This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Gr6mphI5nGuXkxGXBsbCjTrXOSc.roa File: Gr6mphI5nGuXkxGXBsbCjTrXOSc.roa (raw, json) Hash identifier: e+nNOUOtzVaLkjB6rVmYIvGI7TiorICQ4FTzah5VoJQ= Subject key identifier: 1A:BE:A6:A6:12:39:9C:6B:97:93:11:97:06:C6:C2:8D:3A:D7:39:27 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C04D400750894C054D9CD70D71FD Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Gr6mphI5nGuXkxGXBsbCjTrXOSc.roa Signing time: Thu 01 Jan 2026 18:18:55 +0000 ROA not before: Thu 01 Jan 2026 18:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24620 IP address blocks: 78.154.128.0/20 maxlen: 24 84.237.212.0/24 maxlen: 24 213.175.84.0/23 maxlen: 24 213.175.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c0:4d:40:07:50:89:4c:05:4d:9c:d7:0d:71:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1abea6a612399c6b9793119706c6c28d3ad73927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:61:b8:03:11:32:08:fa:2e:6f:fa:25:85: 2f:69:f3:75:e8:80:f3:1d:a9:89:b7:e1:47:35:34: 1f:33:e7:31:7c:5f:54:07:34:ed:b7:27:fb:51:15: 6c:b5:c5:e6:37:6c:e6:82:df:a5:64:38:ef:e4:ab: 93:2f:e1:fc:50:69:30:19:31:fc:be:7b:40:9a:09: 82:6f:21:38:42:25:29:a9:df:3d:0b:15:24:8d:52: 31:5a:a5:37:93:94:9f:00:c9:7d:4c:36:1d:6e:d4: 7f:cc:ac:a9:6d:3b:9d:3c:43:c9:d1:0d:35:f5:a5: 02:f6:cb:e6:45:80:32:f4:7e:9c:bc:05:bf:4e:bb: 61:12:94:43:f0:7a:75:06:17:c4:dd:9c:d0:68:9c: 5a:2a:c8:6c:1a:0d:ab:21:c8:c9:20:e6:e2:b1:d3: 84:e0:b5:70:5b:b0:84:31:6b:0c:b0:e7:52:ef:13: 0c:f6:8f:1a:c1:8f:27:0a:97:bf:e1:7c:cf:95:03: 9f:b4:f8:84:0c:90:28:19:89:aa:47:38:d4:93:3a: 33:f4:a8:da:36:67:88:ac:10:2d:dc:bd:77:21:91: 62:40:ae:48:ed:ee:ba:d0:4c:e4:e9:41:ec:ee:f9: 7e:85:10:b8:a3:33:9f:63:06:c5:cf:b7:0b:e7:fb: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:A6:A6:12:39:9C:6B:97:93:11:97:06:C6:C2:8D:3A:D7:39:27 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Gr6mphI5nGuXkxGXBsbCjTrXOSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.154.128.0/20 84.237.212.0/24 213.175.84.0/23 213.175.88.0/21 Signature Algorithm: sha256WithRSAEncryption 07:9e:60:9e:81:da:f3:1e:d0:34:c6:ea:56:4d:02:4f:b7:04: db:c9:63:77:a8:d6:3a:f3:52:44:aa:ed:45:cd:47:70:3f:ee: 01:b2:e8:5d:64:17:52:e9:ce:f2:24:96:bf:b4:b5:11:1b:f8: b9:0f:1f:db:2e:77:12:21:20:04:96:0f:1f:27:c8:96:63:1b: ad:4f:5e:04:a7:d2:fe:8d:cd:e2:c3:5b:30:bd:2e:e5:4d:4b: 8a:f7:bc:54:9d:45:5f:44:dd:c0:0c:73:95:39:9c:7a:05:dc: 60:27:7e:28:43:35:ce:73:e8:b0:a0:55:2d:da:23:d2:04:25: 5c:5b:a5:c6:33:f3:e1:b2:8b:04:4b:cb:fe:ea:bc:1c:83:84: a1:df:08:64:97:57:5d:ff:25:af:92:44:80:30:7a:d6:f8:95: c4:53:66:2c:78:01:84:07:64:9a:c2:52:62:0c:ed:43:08:48: d4:ef:5b:6e:4c:38:ea:45:31:97:81:a6:57:a3:cd:c4:5c:b5: 9d:82:53:58:88:f8:20:16:51:66:d3:38:0d:53:25:66:4c:ad: d4:37:8a:9e:35:05:59:a1:25:ee:fc:fb:65:34:fa:20:84:0b: 17:f4:d4:44:d8:df:22:b1:ff:b8:8c:2e:74:cb:fd:49:d6:21: 02:10:65:3e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yMBNQAdQiUwFTZzXDXH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWJlYTZhNjEyMzk5YzZiOTc5MzExOTcwNmM2YzI4ZDNhZDczOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i1huAMRMgj6Lm/6JYUvafN16IDz HamJt+FHNTQfM+cxfF9UBzTttyf7URVstcXmN2zmgt+lZDjv5KuTL+H8UGkwGTH8 vntAmgmCbyE4QiUpqd89CxUkjVIxWqU3k5SfAMl9TDYdbtR/zKypbTudPEPJ0Q01 9aUC9svmRYAy9H6cvAW/TrthEpRD8Hp1BhfE3ZzQaJxaKshsGg2rIcjJIObisdOE 4LVwW7CEMWsMsOdS7xMM9o8awY8nCpe/4XzPlQOftPiEDJAoGYmqRzjUkzoz9Kja NmeIrBAt3L13IZFiQK5I7e660Ezk6UHs7vl+hRC4ozOfYwbFz7cL5/voPQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBq+pqYSOZxrl5MRlwbGwo061zknMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvR3I2bXBoSTVuR3VYa3hHWEJzYkNqVHJYT1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQETpqAAwQA VO3UAwQB1a9UAwQD1a9YMA0GCSqGSIb3DQEBCwUAA4IBAQAHnmCegdrzHtA0xupW TQJPtwTbyWN3qNY681JEqu1FzUdwP+4BsuhdZBdS6c7yJJa/tLURG/i5Dx/bLncS ISAElg8fJ8iWYxutT14Ep9L+jc3iw1swvS7lTUuK97xUnUVfRN3ADHOVOZx6Bdxg J34oQzXOc+iwoFUt2iPSBCVcW6XGM/PhsosES8v+6rwcg4Sh3whkl1dd/yWvkkSA MHrW+JXEU2YseAGEB2SawlJiDO1DCEjU71tuTDjqRTGXgaZXo83EXLWdglNYiPgg FlFm0zgNUyVmTK3UN4qeNQVZoSXu/PtlNPoghAsX9NRE2N8isf+4jC50y/1J1iEC EGU+ -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:13 2026 by rpki-client