This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/grgC47iwv_yPcU0PK-57zcrhx3w.roa File: grgC47iwv_yPcU0PK-57zcrhx3w.roa (raw, json) Hash identifier: Byu89q/FbONyFmYfNVRxv0Nw5EmOQBEB3SRiUqdLOKE= Subject key identifier: 82:B8:02:E3:B8:B0:BF:FC:8F:71:4D:0F:2B:EE:7B:CD:CA:E1:C7:7C Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5 Certificate serial: 019B77C6AA48CD318B722D35B0C219F1E8A0 Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/grgC47iwv_yPcU0PK-57zcrhx3w.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207047 IP address blocks: 185.205.168.0/22 maxlen: 22 185.205.168.0/24 maxlen: 24 185.205.169.0/24 maxlen: 24 185.205.170.0/24 maxlen: 24 185.205.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:aa:48:cd:31:8b:72:2d:35:b0:c2:19:f1:e8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b802e3b8b0bffc8f714d0f2bee7bcdcae1c77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:04:86:1f:86:65:a8:86:55:03:4d:de:f7:41: 89:d7:6f:9a:67:e6:bb:f3:97:af:a7:44:79:03:4b: f3:72:9d:14:1e:b4:8f:f2:a8:c8:bc:ee:de:21:5d: 2f:de:5a:db:01:f5:a9:7f:a7:19:de:e0:6c:ec:06: 04:c5:01:d0:dc:93:47:87:f5:e0:c7:8e:e9:9c:65: 93:40:68:7b:d4:fb:ff:96:7d:cc:fb:f9:b4:fb:35: 56:43:7a:e9:82:23:64:fc:b1:9c:13:d5:a7:3d:4e: 91:f1:6b:88:e7:b8:27:00:04:4f:23:7d:b7:ed:7d: 31:de:4c:85:ac:d0:24:40:ad:df:8d:ac:c4:09:ec: 54:6b:6f:35:ec:34:90:8c:5a:92:5c:b5:a3:db:e8: d1:8e:f6:f6:ff:c0:9c:a8:25:5b:3f:54:96:9d:29: 3b:15:f8:4a:6a:7e:c7:ce:47:8f:bd:a9:9e:35:62: 00:49:6a:18:83:d1:64:ce:26:06:60:d8:9b:90:e4: 5f:2b:c8:5a:71:72:ce:55:a0:97:10:01:85:0b:f1: 85:b2:c5:fe:eb:79:df:0e:f3:52:13:4c:4e:09:62: 09:e4:d9:e3:df:85:bd:00:6f:b0:6d:db:67:f8:0f: 21:86:94:26:fb:eb:57:f3:82:c9:34:54:14:9a:35: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B8:02:E3:B8:B0:BF:FC:8F:71:4D:0F:2B:EE:7B:CD:CA:E1:C7:7C X509v3 Authority Key Identifier: keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/grgC47iwv_yPcU0PK-57zcrhx3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.168.0/22 Signature Algorithm: sha256WithRSAEncryption 39:89:41:66:e7:a8:87:45:53:d2:f1:fc:f4:cb:bb:29:39:aa: c2:83:31:4d:d5:b7:f4:14:89:e0:1e:dd:6e:70:d9:ae:76:14: 97:a1:d8:cf:bf:58:f6:2a:12:69:33:8e:7d:5b:b3:04:94:da: 81:60:f1:e0:49:42:8a:8d:ae:d0:93:0f:23:f1:0a:45:43:d1: fb:af:fc:b5:fc:3b:fd:45:a9:a8:01:23:6d:17:00:17:17:02: a7:0e:64:38:fd:f7:9f:ea:50:e3:b9:ef:44:47:52:4a:c5:dd: a6:b5:a3:05:39:12:c5:27:17:01:97:63:d4:cc:c8:8d:27:d9: 01:96:82:76:08:6b:8f:b7:bf:64:cd:83:66:2a:66:84:03:4c: 69:57:41:ce:f9:3e:42:81:16:20:dd:62:17:3a:5e:dd:14:49: fb:ff:8a:0e:34:c7:11:be:ca:d9:24:b9:af:a2:6d:ec:80:85: c0:c4:69:98:63:00:9d:27:b7:9d:6c:e9:01:02:61:bf:54:0a: 9a:2d:46:5f:48:8b:d3:bd:51:50:a9:6f:a0:88:1b:ba:20:11: ab:1b:cd:cf:84:0e:4f:66:73:86:c4:22:56:dd:bb:6a:ff:87: 65:d9:7e:12:3c:07:3a:6f:f3:8c:86:38:a7:b9:f9:86:e9:a8: 03:4e:11:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqpIzTGLci01sMIZ8eigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZjIyMDNiYzAyODY3MDIzNDVhYzQ2NTUwMGI0NDg4YzAz MWM2YjUwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmI4MDJlM2I4YjBiZmZjOGY3MTRkMGYyYmVlN2JjZGNhZTFjNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wSGH4ZlqIZVA03e90GJ12+aZ+a7 85evp0R5A0vzcp0UHrSP8qjIvO7eIV0v3lrbAfWpf6cZ3uBs7AYExQHQ3JNHh/Xg x47pnGWTQGh71Pv/ln3M+/m0+zVWQ3rpgiNk/LGcE9WnPU6R8WuI57gnAARPI323 7X0x3kyFrNAkQK3fjazECexUa2817DSQjFqSXLWj2+jRjvb2/8CcqCVbP1SWnSk7 FfhKan7HzkePvameNWIASWoYg9FkziYGYNibkORfK8hacXLOVaCXEAGFC/GFssX+ 63nfDvNSE0xOCWIJ5Nnj34W9AG+wbdtn+A8hhpQm++tX84LJNFQUmjW6ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIK4AuO4sL/8j3FNDyvue83K4cd8MB8GA1UdIwQY MBaAFMXyIDvAKGcCNFrEZVALRIjAMca1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYt MjQ0NWY2MzRlOTI4LzEvZ3JnQzQ3aXd2X3lQY1UwUEstNTd6Y3JoeDN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYtMjQ0NWY2MzRlOTI4 LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc2oMA0G CSqGSIb3DQEBCwUAA4IBAQA5iUFm56iHRVPS8fz0y7spOarCgzFN1bf0FIngHt1u cNmudhSXodjPv1j2KhJpM459W7MElNqBYPHgSUKKja7Qkw8j8QpFQ9H7r/y1/Dv9 RamoASNtFwAXFwKnDmQ4/fef6lDjue9ER1JKxd2mtaMFORLFJxcBl2PUzMiNJ9kB loJ2CGuPt79kzYNmKmaEA0xpV0HO+T5CgRYg3WIXOl7dFEn7/4oONMcRvsrZJLmv om3sgIXAxGmYYwCdJ7edbOkBAmG/VAqaLUZfSIvTvVFQqW+giBu6IBGrG83PhA5P ZnOGxCJW3btq/4dl2X4SPAc6b/OMhjinufmG6agDThHR -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:12 2026 by rpki-client