This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/grmhBhCw7E2lUJ4ELPSV_8EGcds.roa File: grmhBhCw7E2lUJ4ELPSV_8EGcds.roa (raw, json) Hash identifier: 3b1P2uFHEAY4AwqPU9Os5S+uLkzB1LfonU55g7WGJhg= Subject key identifier: 82:B9:A1:06:10:B0:EC:4D:A5:50:9E:04:2C:F4:95:FF:C1:06:71:DB Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910691BD4A1AA4D3651D96C0CD2F14E Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/grmhBhCw7E2lUJ4ELPSV_8EGcds.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211567 IP address blocks: 188.132.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:69:1b:d4:a1:aa:4d:36:51:d9:6c:0c:d2:f1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b9a10610b0ec4da5509e042cf495ffc10671db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:45:c1:57:0d:30:f4:59:15:52:f9:dc:03: 1a:d5:6c:3b:ae:35:e7:96:54:06:c4:04:e4:ee:41: e9:04:61:64:d7:cb:5c:02:6a:bb:04:a8:c9:46:79: b8:8d:f7:40:61:9c:75:e4:01:c7:f6:12:f3:e6:ed: 3c:2d:b5:f4:b7:5b:a2:2f:e5:04:d2:c3:d2:03:fe: 21:a2:08:2b:d8:49:f8:2f:64:77:75:be:92:e0:46: a0:1a:34:b5:5c:aa:63:51:9c:77:75:b2:6b:f5:6c: 6e:6c:ac:da:64:51:c7:c3:f7:af:52:74:b5:a1:b7: 6c:8a:cd:6d:54:c3:b1:ce:66:eb:da:f0:c7:14:ac: 00:22:72:3e:0c:cd:4a:43:91:eb:b7:e6:bd:76:df: 75:42:05:f2:6c:87:c2:22:d1:b6:38:4e:08:c5:2a: 8f:01:e6:84:3b:dd:d2:9b:40:8f:a0:e8:4b:10:32: 60:b2:ed:34:e7:23:73:70:83:09:65:4c:d2:3f:83: 37:11:18:3a:5f:b2:76:56:be:76:65:be:41:49:26: d5:d7:98:01:c6:e0:a4:4a:43:ce:1a:f3:2c:95:20: fe:13:e1:85:15:cb:cd:d2:13:84:8c:a1:6b:89:ca: 68:d0:6e:54:b1:ba:ff:eb:32:b3:74:a5:86:4e:9d: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B9:A1:06:10:B0:EC:4D:A5:50:9E:04:2C:F4:95:FF:C1:06:71:DB X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/grmhBhCw7E2lUJ4ELPSV_8EGcds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.231.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:89:3a:d2:c9:58:5f:f4:1a:a7:4d:45:22:91:27:bf:cb:c2: 1a:7b:21:1a:c2:81:5e:ec:85:ce:31:72:6e:8d:0c:30:1a:4d: 30:26:c4:30:b6:88:f7:5f:37:e5:97:31:b4:cf:c1:40:ec:7b: 86:21:0a:c9:39:24:fd:98:5f:cd:8c:21:df:6b:11:74:a7:38: 98:a3:64:6e:bd:7f:20:5d:02:91:91:76:35:8f:e3:b2:0d:ee: 20:b7:b6:de:0e:9f:99:ed:01:e0:61:7b:1a:0c:e9:e1:4b:5e: f7:62:3d:01:d7:82:dc:5f:55:99:be:72:59:cd:31:01:bc:06: fa:06:1a:07:8c:e3:f7:eb:41:11:47:e6:55:22:cb:aa:d1:38: 5f:03:75:9c:a6:3d:64:f5:95:0d:1a:4b:21:3a:75:63:36:01: d5:43:a0:7c:d6:f9:8e:73:7d:6d:ac:b6:45:66:1f:18:2e:b1: a1:54:0b:e9:84:1f:16:ad:e3:84:63:8e:3c:a5:36:a3:34:d2: 5c:fc:bc:51:58:2a:6a:9e:34:49:24:be:78:e0:03:95:63:62: de:1f:be:c6:d3:be:66:03:46:91:ca:a0:b6:f8:4f:ac:78:38: e5:b5:83:c2:b6:77:8e:f5:0e:ae:66:aa:dd:20:bc:97:fb:9c: 1c:37:11:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGkb1KGqTTZR2WwM0vFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmI5YTEwNjEwYjBlYzRkYTU1MDllMDQyY2Y0OTVmZmMxMDY3MWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBdFwVcNMPRZFVL53AMa1Ww7rjXn llQGxATk7kHpBGFk18tcAmq7BKjJRnm4jfdAYZx15AHH9hLz5u08LbX0t1uiL+UE 0sPSA/4hoggr2En4L2R3db6S4EagGjS1XKpjUZx3dbJr9WxubKzaZFHHw/evUnS1 obdsis1tVMOxzmbr2vDHFKwAInI+DM1KQ5Hrt+a9dt91QgXybIfCItG2OE4IxSqP AeaEO93Sm0CPoOhLEDJgsu005yNzcIMJZUzSP4M3ERg6X7J2Vr52Zb5BSSbV15gB xuCkSkPOGvMslSD+E+GFFcvN0hOEjKFricpo0G5Usbr/6zKzdKWGTp3UxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIK5oQYQsOxNpVCeBCz0lf/BBnHbMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvZ3JtaEJoQ3c3RTJsVUo0RUxQU1ZfOEVHY2RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITnMA0G CSqGSIb3DQEBCwUAA4IBAQCbiTrSyVhf9BqnTUUikSe/y8IaeyEawoFe7IXOMXJu jQwwGk0wJsQwtoj3XzfllzG0z8FA7HuGIQrJOST9mF/NjCHfaxF0pziYo2RuvX8g XQKRkXY1j+OyDe4gt7beDp+Z7QHgYXsaDOnhS173Yj0B14LcX1WZvnJZzTEBvAb6 BhoHjOP360ERR+ZVIsuq0ThfA3Wcpj1k9ZUNGkshOnVjNgHVQ6B81vmOc31trLZF Zh8YLrGhVAvphB8WreOEY448pTajNNJc/LxRWCpqnjRJJL544AOVY2LeH77G075m A0aRyqC2+E+seDjltYPCtneO9Q6uZqrdILyX+5wcNxEj -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:58 2026 by rpki-client