This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GrGMKdlmeQjbxxfRgWdHbLv2_9s.roa File: GrGMKdlmeQjbxxfRgWdHbLv2_9s.roa (raw, json) Hash identifier: xkJ+BUHPgzdNP6vsPzr9P0RxTQU+R+3kKUOHfFXg0sY= Subject key identifier: 1A:B1:8C:29:D9:66:79:08:DB:C7:17:D1:81:67:47:6C:BB:F6:FF:DB Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33F73925F140ED14EA9F9A78C779D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GrGMKdlmeQjbxxfRgWdHbLv2_9s.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212219 IP address blocks: 212.87.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3f:73:92:5f:14:0e:d1:4e:a9:f9:a7:8c:77:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ab18c29d9667908dbc717d18167476cbbf6ffdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:f2:4e:4b:0b:35:a2:ab:c8:97:0f:24:10: 2a:0c:fa:eb:d3:83:e1:62:94:6c:b7:c6:a7:b7:39: 09:60:83:37:e4:23:ee:22:ee:9e:ea:eb:52:30:c0: fc:fd:cf:27:e6:e1:b4:a5:24:36:50:90:d1:4e:d6: 58:18:6c:4c:25:35:25:8b:45:83:41:19:ae:87:af: 69:e2:6a:48:79:6d:5e:7d:dd:71:e7:1b:63:aa:0f: 4b:34:7c:1a:7c:7f:ce:da:ed:ec:4f:34:73:81:11: c6:89:b1:5c:25:3c:fb:fa:0d:be:98:42:b9:23:9a: e9:2f:c1:4b:30:43:75:06:a9:e0:77:78:5f:f8:78: 3c:e8:11:b6:e0:b8:aa:12:99:38:c7:d8:eb:65:9c: c5:db:ce:ff:f9:41:11:38:68:ad:e3:7c:78:e3:06: 30:82:28:f6:51:6f:02:1b:91:c1:04:8b:28:84:96: ea:14:7e:f4:b2:69:f8:c3:22:65:0d:cd:42:a0:a9: f9:47:1c:0c:f1:13:9e:fb:9a:1e:cb:91:a5:e5:12: 78:68:11:cd:52:93:29:a1:6e:d1:d2:2c:e0:be:75: 04:45:28:80:b2:f8:a6:7a:d8:1b:af:5f:4b:4c:d1: b9:a1:78:2d:b0:f1:bc:7d:72:7d:45:2f:99:a5:72: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:8C:29:D9:66:79:08:DB:C7:17:D1:81:67:47:6C:BB:F6:FF:DB X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GrGMKdlmeQjbxxfRgWdHbLv2_9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.221.0/24 Signature Algorithm: sha256WithRSAEncryption 14:63:39:dc:b1:5a:4c:e0:13:28:20:34:2b:e9:43:a8:18:e4: 69:b8:06:d8:dd:3c:e9:1c:a0:b8:0f:d3:86:27:a3:fc:0e:15: dc:32:32:3a:d0:40:ac:93:ea:b0:cf:f3:0b:af:f8:c1:6d:02: c8:c6:a7:aa:f6:1e:88:7e:1c:f0:f3:61:c8:f2:9f:85:24:0f: 47:25:a6:57:53:ab:44:4c:83:4a:fe:7b:0e:89:60:ad:45:e7: 5b:3c:62:2a:56:13:37:45:0a:64:e1:31:80:4f:95:ba:5b:8d: 79:17:d1:ad:22:12:c4:77:cb:ff:b2:0f:de:f3:23:0e:9d:c7: 1b:24:4e:05:14:52:be:56:61:27:26:d9:f5:b2:74:71:5e:82: 28:54:74:f1:ca:a0:2e:c7:b5:de:0c:7d:79:26:d2:ae:06:43: 16:34:77:9b:0b:5a:72:0b:51:bb:93:75:0a:fe:bf:77:e5:b1: 37:82:ac:24:dd:3c:4f:1e:d0:e7:38:63:be:c8:3d:32:30:5f: b3:3c:78:2f:09:a4:86:ea:45:51:4d:7e:f3:f9:bc:cc:9e:a9: 42:62:4d:bd:b8:b4:ea:d6:b9:e9:46:91:37:72:fa:f0:12:a6: 43:c8:78:a0:a7:0d:0d:c6:bd:66:ec:c4:61:b1:d0:0d:94:2a: 70:3f:72:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz9zkl8UDtFOqfmnjHedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWIxOGMyOWQ5NjY3OTA4ZGJjNzE3ZDE4MTY3NDc2Y2JiZjZmZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlafyTksLNaKryJcPJBAqDPrr04Ph YpRst8antzkJYIM35CPuIu6e6utSMMD8/c8n5uG0pSQ2UJDRTtZYGGxMJTUli0WD QRmuh69p4mpIeW1efd1x5xtjqg9LNHwafH/O2u3sTzRzgRHGibFcJTz7+g2+mEK5 I5rpL8FLMEN1Bqngd3hf+Hg86BG24LiqEpk4x9jrZZzF287/+UEROGit43x44wYw gij2UW8CG5HBBIsohJbqFH70smn4wyJlDc1CoKn5RxwM8ROe+5oey5Gl5RJ4aBHN UpMpoW7R0izgvnUERSiAsvimetgbr19LTNG5oXgtsPG8fXJ9RS+ZpXLTDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqxjCnZZnkI28cX0YFnR2y79v/bMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvR3JHTUtkbG1lUWpieHhmUmdXZEhiTHYyXzlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfdMA0G CSqGSIb3DQEBCwUAA4IBAQAUYzncsVpM4BMoIDQr6UOoGORpuAbY3TzpHKC4D9OG J6P8DhXcMjI60ECsk+qwz/MLr/jBbQLIxqeq9h6Ifhzw82HI8p+FJA9HJaZXU6tE TINK/nsOiWCtRedbPGIqVhM3RQpk4TGAT5W6W415F9GtIhLEd8v/sg/e8yMOnccb JE4FFFK+VmEnJtn1snRxXoIoVHTxyqAux7XeDH15JtKuBkMWNHebC1pyC1G7k3UK /r935bE3gqwk3TxPHtDnOGO+yD0yMF+zPHgvCaSG6kVRTX7z+bzMnqlCYk29uLTq 1rnpRpE3cvrwEqZDyHigpw0Nxr1m7MRhsdANlCpwP3K9 -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:58 2026 by rpki-client