This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/1-isnrQ8snSIPPwIDiDVV93nn4E8.roa File: 1-isnrQ8snSIPPwIDiDVV93nn4E8.roa (raw, json) Hash identifier: bQydRDw0VhrSCGRxw/q+aTFsXheHwlRCh29TsQhUeU8= Subject key identifier: FA:2B:27:AD:0F:2C:9D:22:0F:3F:02:03:88:35:55:F7:79:E7:E0:4F Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8 Certificate serial: 019B7E37463948DBDFBAAA00A46F11D56626 Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/1-isnrQ8snSIPPwIDiDVV93nn4E8.roa Signing time: Fri 02 Jan 2026 10:18:30 +0000 ROA not before: Fri 02 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62563 IP address blocks: 192.166.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:46:39:48:db:df:ba:aa:00:a4:6f:11:d5:66:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8 Validity Not Before: Jan 2 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa2b27ad0f2c9d220f3f0203883555f779e7e04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:f1:7d:73:88:47:4f:7a:be:bf:df:6c:e9: 97:d2:7a:99:1b:80:1c:fc:40:03:ce:5a:d8:92:8d: fa:75:6c:7f:09:51:e7:b3:ab:a7:8e:3e:1d:57:da: 59:05:c3:14:dc:71:6a:db:93:50:42:1a:71:25:27: a9:4c:a7:5b:35:ef:72:20:90:0c:f5:2c:23:1c:8e: c9:4a:de:b6:e0:dd:82:11:a4:c0:17:b3:41:1e:ee: ca:fc:e9:3c:71:1e:ef:8c:7d:77:83:c5:1e:8d:7e: 9a:b7:6e:6b:20:ff:0a:a7:f8:9a:c9:08:64:c0:31: 4b:70:ef:4c:76:2b:42:77:28:29:40:2b:8d:47:26: d5:77:08:60:0b:36:59:bf:c0:da:24:71:01:c9:cd: 4f:e4:41:e7:f4:d4:12:f8:d2:b0:f3:73:f0:76:fc: 4b:5d:b8:5e:9e:d2:55:6d:82:4b:e7:1c:1b:e9:a0: a2:fe:d3:f1:6f:f8:83:26:f8:c5:15:d1:76:2c:26: 74:ab:b3:eb:61:66:d2:e8:bc:f8:a2:6a:95:6d:ae: cf:4a:20:37:76:73:55:a9:0a:39:71:c5:72:c4:e1: a9:6d:f5:84:ac:23:97:ca:14:04:80:ef:5f:d5:28: 86:2b:26:2f:42:c4:83:ea:02:f3:b0:87:2e:67:2a: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:27:AD:0F:2C:9D:22:0F:3F:02:03:88:35:55:F7:79:E7:E0:4F X509v3 Authority Key Identifier: keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/1-isnrQ8snSIPPwIDiDVV93nn4E8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.226.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:68:ed:36:2e:ba:50:3a:f7:98:88:a6:00:34:31:2e:d3:02: 67:9d:fe:49:0c:5d:1e:9f:6b:d4:6b:ba:a7:b4:cc:45:be:17: 42:be:e3:e6:4d:0f:68:8a:df:22:82:d6:40:e3:9f:b7:6c:ba: 55:f9:9c:ee:86:d6:40:c3:f1:42:9a:08:81:fa:50:7f:59:c9: de:9f:c0:f7:29:bd:21:58:c6:69:f6:01:34:ad:0f:c5:f2:22: bc:7e:ab:39:ba:f6:ac:8f:eb:0b:2f:53:cc:38:32:e6:c5:f5: 6b:9d:b8:b3:a0:10:5f:79:5a:0e:fe:7e:5c:5b:4d:aa:23:27: 17:bf:7b:a4:cb:55:7b:ed:64:a4:2e:20:56:82:73:b9:22:cd: 12:77:47:6a:1d:e3:3c:c6:d9:57:91:a9:8f:67:de:2c:de:6c: 22:91:98:8e:a4:d4:92:b9:ec:75:03:3e:87:d3:35:08:f4:5c: 3f:3f:a6:f1:72:e8:94:79:25:95:26:72:85:fb:a6:52:a2:5b: ee:36:2f:a7:c4:f0:0e:5d:bf:30:8a:f1:51:79:38:32:ce:01: d4:d5:a9:48:13:13:be:e0:dd:1a:59:bb:1d:0d:9f:22:fe:06: 60:21:c1:7f:de:ee:96:85:08:4b:f6:a2:d1:5d:00:d8:6b:29: b0:17:9a:ca -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+N0Y5SNvfuqoApG8R1WYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNmJlMWZiNzFhZjQ4ZDZiMzE4NTEwYWE4YmRmOWE4MTVm MzNkYjgwHhcNMjYwMTAyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTJiMjdhZDBmMmM5ZDIyMGYzZjAyMDM4ODM1NTVmNzc5ZTdlMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCTxfXOIR096vr/fbOmX0nqZG4Ac /EADzlrYko36dWx/CVHns6unjj4dV9pZBcMU3HFq25NQQhpxJSepTKdbNe9yIJAM 9SwjHI7JSt624N2CEaTAF7NBHu7K/Ok8cR7vjH13g8UejX6at25rIP8Kp/iayQhk wDFLcO9MditCdygpQCuNRybVdwhgCzZZv8DaJHEByc1P5EHn9NQS+NKw83PwdvxL XbhentJVbYJL5xwb6aCi/tPxb/iDJvjFFdF2LCZ0q7PrYWbS6Lz4omqVba7PSiA3 dnNVqQo5ccVyxOGpbfWErCOXyhQEgO9f1SiGKyYvQsSD6gLzsIcuZyo5DwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPorJ60PLJ0iDz8CA4g1Vfd55+BPMB8GA1UdIwQY MBaAFIJr4ftxr0jWsxhRCqi9+agV8z24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ212aC0zR3ZTTmF6R0ZFS3FMMzVxQlh6UGJnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hYzY4OWItMGUzNi00OWZkLThmOWMt ZGVkNzIwMTQyNzQ0LzEvMS1pc25yUThzblNJUFB3SURpRFZWOTNubjRFOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzMvYWM2ODliLTBlMzYtNDlmZC04ZjljLWRlZDcyMDE0Mjc0 NC8xL2dtdmgtM0d2U05hekdGRUtxTDM1cUJYelBiZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCm4jAN BgkqhkiG9w0BAQsFAAOCAQEAC2jtNi66UDr3mIimADQxLtMCZ53+SQxdHp9r1Gu6 p7TMRb4XQr7j5k0PaIrfIoLWQOOft2y6Vfmc7obWQMPxQpoIgfpQf1nJ3p/A9ym9 IVjGafYBNK0PxfIivH6rObr2rI/rCy9TzDgy5sX1a524s6AQX3laDv5+XFtNqiMn F797pMtVe+1kpC4gVoJzuSLNEndHah3jPMbZV5Gpj2feLN5sIpGYjqTUkrnsdQM+ h9M1CPRcPz+m8XLolHkllSZyhfumUqJb7jYvp8TwDl2/MIrxUXk4Ms4B1NWpSBMT vuDdGlm7HQ2fIv4GYCHBf97uloUIS/ai0V0A2GspsBeayg== -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:05 2026 by rpki-client