This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/GRUqddpEtaR9CDuyc4Wtqj8pgN0.roa File: GRUqddpEtaR9CDuyc4Wtqj8pgN0.roa (raw, json) Hash identifier: HdhAlK1KoAL2nMH9qWpXXpQvzuqZKrfB7aI1S3CJbMI= Subject key identifier: 19:15:2A:75:DA:44:B5:A4:7D:08:3B:B2:73:85:AD:AA:3F:29:80:DD Certificate issuer: /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531 Certificate serial: 019B77C754F1A1CE000568515D0D20A0B677 Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/GRUqddpEtaR9CDuyc4Wtqj8pgN0.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40989 IP address blocks: 91.213.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:54:f1:a1:ce:00:05:68:51:5d:0d:20:a0:b6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19152a75da44b5a47d083bb27385adaa3f2980dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ac:33:f3:ac:b2:46:17:94:48:36:85:c2:22: 3e:e6:f0:d7:b5:3d:66:89:7c:95:96:ef:cc:d9:23: ad:56:6b:f1:49:ec:29:42:c3:43:c7:2e:47:a6:35: 36:8e:40:04:82:ef:b0:71:b8:9d:ee:c0:94:df:bb: 8f:37:d7:2a:d2:7f:37:43:1e:c1:4a:97:7d:9d:e3: 3d:86:ad:13:a4:50:9f:67:50:20:f2:eb:92:dd:17: 67:7d:b5:c6:d5:2a:c2:90:22:43:d3:08:0f:62:dd: f2:23:a6:a3:7b:c7:0c:e1:b9:49:4e:12:26:31:e1: 8a:c7:db:2c:3d:d2:19:d8:80:11:39:62:04:4c:57: 6f:e5:50:06:42:51:7a:aa:4b:35:eb:f1:a0:64:4f: 4e:7c:80:cd:29:b8:af:da:8b:1c:fa:03:a7:3c:d6: da:43:da:96:39:91:e8:61:62:57:72:2e:4f:22:c5: 38:9a:e6:b0:4d:a2:ab:06:59:13:15:63:a5:86:2e: c1:e0:56:e6:92:05:ce:37:30:6d:df:0f:cd:54:d3: 0b:d6:28:57:aa:91:62:72:63:f5:ed:19:b6:4b:3d: 27:71:dc:ea:e4:19:78:3a:26:95:c0:0d:d2:7e:a3: a3:81:ea:a7:98:ec:87:ef:75:30:0c:26:76:73:90: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:2A:75:DA:44:B5:A4:7D:08:3B:B2:73:85:AD:AA:3F:29:80:DD X509v3 Authority Key Identifier: keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/GRUqddpEtaR9CDuyc4Wtqj8pgN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.150.0/24 Signature Algorithm: sha256WithRSAEncryption 67:82:46:d3:96:5d:47:fb:f9:02:3e:e8:5c:70:cc:29:e6:55: 72:b9:e8:51:cf:c9:ae:f5:7f:ca:af:0f:cb:15:a2:fe:bd:a3: 98:74:10:cb:a5:91:9d:b1:69:bc:d6:5e:a6:1a:97:c9:09:cb: de:18:95:65:65:f1:a1:8e:33:f2:46:de:20:75:de:4f:26:45: c0:4f:20:fd:1b:51:2a:9a:f0:3a:6b:32:47:fd:4f:3b:d0:d1: 0e:47:b2:a0:bf:2c:54:5f:6c:f5:d6:32:70:8f:ab:d8:77:c8: 06:42:19:1e:a4:30:34:b5:63:d7:fa:f5:26:fd:3f:6a:f3:3d: 98:ab:a0:1c:a7:ab:79:2f:af:7c:70:3a:44:2f:a4:7c:43:b6: 4c:3f:b3:c7:a1:c7:61:a7:67:bc:37:ef:d4:a4:9a:1c:7f:f9: ae:dc:67:72:95:a1:c0:ed:19:4d:6b:bf:7e:40:18:67:b9:6d: d5:9d:75:23:00:99:17:44:ab:1e:03:7a:0a:d6:10:3f:1a:4c: 03:d0:83:54:d1:cd:6a:82:0e:74:fb:17:be:dd:fd:e1:35:05: 2e:ce:e5:ff:88:95:76:d1:01:a0:41:51:e7:ee:24:db:81:bc: 52:d9:c0:b9:e4:96:8e:49:7f:a5:cb:6b:f2:70:83:30:00:82: 24:97:e1:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1Txoc4ABWhRXQ0goLZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NjNiN2M3NGE0N2NlZTZiZDk5YmJjNjJhZWY4MzZhNTYw MmI1MzEwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTE1MmE3NWRhNDRiNWE0N2QwODNiYjI3Mzg1YWRhYTNmMjk4MGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Kwz86yyRheUSDaFwiI+5vDXtT1m iXyVlu/M2SOtVmvxSewpQsNDxy5HpjU2jkAEgu+wcbid7sCU37uPN9cq0n83Qx7B Spd9neM9hq0TpFCfZ1Ag8uuS3RdnfbXG1SrCkCJD0wgPYt3yI6aje8cM4blJThIm MeGKx9ssPdIZ2IAROWIETFdv5VAGQlF6qks16/GgZE9OfIDNKbiv2osc+gOnPNba Q9qWOZHoYWJXci5PIsU4muawTaKrBlkTFWOlhi7B4FbmkgXONzBt3w/NVNML1ihX qpFicmP17Rm2Sz0ncdzq5Bl4OiaVwA3SfqOjgeqnmOyH73UwDCZ2c5BKFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBkVKnXaRLWkfQg7snOFrao/KYDdMB8GA1UdIwQY MBaAFPdjt8dKR87mvZm7xirvg2pWArUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYzNlZWUtMjE4OS00NDY5LTgxNmIt OTliODczZTVlNzRhLzEvR1JVcWRkcEV0YVI5Q0R1eWM0V3RxajhwZ04wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYzNlZWUtMjE4OS00NDY5LTgxNmItOTliODczZTVlNzRh LzEvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9WWMA0G CSqGSIb3DQEBCwUAA4IBAQBngkbTll1H+/kCPuhccMwp5lVyuehRz8mu9X/Krw/L FaL+vaOYdBDLpZGdsWm81l6mGpfJCcveGJVlZfGhjjPyRt4gdd5PJkXATyD9G1Eq mvA6azJH/U870NEOR7KgvyxUX2z11jJwj6vYd8gGQhkepDA0tWPX+vUm/T9q8z2Y q6Acp6t5L698cDpEL6R8Q7ZMP7PHocdhp2e8N+/UpJocf/mu3GdylaHA7RlNa79+ QBhnuW3VnXUjAJkXRKseA3oK1hA/GkwD0INU0c1qgg50+xe+3f3hNQUuzuX/iJV2 0QGgQVHn7iTbgbxS2cC55JaOSX+ly2vycIMwAIIkl+Fv -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:17 2026 by rpki-client