This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/1GrmrNbNGyXyahXMYGt3b4VfY4I.roa File: 1GrmrNbNGyXyahXMYGt3b4VfY4I.roa (raw, json) Hash identifier: I2AeLswWlG7/hO0PGfHp4xgLUN+8oHGwrspZl3ZzwDg= Subject key identifier: D4:6A:E6:AC:D6:CD:1B:25:F2:6A:15:CC:60:6B:77:6F:85:5F:63:82 Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266 Certificate serial: 019B76EB3DB86EC1C3726B2A5BE6FFCC4427 Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/1GrmrNbNGyXyahXMYGt3b4VfY4I.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 185.15.8.0/22 maxlen: 22 2a02:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3d:b8:6e:c1:c3:72:6b:2a:5b:e6:ff:cc:44:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d46ae6acd6cd1b25f26a15cc606b776f855f6382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:4b:53:6d:fd:d2:56:db:44:89:46:a9:9f: 58:b6:26:b6:b4:d2:a5:f5:c3:2a:0c:b5:69:ce:10: f9:80:5e:e4:b8:24:d8:3e:a3:6d:98:76:cb:4b:3b: 4c:13:c4:cb:5b:8e:f7:c3:bd:d4:fc:f4:85:be:5f: 76:ac:7f:ea:82:45:8e:e1:1f:f5:af:36:d8:c3:7b: ff:51:61:23:b8:4a:3f:16:ea:6b:c4:ca:51:76:ee: ab:91:5f:0b:b7:d1:6b:e1:78:f7:c3:0a:cf:b4:3b: 14:af:52:a3:72:81:c5:54:3d:b0:08:2a:79:2f:58: a5:8b:7a:4a:55:d7:62:20:b8:10:b3:ed:4f:f7:9c: f0:97:b3:1d:2f:5e:7f:cc:bc:aa:31:96:1c:87:ef: 72:71:65:db:0a:2a:0d:e1:6b:55:2b:94:f7:37:2e: fe:60:6a:ad:9c:17:85:58:0b:3d:92:8b:c1:55:5a: 0d:06:55:ff:72:0f:d3:1d:23:54:75:a8:17:a5:30: 19:cc:c3:56:53:b2:82:ba:fb:c6:5b:3d:1e:98:f1: d8:61:22:6f:fd:18:64:80:82:1a:3a:14:6d:0b:cd: fd:87:99:99:9b:0f:f0:6f:3c:7b:d3:ed:dc:38:f4: 9f:0b:d3:bf:f9:46:b3:8f:ec:d0:ce:7b:a0:5a:9d: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6A:E6:AC:D6:CD:1B:25:F2:6A:15:CC:60:6B:77:6F:85:5F:63:82 X509v3 Authority Key Identifier: keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/1GrmrNbNGyXyahXMYGt3b4VfY4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.8.0/22 IPv6: 2a02:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 81:6d:14:74:96:9d:7b:20:1d:9a:d3:1c:0a:0a:9c:81:31:68: 2f:f4:e7:2d:fc:f3:43:b7:c5:1d:42:9a:47:19:a0:3e:0d:f2: 77:d0:a5:a5:52:5c:72:38:a6:fc:58:26:56:9c:82:a6:62:ff: d4:b5:b2:cf:a0:db:ea:bc:5d:35:94:50:c9:12:72:58:4b:f4: 08:18:2b:98:5b:eb:0b:2d:fa:7d:c0:9f:8f:d4:22:d0:78:1f: 90:ea:f2:c5:53:80:f6:3f:e8:bf:a0:c7:11:e8:17:90:87:79: 06:77:35:45:16:be:f5:80:ff:07:e5:8b:9b:03:71:4f:c7:07: 1e:f3:06:80:50:1e:30:09:3c:15:1c:cc:66:4f:7b:85:77:81: ff:2e:35:56:7a:2f:99:77:02:d6:84:ac:f7:93:ce:43:a6:cf: ed:df:c8:40:9f:4f:2e:3c:53:67:d2:2e:93:84:2b:d8:6c:3e: 1d:37:0c:ac:1f:0f:77:a4:c2:4b:25:af:b8:56:c8:50:b3:e3: dd:0f:77:b5:b6:53:97:06:ca:4b:e5:20:e6:8c:79:de:aa:31: 3f:74:83:4d:ca:d1:0a:d0:df:46:f5:fd:d5:56:56:af:ca:39: 36:25:b1:6e:b0:92:1a:8c:e5:98:9a:01:a3:a2:35:b3:6a:97: ba:01:0d:2c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26z24bsHDcmsqW+b/zEQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDg0ZDFmNTdkYjBjYzIzMjZmYWE1M2QzYTdhYWQyNjhk YmMyNjYwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDZhZTZhY2Q2Y2QxYjI1ZjI2YTE1Y2M2MDZiNzc2Zjg1NWY2MzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIhLU2390lbbRIlGqZ9Ytia2tNKl 9cMqDLVpzhD5gF7kuCTYPqNtmHbLSztME8TLW473w73U/PSFvl92rH/qgkWO4R/1 rzbYw3v/UWEjuEo/FuprxMpRdu6rkV8Lt9Fr4Xj3wwrPtDsUr1KjcoHFVD2wCCp5 L1ili3pKVddiILgQs+1P95zwl7MdL15/zLyqMZYch+9ycWXbCioN4WtVK5T3Ny7+ YGqtnBeFWAs9kovBVVoNBlX/cg/THSNUdagXpTAZzMNWU7KCuvvGWz0emPHYYSJv /RhkgIIaOhRtC839h5mZmw/wbzx70+3cOPSfC9O/+Uazj+zQznugWp1JswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNRq5qzWzRsl8moVzGBrd2+FX2OCMB8GA1UdIwQY MBaAFAZITR9X2wzCMm+qU9OnqtJo28JmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUt MDQ5MjUxOTRjNWU2LzEvMUdybXJOYk5HeVh5YWhYTVlHdDNiNFZmWTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83MDI4MjktMGQ4ZS00OWRiLTg0YWUtMDQ5MjUxOTRjNWU2 LzEvQmtoTkgxZmJETUl5YjZwVDA2ZXEwbWpid21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQ8IMA0E AgACMAcDBQMqAvsAMA0GCSqGSIb3DQEBCwUAA4IBAQCBbRR0lp17IB2a0xwKCpyB MWgv9Oct/PNDt8UdQppHGaA+DfJ30KWlUlxyOKb8WCZWnIKmYv/UtbLPoNvqvF01 lFDJEnJYS/QIGCuYW+sLLfp9wJ+P1CLQeB+Q6vLFU4D2P+i/oMcR6BeQh3kGdzVF Fr71gP8H5YubA3FPxwce8waAUB4wCTwVHMxmT3uFd4H/LjVWei+ZdwLWhKz3k85D ps/t38hAn08uPFNn0i6ThCvYbD4dNwysHw93pMJLJa+4VshQs+PdD3e1tlOXBspL 5SDmjHneqjE/dINNytEK0N9G9f3VVlavyjk2JbFusJIajOWYmgGjojWzape6AQ0s -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:32 2026 by rpki-client