This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/GRQibr18mvAtFQUlZf2-LSDjO00.roa File: GRQibr18mvAtFQUlZf2-LSDjO00.roa (raw, json) Hash identifier: uHEAFGUIa+w818s33SMz8sos1XEYiW4NZhUvG/v7Vkk= Subject key identifier: 19:14:22:6E:BD:7C:9A:F0:2D:15:05:25:65:FD:BE:2D:20:E3:3B:4D Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277 Certificate serial: 019B7AC95932C0D5E4B0548DD39E2F07F48E Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/GRQibr18mvAtFQUlZf2-LSDjO00.roa Signing time: Thu 01 Jan 2026 18:19:34 +0000 ROA not before: Thu 01 Jan 2026 18:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210983 IP address blocks: 213.232.205.0/24 maxlen: 24 2a11:1d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:59:32:c0:d5:e4:b0:54:8d:d3:9e:2f:07:f4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1914226ebd7c9af02d15052565fdbe2d20e33b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:a5:ce:46:32:dd:c0:f3:75:3b:0f:35:96: ce:ae:c7:3d:3c:ae:3f:71:4d:af:56:6c:6d:b9:fc: c5:12:5d:6f:79:87:60:59:56:d6:fd:59:73:3e:36: 15:54:91:28:e2:83:c6:7e:c2:91:40:ab:86:02:25: 06:9a:c8:7a:fa:fa:ce:fc:d5:66:63:22:b8:be:b9: 36:c1:71:76:7e:c4:15:4b:a9:95:f4:57:b0:ca:ad: 3c:9c:76:6e:9d:90:be:25:b9:6a:33:36:99:7d:0a: b9:f3:e6:dd:93:85:95:a8:92:51:a1:b3:51:42:2e: b4:cc:8d:bc:73:52:ef:4c:5f:1b:cc:52:57:c9:1e: 78:be:51:5d:9e:15:22:31:9f:48:9e:83:a6:0d:b1: 50:bb:f7:d4:21:4b:8e:0f:bc:26:7f:75:d2:49:84: e8:a9:f4:29:74:eb:1a:f1:65:53:17:e5:08:57:66: 87:5b:8b:4c:cd:63:ec:70:c1:25:2d:da:2d:19:ec: 63:4c:31:24:84:65:be:a3:20:19:e0:ad:ea:b8:61: b5:f1:86:ae:81:be:58:c8:52:3e:e0:04:7a:18:14: e4:9d:22:f4:2c:d3:28:08:69:a9:6e:95:e6:7a:4b: c9:e2:d1:30:ce:0d:e2:f7:ea:a7:76:74:de:aa:60: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:14:22:6E:BD:7C:9A:F0:2D:15:05:25:65:FD:BE:2D:20:E3:3B:4D X509v3 Authority Key Identifier: keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/GRQibr18mvAtFQUlZf2-LSDjO00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.205.0/24 IPv6: 2a11:1d00::/29 Signature Algorithm: sha256WithRSAEncryption 00:b4:11:1b:6e:7c:c3:ba:2e:ec:0e:3f:fb:e7:b1:b6:73:07: 99:d0:92:88:81:de:67:ee:f1:40:ca:70:18:a0:e4:30:ba:f2: 8c:38:0b:68:72:41:50:ac:60:60:fb:6c:7f:45:1a:e2:b9:b3: f7:fe:f7:e7:9b:f6:87:ee:bf:b4:b3:4e:52:3d:b9:49:d6:11: 83:11:4e:2a:c6:2b:81:21:62:6e:cc:86:77:6d:7e:b3:8b:02: 64:d2:3e:3e:0d:57:d1:13:24:56:38:6d:8b:af:65:e3:ca:d7: 54:78:7b:29:3f:99:de:78:09:70:13:95:52:c6:27:6c:64:18: 35:27:6a:60:09:46:1d:ab:2a:39:35:ed:e1:0c:f5:c8:ca:20: 69:b0:f7:cb:ad:e2:c3:a2:ea:e1:fb:13:13:50:83:a7:b9:25: 56:e3:16:4d:08:05:5c:db:5a:c6:61:04:2d:da:6a:a3:2a:cc: a1:a7:40:ed:84:8e:cc:c0:cf:07:39:c2:6f:81:c6:4c:2e:4d: 73:f3:27:17:e8:8e:b5:a5:c4:24:14:d8:89:6b:92:7c:42:ce: e6:27:8f:99:4f:ee:ac:34:bf:c5:24:22:62:d5:af:cc:23:20: 65:58:f4:94:b6:6b:f1:6b:3d:38:95:3d:b1:a6:11:3a:32:79: 53:5a:31:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yVkywNXksFSN054vB/SOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5 YTUyNzcwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTE0MjI2ZWJkN2M5YWYwMmQxNTA1MjU2NWZkYmUyZDIwZTMzYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvClzkYy3cDzdTsPNZbOrsc9PK4/ cU2vVmxtufzFEl1veYdgWVbW/VlzPjYVVJEo4oPGfsKRQKuGAiUGmsh6+vrO/NVm YyK4vrk2wXF2fsQVS6mV9Fewyq08nHZunZC+JblqMzaZfQq58+bdk4WVqJJRobNR Qi60zI28c1LvTF8bzFJXyR54vlFdnhUiMZ9InoOmDbFQu/fUIUuOD7wmf3XSSYTo qfQpdOsa8WVTF+UIV2aHW4tMzWPscMElLdotGexjTDEkhGW+oyAZ4K3quGG18Yau gb5YyFI+4AR6GBTknSL0LNMoCGmpbpXmekvJ4tEwzg3i9+qndnTeqmBcMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBkUIm69fJrwLRUFJWX9vi0g4ztNMB8GA1UdIwQY MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et MThlOGI5ODE0Njk1LzEvR1JRaWJyMThtdkF0RlFVbFpmMi1MU0RqTzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1 LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1ejNMA0E AgACMAcDBQMqER0AMA0GCSqGSIb3DQEBCwUAA4IBAQAAtBEbbnzDui7sDj/757G2 cweZ0JKIgd5n7vFAynAYoOQwuvKMOAtockFQrGBg+2x/RRriubP3/vfnm/aH7r+0 s05SPblJ1hGDEU4qxiuBIWJuzIZ3bX6ziwJk0j4+DVfREyRWOG2Lr2XjytdUeHsp P5neeAlwE5VSxidsZBg1J2pgCUYdqyo5Ne3hDPXIyiBpsPfLreLDourh+xMTUIOn uSVW4xZNCAVc21rGYQQt2mqjKsyhp0DthI7MwM8HOcJvgcZMLk1z8ycX6I61pcQk FNiJa5J8Qs7mJ4+ZT+6sNL/FJCJi1a/MIyBlWPSUtmvxaz04lT2xphE6MnlTWjFE -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:08 2026 by rpki-client