This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GaSCMV4XmzAxLCAeAkrFJsSYL68.roa File: GaSCMV4XmzAxLCAeAkrFJsSYL68.roa (raw, json) Hash identifier: 8armHfXsLYxT8u8vHUQJGjHAEIP47gs/JgtUgM3M2bw= Subject key identifier: 19:A4:82:31:5E:17:9B:30:31:2C:20:1E:02:4A:C5:26:C4:98:2F:AF Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d Certificate serial: 019B79EC89817178257339E52B19C3A0463E Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GaSCMV4XmzAxLCAeAkrFJsSYL68.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15945 IP address blocks: 77.72.216.0/21 maxlen: 22 193.31.52.0/22 maxlen: 24 213.183.64.0/19 maxlen: 24 213.206.160.0/19 maxlen: 19 2a02:24d8::/32 maxlen: 32 2a02:24d8:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:89:81:71:78:25:73:39:e5:2b:19:c3:a0:46:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19a482315e179b30312c201e024ac526c4982faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:0b:60:c3:94:bb:91:19:8c:7b:85:52:e4: b8:2a:02:b0:12:70:03:98:69:48:60:ff:94:5c:3d: 93:d5:b0:bd:5a:cd:8f:bc:13:4f:ef:8e:be:21:97: da:2a:3d:a8:87:8d:8e:32:16:f3:1d:6b:96:73:f4: 06:13:ac:09:39:af:d7:c7:85:67:76:75:2d:81:0b: c8:97:9c:79:58:1f:97:a3:a1:40:f6:ea:47:64:57: 53:72:5d:e3:af:dc:b5:9b:70:7d:f3:9b:f2:4c:b0: 48:b0:a3:b9:d7:14:3e:8e:d4:4d:56:8a:da:f6:3f: e4:e0:86:a3:07:80:04:c2:59:7b:cc:34:6f:67:d6: 07:b6:90:37:b9:64:ec:3b:9c:b1:31:c9:15:1f:16: b0:be:49:8b:2f:2e:95:09:e7:65:94:6e:35:97:d5: 3a:49:2f:e7:4e:ac:5c:9d:c4:d1:1f:4c:bd:5b:bb: 63:d6:4a:91:20:04:c0:17:b0:e9:f7:23:bb:d4:89: 59:02:c8:fd:d6:5c:62:11:fe:81:4a:35:a4:0c:eb: 56:d2:d5:fe:7b:93:57:5b:11:a7:3b:0a:8e:41:86: 2c:db:81:1e:c8:3f:5e:43:10:1f:97:66:c5:f3:8c: a9:ca:b0:45:53:45:41:31:e9:75:95:b9:44:55:a2: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A4:82:31:5E:17:9B:30:31:2C:20:1E:02:4A:C5:26:C4:98:2F:AF X509v3 Authority Key Identifier: keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GaSCMV4XmzAxLCAeAkrFJsSYL68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.216.0/21 193.31.52.0/22 213.183.64.0/19 213.206.160.0/19 IPv6: 2a02:24d8::/32 Signature Algorithm: sha256WithRSAEncryption a1:0d:6b:d4:51:01:53:0c:35:1e:76:05:e9:8a:0f:c3:73:57: df:33:27:f7:e6:72:95:c5:cd:5d:39:62:d4:82:7f:eb:35:5d: f6:fd:05:7c:9a:3f:81:e0:9b:15:f8:c4:61:a3:ea:d2:f9:3e: 57:4c:20:a1:eb:c1:fa:a4:f2:1f:ad:b7:00:d9:5b:aa:fd:60: 99:e7:a5:45:73:11:10:5a:54:74:69:38:80:f3:b7:0e:56:89: 7d:c3:05:b8:86:10:88:05:ff:88:ab:9c:7e:f6:c7:0e:25:f6: 80:f5:4c:a3:3f:98:ef:19:ea:a9:41:d5:7d:33:e8:10:ed:0f: a6:1a:53:f9:a1:0b:e0:3d:7c:a4:fa:5a:8f:e5:bd:d4:55:c3: ff:61:38:4b:9a:9f:db:1b:b6:e4:0d:46:61:e5:e4:e2:46:ec: 59:e3:ad:85:36:94:6d:c5:86:85:cb:f5:eb:95:d1:52:b9:37: d8:86:c0:4b:7d:e7:fd:03:f0:f7:e9:6a:f3:65:14:fd:09:8f: 42:de:9d:79:29:f5:08:7f:ed:f7:83:0d:73:65:cb:57:d1:68: e3:50:d0:a9:63:66:2f:db:d0:41:96:38:0c:17:34:87:6c:20: 5d:b1:be:c8:4d:90:75:64:53:38:89:d0:ce:37:c9:f4:39:98: d5:df:93:41 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57ImBcXglcznlKxnDoEY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1 YzYxMGQwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWE0ODIzMTVlMTc5YjMwMzEyYzIwMWUwMjRhYzUyNmM0OTgyZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gsLYMOUu5EZjHuFUuS4KgKwEnAD mGlIYP+UXD2T1bC9Ws2PvBNP746+IZfaKj2oh42OMhbzHWuWc/QGE6wJOa/Xx4Vn dnUtgQvIl5x5WB+Xo6FA9upHZFdTcl3jr9y1m3B985vyTLBIsKO51xQ+jtRNVora 9j/k4IajB4AEwll7zDRvZ9YHtpA3uWTsO5yxMckVHxawvkmLLy6VCedllG41l9U6 SS/nTqxcncTRH0y9W7tj1kqRIATAF7Dp9yO71IlZAsj91lxiEf6BSjWkDOtW0tX+ e5NXWxGnOwqOQYYs24EeyD9eQxAfl2bF84ypyrBFU0VBMel1lblEVaKgJQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBmkgjFeF5swMSwgHgJKxSbEmC+vMB8GA1UdIwQY MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt NjU1MDNhOTMwNmEwLzEvR2FTQ01WNFhtekF4TENBZUFrckZKc1NZTDY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTUjYAwQC wR80AwQF1bdAAwQF1c6gMA0EAgACMAcDBQAqAiTYMA0GCSqGSIb3DQEBCwUAA4IB AQChDWvUUQFTDDUedgXpig/Dc1ffMyf35nKVxc1dOWLUgn/rNV32/QV8mj+B4JsV +MRho+rS+T5XTCCh68H6pPIfrbcA2Vuq/WCZ56VFcxEQWlR0aTiA87cOVol9wwW4 hhCIBf+Iq5x+9scOJfaA9UyjP5jvGeqpQdV9M+gQ7Q+mGlP5oQvgPXyk+lqP5b3U VcP/YThLmp/bG7bkDUZh5eTiRuxZ462FNpRtxYaFy/XrldFSuTfYhsBLfef9A/D3 6WrzZRT9CY9C3p15KfUIf+33gw1zZctX0WjjUNCpY2Yv29BBljgMFzSHbCBdsb7I TZB1ZFM4idDON8n0OZjV35NB -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:50 2026 by rpki-client