This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GRPzD-7iovsUNd__euFXuQQwNH4.roa File: GRPzD-7iovsUNd__euFXuQQwNH4.roa (raw, json) Hash identifier: Iy7dq7bTBPbKmfgxufV0j9XVJYFwmcbwgu/lW23YzXs= Subject key identifier: 19:13:F3:0F:EE:E2:A2:FB:14:35:DF:FF:7A:E1:57:B9:04:30:34:7E Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360CB89DF55FCB59F56255A976CA2D Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GRPzD-7iovsUNd__euFXuQQwNH4.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 91.220.198.0/24 maxlen: 24 195.88.220.0/24 maxlen: 24 195.96.144.0/24 maxlen: 24 195.96.147.0/24 maxlen: 24 195.96.154.0/24 maxlen: 24 212.18.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0c:b8:9d:f5:5f:cb:59:f5:62:55:a9:76:ca:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1913f30feee2a2fb1435dfff7ae157b90430347e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:e4:b8:cd:f3:43:60:a9:b5:f7:19:ce:90: 91:46:b8:6a:c4:d9:91:37:2a:18:2f:6a:d8:e3:47: a3:8d:83:ca:de:92:9f:9b:ba:f1:80:77:7c:ca:e5: b4:c5:71:60:b5:4a:de:f9:cc:b2:55:45:2f:05:87: c3:83:1e:14:4d:20:38:8c:bf:27:7e:94:5e:6d:f0: 10:ee:a7:ce:b0:04:e0:3a:aa:0d:06:db:7a:8b:a2: 7f:4b:e1:f8:cb:b7:c5:5a:48:41:0b:5c:28:1f:90: 71:36:ae:96:2c:82:4c:3e:f1:1f:71:96:cf:b1:e0: 99:7b:f6:f4:1a:5b:89:4f:ef:44:00:e0:eb:c2:6f: 3f:7d:e5:83:11:26:87:bb:fd:8c:b9:1f:c5:bb:84: d9:9a:52:02:0a:d8:be:74:e4:e0:29:24:fb:60:d0: 6c:dc:fd:72:74:c2:5f:72:b5:76:16:a6:63:6f:c2: d5:b1:8f:39:fb:de:cf:6c:c0:be:ae:c5:8a:b1:09: ce:6e:27:79:ab:cf:a6:f4:a5:74:15:8f:b7:78:3e: cf:fc:4b:f7:4b:72:e5:26:1e:69:c5:0a:d6:d9:c0: ab:01:6e:85:f5:63:70:a0:e0:5e:26:ce:b0:9a:99: 14:88:18:ad:e0:9b:ec:8d:45:bb:26:b1:87:21:ca: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:13:F3:0F:EE:E2:A2:FB:14:35:DF:FF:7A:E1:57:B9:04:30:34:7E X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GRPzD-7iovsUNd__euFXuQQwNH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.198.0/24 195.88.220.0/24 195.96.144.0/24 195.96.147.0/24 195.96.154.0/24 212.18.126.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:66:c8:0e:8e:d9:6e:a4:ec:cd:85:ef:cf:13:d0:ca:80:fa: 2a:56:c2:64:f6:ac:0f:12:1b:64:52:7f:70:9b:56:0e:19:74: b5:df:71:47:a1:fd:43:aa:c1:9f:50:1d:4f:ec:88:a1:d3:bb: 31:89:1a:86:4a:fd:d1:69:c4:ba:19:0a:c2:97:a3:21:8e:97: bb:5e:99:8d:22:a2:75:7f:54:2c:30:9f:d5:3f:ee:3d:e2:2b: ae:c2:1a:23:c3:27:27:7f:33:80:36:4f:f0:fb:64:1b:98:45: 27:d7:96:a9:a4:98:e7:4c:f8:9f:f4:48:d6:44:04:2d:b3:99: 96:6c:dc:98:11:4a:27:e5:bc:fe:b8:52:58:4e:3d:73:a9:1f: 2a:ef:7e:83:d8:9e:04:c5:f8:4c:cb:39:00:bf:3e:19:be:90: d7:c1:f6:c2:d8:1b:63:72:d7:bc:0a:5b:6c:2b:ef:f9:47:1e: c0:ae:a0:2d:a5:ba:35:b8:e4:b3:66:9e:aa:d2:a5:a0:c5:86: 7e:6c:d8:ff:2a:db:01:0c:6c:f5:4c:a7:ff:e2:77:d7:37:c2: 56:c5:84:11:9b:a8:3f:87:b6:e5:ac:92:b9:63:99:ca:2c:fe: 13:31:ca:54:9c:aa:ed:34:ae:d2:01:d7:fb:03:01:1b:a6:e1: 9c:63:fd:df -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7Ngy4nfVfy1n1YlWpdsotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTEzZjMwZmVlZTJhMmZiMTQzNWRmZmY3YWUxNTdiOTA0MzAzNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/vkuM3zQ2CptfcZzpCRRrhqxNmR NyoYL2rY40ejjYPK3pKfm7rxgHd8yuW0xXFgtUre+cyyVUUvBYfDgx4UTSA4jL8n fpRebfAQ7qfOsATgOqoNBtt6i6J/S+H4y7fFWkhBC1woH5BxNq6WLIJMPvEfcZbP seCZe/b0GluJT+9EAODrwm8/feWDESaHu/2MuR/Fu4TZmlICCti+dOTgKST7YNBs 3P1ydMJfcrV2FqZjb8LVsY85+97PbMC+rsWKsQnObid5q8+m9KV0FY+3eD7P/Ev3 S3LlJh5pxQrW2cCrAW6F9WNwoOBeJs6wmpkUiBit4JvsjUW7JrGHIconnQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBkT8w/u4qL7FDXf/3rhV7kEMDR+MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvR1JQekQtN2lvdnNVTmRfX2V1Rlh1UVF3Tkg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAW9zGAwQA w1jcAwQAw2CQAwQAw2CTAwQAw2CaAwQA1BJ+MA0GCSqGSIb3DQEBCwUAA4IBAQBP ZsgOjtlupOzNhe/PE9DKgPoqVsJk9qwPEhtkUn9wm1YOGXS133FHof1DqsGfUB1P 7Iih07sxiRqGSv3RacS6GQrCl6Mhjpe7XpmNIqJ1f1QsMJ/VP+494iuuwhojwycn fzOANk/w+2QbmEUn15appJjnTPif9EjWRAQts5mWbNyYEUon5bz+uFJYTj1zqR8q 736D2J4ExfhMyzkAvz4ZvpDXwfbC2Btjcte8CltsK+/5Rx7ArqAtpbo1uOSzZp6q 0qWgxYZ+bNj/KtsBDGz1TKf/4nfXN8JWxYQRm6g/h7blrJK5Y5nKLP4TMcpUnKrt NK7SAdf7AwEbpuGcY/3f -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:36 2026 by rpki-client