This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/GAMWcJPDot5gDse8-ySFiFtYeDU.roa File: GAMWcJPDot5gDse8-ySFiFtYeDU.roa (raw, json) Hash identifier: jgN5bn3hFVBjz3varL/OEb4kgGmVIwVN5Y8c2wRa1fc= Subject key identifier: 18:03:16:70:93:C3:A2:DE:60:0E:C7:BC:FB:24:85:88:5B:58:78:35 Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22 Certificate serial: 019AF1741C371AC6F63065AC99C768311ACA Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/GAMWcJPDot5gDse8-ySFiFtYeDU.roa Signing time: Sat 06 Dec 2025 02:18:29 +0000 ROA not before: Sat 06 Dec 2025 02:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400318 IP address blocks: 185.16.0.0/24 maxlen: 24 185.16.1.0/24 maxlen: 24 185.16.2.0/24 maxlen: 24 185.16.3.0/24 maxlen: 24 193.57.228.0/24 maxlen: 24 193.57.229.0/24 maxlen: 24 193.57.230.0/24 maxlen: 24 193.57.230.224/29 maxlen: 29 193.57.231.0/24 maxlen: 24 194.165.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:74:1c:37:1a:c6:f6:30:65:ac:99:c7:68:31:1a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086438e9889389829fa5f51b6a210731082eac22 Validity Not Before: Dec 6 02:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1803167093c3a2de600ec7bcfb2485885b587835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:85:b5:c5:e5:77:ea:26:1a:40:75:5b:1a: 37:f2:07:21:26:d5:f1:8e:9e:d4:6b:5d:39:c3:a9: fe:57:91:d3:ec:f4:a0:7c:04:8c:fd:d2:92:c8:49: 72:f9:d2:9d:e9:f8:eb:61:47:19:63:b5:81:d9:64: 32:c5:5a:e1:56:97:43:e8:f0:b8:db:eb:9d:31:c5: 9b:f8:cc:b9:1d:42:bc:cb:60:f3:23:66:a4:ea:89: 1a:ed:05:c3:86:8a:d7:e3:f2:2b:c7:04:ea:46:f6: de:28:ea:29:6c:aa:5e:1f:fc:16:b1:ac:5a:9d:dd: bd:7e:cf:92:be:10:6c:d4:c0:5e:04:82:b9:08:d2: 4c:07:6b:19:a2:1a:27:f9:dd:a6:28:0a:4e:0e:01: 69:e3:9e:5d:58:69:46:b6:cd:51:72:e1:8f:eb:9a: 20:e0:b2:e7:f2:4b:ad:87:c4:e0:02:1a:e8:4e:41: f1:c9:29:a2:2c:22:c1:4a:f6:d5:1e:27:6a:76:b7: 1a:60:41:55:ea:c4:33:bd:49:7e:b8:76:5f:da:ea: 7f:5b:d6:f7:73:32:73:6c:fa:ba:71:6e:44:0f:58: 9c:56:7f:8b:7a:87:dc:1f:78:20:ff:59:94:2f:17: de:e6:8d:80:db:68:1e:cb:22:a1:76:a9:c3:1d:44: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:03:16:70:93:C3:A2:DE:60:0E:C7:BC:FB:24:85:88:5B:58:78:35 X509v3 Authority Key Identifier: keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/GAMWcJPDot5gDse8-ySFiFtYeDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.0.0/22 193.57.228.0/22 194.165.37.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:4a:8e:cd:15:56:9a:ee:1f:7c:57:46:51:90:f8:7d:c7:bf: 12:55:ba:11:24:98:80:37:7d:ef:00:9a:df:30:68:a8:1c:3f: 60:8d:ab:b5:fd:1b:1d:2f:4f:45:86:4a:f8:df:d6:28:5e:3f: f9:3c:a6:af:7b:1c:48:fe:f0:3d:fa:1c:fd:28:cd:fe:e9:a4: d8:5b:87:db:b2:2f:07:f0:9d:aa:c0:74:c4:ae:91:43:ff:d5: 73:d9:82:dd:ac:41:1e:76:d6:41:0c:53:f6:89:77:06:86:98: 65:c1:b1:51:e6:9a:76:01:d2:cf:a2:c5:51:8b:b6:80:6d:d7: d7:bf:a7:45:b7:31:1f:24:bb:5a:43:4c:55:3a:72:ce:97:33: 35:de:2f:94:86:ad:e7:ca:08:3a:5f:87:fd:a7:a6:fd:c6:35: cc:b0:91:71:1b:02:a3:35:40:f3:b3:b5:43:f8:e4:e6:ff:6d: 57:32:4b:2f:75:d5:77:14:78:2f:33:95:55:c9:12:57:c2:4c: d6:e5:b0:12:df:3e:84:24:48:a8:aa:41:24:b4:4e:d3:b3:87: e4:72:51:5f:1c:76:76:d7:c2:fe:8d:65:05:41:d1:b2:c1:78: 8c:f2:06:a5:dd:04:b8:11:e0:08:5b:b8:c9:3c:c2:48:e0:08: f3:7f:fc:43 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrxdBw3Gsb2MGWsmcdoMRrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy ZWFjMjIwHhcNMjUxMjA2MDIxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODAzMTY3MDkzYzNhMmRlNjAwZWM3YmNmYjI0ODU4ODViNTg3ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI2FtcXld+omGkB1Wxo38gchJtXx jp7Ua105w6n+V5HT7PSgfASM/dKSyEly+dKd6fjrYUcZY7WB2WQyxVrhVpdD6PC4 2+udMcWb+My5HUK8y2DzI2ak6oka7QXDhorX4/IrxwTqRvbeKOopbKpeH/wWsaxa nd29fs+SvhBs1MBeBIK5CNJMB2sZohon+d2mKApODgFp455dWGlGts1RcuGP65og 4LLn8kuth8TgAhroTkHxySmiLCLBSvbVHidqdrcaYEFV6sQzvUl+uHZf2up/W9b3 czJzbPq6cW5ED1icVn+LeofcH3gg/1mULxfe5o2A22geyyKhdqnDHUTRdQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBgDFnCTw6LeYA7HvPskhYhbWHg1MB8GA1UdIwQY MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt YTc4MTBlM2ExYmViLzEvR0FNV2NKUERvdDVnRHNlOC15U0ZpRnRZZURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuRAAAwQC wTnkAwQAwqUlMA0GCSqGSIb3DQEBCwUAA4IBAQA8So7NFVaa7h98V0ZRkPh9x78S VboRJJiAN33vAJrfMGioHD9gjau1/RsdL09Fhkr439YoXj/5PKavexxI/vA9+hz9 KM3+6aTYW4fbsi8H8J2qwHTErpFD/9Vz2YLdrEEedtZBDFP2iXcGhphlwbFR5pp2 AdLPosVRi7aAbdfXv6dFtzEfJLtaQ0xVOnLOlzM13i+Uhq3nygg6X4f9p6b9xjXM sJFxGwKjNUDzs7VD+OTm/21XMksvddV3FHgvM5VVyRJXwkzW5bAS3z6EJEioqkEk tE7Ts4fkclFfHHZ218L+jWUFQdGywXiM8gal3QS4EeAIW7jJPMJI4Ajzf/xD -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:37 2025 by rpki-client