This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/A4GalviEuSvDRygo_-qVl6eCT10.roa File: A4GalviEuSvDRygo_-qVl6eCT10.roa (raw, json) Hash identifier: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA= Subject key identifier: 03:81:9A:96:F8:84:B9:2B:C3:47:28:28:FF:EA:95:97:A7:82:4F:5D Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Certificate serial: 019B7EA725927EFACFCEE1F9C6D4B72B62E7 Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/A4GalviEuSvDRygo_-qVl6eCT10.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205376 IP address blocks: 193.141.67.0/24 maxlen: 24 194.120.16.0/23 maxlen: 23 2001:67c:2e58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:25:92:7e:fa:cf:ce:e1:f9:c6:d4:b7:2b:62:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03819a96f884b92bc3472828ffea9597a7824f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:72:f7:01:2f:8c:6e:1c:fa:49:23:b9:ea: be:77:cb:13:e3:4a:f7:6b:68:99:38:58:7e:c2:fa: cc:a7:98:cd:9f:8d:85:6b:1f:5c:4d:8a:9c:56:38: 3b:9e:bd:01:fe:a0:eb:36:a1:d6:07:65:a2:0d:30: 90:92:c5:c0:24:cc:d5:58:34:e2:3b:32:56:97:62: 50:ae:16:5f:ac:4b:75:8f:1a:dc:7b:88:94:48:9e: e7:ba:07:09:96:22:af:86:23:a6:11:84:0f:dd:02: be:05:7b:49:c2:b0:f3:e3:84:50:05:3f:c3:66:cb: a2:5f:29:09:a0:e3:56:f9:f4:ae:bf:52:7e:25:20: 67:fd:f5:4a:0e:e6:c6:42:4b:1b:d1:94:bc:6c:f2: 41:a8:12:60:c0:05:3a:67:80:26:31:89:30:c3:12: 6f:b2:17:52:90:f2:01:01:dc:6b:b8:87:0b:3b:dc: 68:f6:c1:0e:71:48:9c:4f:84:df:b6:7a:09:a3:c9: a6:c6:17:69:dc:a8:b8:e6:a6:f6:6c:cd:f0:5d:b5: 46:d4:24:a7:ab:a4:21:e7:9e:ae:49:2e:8f:5c:98: 77:dc:50:ee:7b:dc:55:50:23:c2:dc:62:5e:3c:88: 68:95:e7:9e:bf:16:4f:5e:15:74:be:07:75:73:1c: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:81:9A:96:F8:84:B9:2B:C3:47:28:28:FF:EA:95:97:A7:82:4F:5D X509v3 Authority Key Identifier: keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/A4GalviEuSvDRygo_-qVl6eCT10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.67.0/24 194.120.16.0/23 IPv6: 2001:67c:2e58::/48 Signature Algorithm: sha256WithRSAEncryption 64:1f:17:c0:02:7a:ed:d7:2c:7e:98:55:ef:39:88:8d:bc:22: e0:fe:18:1f:10:f6:78:f7:d9:44:7f:62:40:fe:2f:d3:f2:01: 1a:f7:b9:8a:04:2c:26:8c:c9:4f:f5:bc:2c:9e:a1:d1:75:6e: 7c:01:88:29:e9:5c:bb:43:02:6c:ab:8e:4d:b5:d4:cc:1b:24: 90:5a:f2:45:f5:ff:da:5c:ff:72:a1:47:7c:8b:ef:3c:88:44: 74:25:52:57:cf:13:19:e8:a6:b7:da:e5:f4:ec:aa:68:12:6b: aa:bf:43:ce:e1:0c:86:01:ed:1d:77:2e:fd:7a:12:e9:80:13: 3e:c4:ef:12:ca:04:7f:4e:45:3c:46:58:52:ed:c5:2b:2f:3d: a2:2e:aa:33:3b:2a:63:13:9f:4b:19:07:e0:9c:55:4e:88:fe: 49:fd:38:5a:74:b3:4b:37:07:f5:3a:5e:36:50:20:94:70:98: 61:0b:93:fa:e7:b9:b5:7c:f9:ba:e8:28:c0:3a:0a:94:a4:71: 5d:f9:f8:b4:bc:8b:be:ea:4b:7c:bb:bd:bf:78:0a:80:36:1d: 3d:03:d4:0f:35:25:2e:f3:62:0f:20:89:0c:d1:48:ae:83:50: e9:97:64:9a:b7:70:22:e6:a1:1d:7c:fa:ba:fa:4f:4d:ee:d9: b1:db:43:53 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+pyWSfvrPzuH5xtS3K2LnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi MWM3ZjMwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzgxOWE5NmY4ODRiOTJiYzM0NzI4MjhmZmVhOTU5N2E3ODI0ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Jy9wEvjG4c+kkjueq+d8sT40r3 a2iZOFh+wvrMp5jNn42Fax9cTYqcVjg7nr0B/qDrNqHWB2WiDTCQksXAJMzVWDTi OzJWl2JQrhZfrEt1jxrce4iUSJ7nugcJliKvhiOmEYQP3QK+BXtJwrDz44RQBT/D ZsuiXykJoONW+fSuv1J+JSBn/fVKDubGQksb0ZS8bPJBqBJgwAU6Z4AmMYkwwxJv shdSkPIBAdxruIcLO9xo9sEOcUicT4TftnoJo8mmxhdp3Ki45qb2bM3wXbVG1CSn q6Qh556uSS6PXJh33FDue9xVUCPC3GJePIholeeevxZPXhV0vgd1cxzh/QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAOBmpb4hLkrw0coKP/qlZengk9dMB8GA1UdIwQY MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt ZWQzMmM1NjEyODQwLzEvQTRHYWx2aUV1U3ZEUnlnb18tcVZsNmVDVDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwY1DAwQB wngQMA8EAgACMAkDBwAgAQZ8LlgwDQYJKoZIhvcNAQELBQADggEBAGQfF8ACeu3X LH6YVe85iI28IuD+GB8Q9nj32UR/YkD+L9PyARr3uYoELCaMyU/1vCyeodF1bnwB iCnpXLtDAmyrjk211MwbJJBa8kX1/9pc/3KhR3yL7zyIRHQlUlfPExnoprfa5fTs qmgSa6q/Q87hDIYB7R13Lv16EumAEz7E7xLKBH9ORTxGWFLtxSsvPaIuqjM7KmMT n0sZB+CcVU6I/kn9OFp0s0s3B/U6XjZQIJRwmGELk/rnubV8+broKMA6CpSkcV35 +LS8i77qS3y7vb94CoA2HT0D1A81JS7zYg8giQzRSK6DUOmXZJq3cCLmoR18+rr6 T03u2bHbQ1M= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:49 2026 by rpki-client