This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/GA2Y-uN-QpiZvy9MeQHRyBRHUCs.roa File: GA2Y-uN-QpiZvy9MeQHRyBRHUCs.roa (raw, json) Hash identifier: YzwUNGwAfIrUBIVmFTyjpUgJnpdK+CCE3csrN+jpx20= Subject key identifier: 18:0D:98:FA:E3:7E:42:98:99:BF:2F:4C:79:01:D1:C8:14:47:50:2B Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019B02739CAD21C6D000CB4F3C56C8F2C3B9 Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/GA2Y-uN-QpiZvy9MeQHRyBRHUCs.roa Signing time: Tue 09 Dec 2025 09:31:29 +0000 ROA not before: Tue 09 Dec 2025 09:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9092 IP address blocks: 213.156.224.0/20 maxlen: 20 2a00:db0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:73:9c:ad:21:c6:d0:00:cb:4f:3c:56:c8:f2:c3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Dec 9 09:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=180d98fae37e429899bf2f4c7901d1c81447502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:c2:d2:a6:9a:c1:8b:44:fa:dc:10:35:a3: 63:ae:43:76:12:50:8e:f2:db:0e:83:58:7f:61:9b: dd:24:f9:8e:ef:92:b3:36:cb:ec:d1:bb:f9:8b:b1: 75:1d:24:ac:30:09:68:6d:8c:33:5f:57:e9:de:16: 1b:f7:4e:7e:94:2f:f2:a1:91:08:2c:14:dd:4e:82: 95:68:9a:7a:ed:a3:6f:9f:d0:dd:9c:87:32:72:2e: 05:26:3a:70:2f:44:52:a0:04:10:67:8c:e9:1c:2e: 56:1a:48:0f:8f:ee:92:c3:b4:51:30:89:7e:be:c1: 54:d1:e4:2b:9f:78:0a:48:51:d4:96:a1:a6:28:78: 43:af:93:26:83:ee:ba:68:38:9c:08:a4:2c:c0:47: 43:4f:ee:e3:a1:79:b0:af:41:d7:50:9f:70:db:4a: 41:3c:7f:b6:11:96:00:9a:26:39:39:91:19:54:51: 0d:36:59:2c:3c:1b:10:57:a6:e8:dc:fc:28:8c:d7: 5b:4d:9e:6d:ea:34:39:74:db:6d:cd:2e:a7:3e:49: 60:76:f3:1b:27:30:43:e5:78:a9:46:6d:63:32:28: c5:ff:99:af:4d:35:dc:3a:b9:95:c7:da:6d:58:7c: c7:1c:2e:4b:fc:c9:d5:57:07:32:c1:76:73:e1:6e: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0D:98:FA:E3:7E:42:98:99:BF:2F:4C:79:01:D1:C8:14:47:50:2B X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/GA2Y-uN-QpiZvy9MeQHRyBRHUCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.156.224.0/20 IPv6: 2a00:db0::/32 Signature Algorithm: sha256WithRSAEncryption 62:eb:6c:61:65:be:4d:bf:4c:e6:19:8b:f1:c5:b1:00:51:31: 9a:ba:b6:31:79:33:4e:8d:c6:4a:c8:5c:6e:dd:ff:44:9d:1b: 5f:4f:fa:4e:a1:95:06:a9:59:a4:5a:19:1c:3e:1a:c5:49:3b: 33:31:aa:6e:4d:ac:4b:4f:cb:7f:37:3f:66:57:87:c4:ca:c8: d0:e2:da:4d:5b:c6:18:c4:5e:c0:87:95:26:55:5f:a5:ee:d2: e5:68:7b:03:54:33:12:16:a6:c4:cf:31:0e:00:be:bc:30:44: 7f:e5:c2:8d:16:c7:57:f5:ca:1b:41:79:7f:13:67:ed:73:16: c7:cd:83:37:52:55:6c:35:9b:a4:72:7d:2c:cd:35:f7:e8:49: 0c:91:89:93:22:d1:70:3c:fc:d7:3e:64:21:a8:50:dd:28:91: 27:0d:84:67:87:59:de:97:15:e0:fb:e4:1b:07:59:55:37:d8: 10:fc:e9:46:bd:38:f7:f0:60:d0:f6:70:28:81:10:f5:76:ed: 5e:fa:3b:9b:d4:0c:3c:f5:c4:e8:ab:df:a4:ff:b7:33:d6:f8: 36:10:32:32:b9:77:a7:c1:59:ab:21:4f:c5:98:c9:5a:83:43: b6:21:55:8d:97:83:16:b1:07:54:27:34:c0:de:8b:6b:30:13: de:c7:c5:fc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsCc5ytIcbQAMtPPFbI8sO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjUxMjA5MDkzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODBkOThmYWUzN2U0Mjk4OTliZjJmNGM3OTAxZDFjODE0NDc1MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygzC0qaawYtE+twQNaNjrkN2ElCO 8tsOg1h/YZvdJPmO75KzNsvs0bv5i7F1HSSsMAlobYwzX1fp3hYb905+lC/yoZEI LBTdToKVaJp67aNvn9DdnIcyci4FJjpwL0RSoAQQZ4zpHC5WGkgPj+6Sw7RRMIl+ vsFU0eQrn3gKSFHUlqGmKHhDr5Mmg+66aDicCKQswEdDT+7joXmwr0HXUJ9w20pB PH+2EZYAmiY5OZEZVFENNlksPBsQV6bo3PwojNdbTZ5t6jQ5dNttzS6nPklgdvMb JzBD5XipRm1jMijF/5mvTTXcOrmVx9ptWHzHHC5L/MnVVwcywXZz4W5SewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBgNmPrjfkKYmb8vTHkB0cgUR1ArMB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEvR0EyWS11Ti1RcGladnk5TWVRSFJ5QlJIVUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE1ZzgMA0E AgACMAcDBQAqAA2wMA0GCSqGSIb3DQEBCwUAA4IBAQBi62xhZb5Nv0zmGYvxxbEA UTGaurYxeTNOjcZKyFxu3f9EnRtfT/pOoZUGqVmkWhkcPhrFSTszMapuTaxLT8t/ Nz9mV4fEysjQ4tpNW8YYxF7Ah5UmVV+l7tLlaHsDVDMSFqbEzzEOAL68MER/5cKN FsdX9cobQXl/E2ftcxbHzYM3UlVsNZukcn0szTX36EkMkYmTItFwPPzXPmQhqFDd KJEnDYRnh1nelxXg++QbB1lVN9gQ/OlGvTj38GDQ9nAogRD1du1e+jub1Aw89cTo q9+k/7cz1vg2EDIyuXenwVmrIU/FmMlag0O2IVWNl4MWsQdUJzTA3otrMBPex8X8 -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:57 2025 by rpki-client