:a1:1a: 28:26:6f:11:6f:ec:f3:8e:ce:0f:95:89:83:5c:da:a0:51:18: 2a:e3:96:97:c4:61:9b:2a:fe:45:e8:6d:c3:f4:84:7c:e8:f9: 2a:f5:e7:1d:a1:88:10:e9:5b:0d:96:23:db:30:c5:88:e2:ad: 60:1f:10:95:46:77:15:9c:e1:f0:28:fd:13:57:88:7b:82:c3: 5c:5d:95:e6:a9:e0:57:c6:a0:f9:52:83:4d:8c:84:b7:74:ce: 82:e2:fc:80:23:50:a8:80:f3:55:7c:02:22:70:9a:40:1b:cb: e0:83:11:89:15:21:23:83:f5:72:22:3c:0e:36:f1:ad:01:74: 66:6d:39:7f:ee:df:3d:f8:ea:a1:8c:41:19:fe:bf:7c:ba:a5: b1:24:83:9a:66:87:b9:bb:c0:25:56:71:7e:60:40:72:30:36: ae:99:1e:2c:ce:1a:20:60:9e:0d:32:3d:50:32:58:59:04:42: 7c:6c:54:2d:1a:62:14:91:03:dd:c8:95:2a:bc:79:b7:71:63: 49:8d:05:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJ/8Hst0QDJoUYAEozsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWVmZWExYmJlNDI2OGIzMGFiNzViM2NhY2ZkNmQ2MjJjNjM5NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw88E+9Y7rGkV0Haxn6LNpBs8CAYZ qiBLl1g8dm+RCKcelRR6ee4g/qowqBxrNumKonAmHhYf5iLeDKHiqsvFjig8BeTS X3Z62usm7cK70bFDZwTgI8nlaSsy1Kh8APMBSbZkttlGMRC9yDYgbutRZ1QYvRDV SrxHJjYaUAGIuHD5hI6d57iwbJYwPk2y8E4cXGYVYFn2yhAeH+biu/n5iUBKRhtH qaqPtU6mTUVfkq7IX8wZlr3LIh+UIl10FvZ6X7+sEdXeEjvzzHUsdgzMCy2m+hAa yjRIuZHFJ+BEzV9fpZvtpiVvaQ+x/SZ+REhoRsY0noghImBuUeC4nCJQkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIHv6hu+QmizCrdbPKz9bWIsY5UjMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvZ2VfcUc3NUNhTE1LdDFzOHJQMXRZaXhqbFNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0pBMA0G CSqGSIb3DQEBCwUAA4IBAQCV9MQ8aDV9JFEKMeCs9AVdpbYsNQEpnv4Ev5FNvSJd nKljrJZQOyQorDpsETRWV3jfDIX/oRooJm8Rb+zzjs4PlYmDXNqgURgq45aXxGGb Kv5F6G3D9IR86Pkq9ecdoYgQ6VsNliPbMMWI4q1gHxCVRncVnOHwKP0TV4h7gsNc XZXmqeBXxqD5UoNNjIS3dM6C4vyAI1CogPNVfAIicJpAG8vggxGJFSEjg/VyIjwO NvGtAXRmbTl/7t89+OqhjEEZ/r98uqWxJIOaZoe5u8AlVnF+YEByMDaumR4szhog YJ4NMj1QMlhZBEJ8bFQtGmIUkQPdyJUqvHm3cWNJjQUf -----END CERTIFICATE-----Generated at Thu Feb 5 13:56:10 2026 by rpki-client