This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa File: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (raw, json) Hash identifier: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4= Subject key identifier: 1A:B2:E3:57:42:B5:AE:0F:BF:7B:83:5A:D8:F8:84:BF:64:7C:61:79 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CA3243D2B0CE958EF841D0C12279 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42960 IP address blocks: 91.238.203.0/24 maxlen: 24 185.106.176.0/24 maxlen: 24 193.200.130.0/24 maxlen: 24 193.200.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ca:32:43:d2:b0:ce:95:8e:f8:41:d0:c1:22:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ab2e35742b5ae0fbf7b835ad8f884bf647c6179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:c2:dc:f5:cd:60:47:59:d4:dc:50:ac:6e: de:c3:75:7b:52:5d:bd:5f:86:f6:8b:20:b1:10:5a: 32:03:d2:b7:ea:27:12:0d:3a:12:b8:b6:63:26:23: 64:5b:75:6e:7f:57:4d:bb:c3:f4:21:eb:bb:d4:f1: 23:37:08:a5:5f:06:d9:3f:89:a8:45:aa:04:63:b0: 7d:d5:5b:88:98:ba:42:2d:dd:5e:63:03:85:cf:f5: d2:43:6b:d2:f0:35:9c:46:c5:da:31:ae:b3:9e:e9: 84:df:07:3f:06:a3:ba:a6:b5:b0:89:c3:27:cc:29: e8:65:d2:0c:9f:e0:b4:fe:f5:1f:4f:1d:dc:6e:47: 98:7d:5d:3f:c5:f2:4e:8d:bd:31:a4:3d:c4:73:51: cb:6c:23:53:0a:60:1e:cf:d6:a2:14:a7:9e:73:75: 2d:8b:43:33:a4:d3:c5:e3:19:72:ef:e9:c6:91:8e: 66:3a:d0:77:c5:95:b4:7a:be:51:7c:6e:df:0d:df: 38:bd:87:4b:1d:17:3c:37:99:ea:d5:b9:b5:77:fd: b3:56:f7:3b:df:7e:28:41:d7:ff:eb:db:77:d2:fc: 2d:e5:36:53:85:97:c5:d7:c1:9d:24:80:ae:2c:c8: e3:fd:c3:29:02:e0:fa:85:41:04:ba:0b:47:98:a4: 8f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:E3:57:42:B5:AE:0F:BF:7B:83:5A:D8:F8:84:BF:64:7C:61:79 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.203.0/24 185.106.176.0/24 193.200.130.0/24 193.200.134.0/24 Signature Algorithm: sha256WithRSAEncryption a1:36:73:ac:40:4d:47:eb:8f:86:09:fb:3d:b0:e1:0d:34:ef: 60:3f:7e:5c:bc:a5:2c:bd:7f:6d:2f:89:a8:dd:06:7e:4f:d7: 28:3a:cd:f7:e8:e2:92:36:5c:6f:e3:b2:00:ea:4b:31:14:8a: 79:1b:c2:77:b4:27:89:36:54:b4:40:5e:78:28:13:00:75:9b: 4d:88:0d:47:52:56:e9:a3:2a:5d:a3:34:23:9a:6b:c4:9e:f6: 9e:b6:b6:95:b6:6a:65:8b:4a:ad:3c:42:b7:62:ec:d2:62:71: 7a:a9:f7:8e:18:9e:53:28:96:0e:c4:99:2d:24:c5:c3:79:c8: 6e:78:ea:f1:a6:d3:f6:41:bd:49:8f:4e:bf:e5:89:04:b9:f0: ce:6d:13:56:c9:e1:7c:e0:be:65:b8:d4:4a:c7:c6:0e:83:71: 71:3b:eb:70:90:ed:2f:f7:c2:d6:10:db:f9:58:cf:17:db:93: 68:b1:61:b3:0b:b5:22:84:e3:11:ec:7e:76:80:78:c6:83:a4: 3d:93:50:63:b3:2b:42:58:0c:7c:d9:96:a2:24:50:83:8e:75: c5:8d:5a:b4:8c:ee:83:09:4a:1e:0d:29:7f:b5:dc:ab:89:3a: 5a:3a:b9:52:d8:14:26:53:74:b4:76:75:d0:1e:27:6e:e0:ee: 70:33:06:bb -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x8oyQ9KwzpWO+EHQwSJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWIyZTM1NzQyYjVhZTBmYmY3YjgzNWFkOGY4ODRiZjY0N2M2MTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUPC3PXNYEdZ1NxQrG7ew3V7Ul29 X4b2iyCxEFoyA9K36icSDToSuLZjJiNkW3Vuf1dNu8P0Ieu71PEjNwilXwbZP4mo RaoEY7B91VuImLpCLd1eYwOFz/XSQ2vS8DWcRsXaMa6znumE3wc/BqO6prWwicMn zCnoZdIMn+C0/vUfTx3cbkeYfV0/xfJOjb0xpD3Ec1HLbCNTCmAez9aiFKeec3Ut i0MzpNPF4xly7+nGkY5mOtB3xZW0er5RfG7fDd84vYdLHRc8N5nq1bm1d/2zVvc7 334oQdf/69t30vwt5TZThZfF18GdJICuLMjj/cMpAuD6hUEEugtHmKSPzQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBqy41dCta4Pv3uDWtj4hL9kfGF5MB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvR3JMalYwSzFyZy1fZTROYTJQaUV2MlI4WVhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+7LAwQA uWqwAwQAwciCAwQAwciGMA0GCSqGSIb3DQEBCwUAA4IBAQChNnOsQE1H64+GCfs9 sOENNO9gP35cvKUsvX9tL4mo3QZ+T9coOs336OKSNlxv47IA6ksxFIp5G8J3tCeJ NlS0QF54KBMAdZtNiA1HUlbpoypdozQjmmvEnvaetraVtmpli0qtPEK3YuzSYnF6 qfeOGJ5TKJYOxJktJMXDechueOrxptP2Qb1Jj06/5YkEufDObRNWyeF84L5luNRK x8YOg3FxO+twkO0v98LWENv5WM8X25NosWGzC7UihOMR7H52gHjGg6Q9k1BjsytC WAx82ZaiJFCDjnXFjVq0jO6DCUoeDSl/tdyriTpaOrlS2BQmU3S0dnXQHidu4O5w Mwa7 -----END CERTIFICATE-----Generated at Tue Jan 20 12:09:40 2026 by rpki-client