This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/grRs4RivLN7cpUB3UyiXGSSLhPU.roa File: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (raw, json) Hash identifier: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY= Subject key identifier: 82:B4:6C:E1:18:AF:2C:DE:DC:A5:40:77:53:28:97:19:24:8B:84:F5 Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876 Certificate serial: 019B7BA4C8195958CF6673C49B4485BCF353 Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/grRs4RivLN7cpUB3UyiXGSSLhPU.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20792 IP address blocks: 185.95.192.0/22 maxlen: 22 213.216.0.0/19 maxlen: 19 2a02:13c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c8:19:59:58:cf:66:73:c4:9b:44:85:bc:f3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457027e3a087b65f968b535e415f67432695876 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b46ce118af2cdedca5407753289719248b84f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:aa:09:b6:fc:92:95:b5:8a:8b:4d:7f:4d: 8b:39:d1:5a:95:ca:c1:31:45:50:ea:b4:ea:ee:c2: 56:4e:8b:2b:6f:13:4c:b3:c0:fc:eb:f3:a9:48:04: 75:bf:f2:4e:c7:d9:fb:b9:19:d6:69:d5:c2:8d:d8: ea:f1:45:f0:92:7a:cd:78:15:d0:6d:d7:f5:84:a0: 49:ec:77:4f:7c:5d:84:1b:16:34:ce:b1:94:60:b8: cd:d6:a5:9b:da:a6:7a:37:90:36:d4:93:8f:fe:a7: 77:be:f3:81:43:48:7e:a6:03:61:23:fa:47:ad:f7: f4:43:13:ae:f1:cd:57:a1:e3:0e:2a:2b:06:3a:ed: d5:82:d9:cc:98:1b:4d:7e:fa:1e:98:5a:ac:40:63: 8b:0a:c3:8e:22:c5:36:1c:47:b7:27:8d:18:ea:02: 13:9e:a4:72:e6:27:55:fe:43:be:db:58:f4:cf:0e: 61:d4:f8:60:99:11:e3:34:0e:7b:7d:7c:56:f1:67: ed:e4:c5:90:f6:5f:5a:02:15:f5:34:59:d5:5b:e5: c0:90:55:9d:6f:ce:9f:70:7a:a4:1c:de:a0:3a:16: 59:47:f3:5b:58:26:54:fd:a2:ec:d1:30:af:59:9d: d1:6e:51:8f:70:1b:af:3c:11:60:59:2b:0f:56:ae: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:6C:E1:18:AF:2C:DE:DC:A5:40:77:53:28:97:19:24:8B:84:F5 X509v3 Authority Key Identifier: keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/grRs4RivLN7cpUB3UyiXGSSLhPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.192.0/22 213.216.0.0/19 IPv6: 2a02:13c0::/32 Signature Algorithm: sha256WithRSAEncryption 60:95:6e:da:dd:07:2e:ec:9b:32:b7:1d:c1:96:11:eb:79:ed: b8:bd:30:8a:cc:26:10:24:f1:93:c1:73:5f:a0:22:b2:8e:91: 1c:8f:05:6f:11:94:39:99:fa:76:aa:74:4a:d5:89:53:45:83: 36:25:b0:5f:c2:f6:93:b4:1f:e5:f1:dc:f6:ae:24:87:8a:35: 1e:92:7e:a0:9f:be:7d:67:9e:72:00:31:bd:a9:2a:69:f8:6d: 06:1e:a9:2a:b9:03:1f:2c:c5:dc:d8:79:b9:e8:5c:e8:4d:f5: 8a:c6:5c:55:7c:ee:13:56:12:79:b6:d3:24:8c:6a:58:36:6a: 55:7f:3e:4e:1a:04:63:cc:41:e4:65:c0:d3:ae:5f:02:0b:c3: ca:0f:73:52:4a:0e:4c:34:07:a5:0e:0b:0b:62:03:c1:32:7c: f9:34:7c:80:06:55:7f:41:4e:20:58:83:d5:42:7f:af:79:a6: 19:9d:b1:3e:40:0a:dd:c1:02:f4:3d:41:06:a5:30:d0:28:69: 32:0e:eb:1e:7d:47:1f:9a:3c:9f:7d:64:a2:8d:43:ac:9d:f8: 0d:df:7e:2f:6d:0d:9c:e6:af:4e:c4:90:43:27:f9:ce:0f:d7: 47:dc:f0:dd:7b:75:1d:65:5d:03:ca:50:e6:5f:b3:d9:58:5d: ba:95:34:b8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pMgZWVjPZnPEm0SFvPNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2 OTU4NzYwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmI0NmNlMTE4YWYyY2RlZGNhNTQwNzc1MzI4OTcxOTI0OGI4NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWyqCbb8kpW1iotNf02LOdFalcrB MUVQ6rTq7sJWTosrbxNMs8D86/OpSAR1v/JOx9n7uRnWadXCjdjq8UXwknrNeBXQ bdf1hKBJ7HdPfF2EGxY0zrGUYLjN1qWb2qZ6N5A21JOP/qd3vvOBQ0h+pgNhI/pH rff0QxOu8c1XoeMOKisGOu3VgtnMmBtNfvoemFqsQGOLCsOOIsU2HEe3J40Y6gIT nqRy5idV/kO+21j0zw5h1PhgmRHjNA57fXxW8Wft5MWQ9l9aAhX1NFnVW+XAkFWd b86fcHqkHN6gOhZZR/NbWCZU/aLs0TCvWZ3RblGPcBuvPBFgWSsPVq7ZFQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIK0bOEYryze3KVAd1Molxkki4T1MB8GA1UdIwQY MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt Yjc5ZDA4ZmExNzQ3LzEvZ3JSczRSaXZMTjdjcFVCM1V5aVhHU1NMaFBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3 LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuV/AAwQF 1dgAMA0EAgACMAcDBQAqAhPAMA0GCSqGSIb3DQEBCwUAA4IBAQBglW7a3Qcu7Jsy tx3BlhHree24vTCKzCYQJPGTwXNfoCKyjpEcjwVvEZQ5mfp2qnRK1YlTRYM2JbBf wvaTtB/l8dz2riSHijUekn6gn759Z55yADG9qSpp+G0GHqkquQMfLMXc2Hm56Fzo TfWKxlxVfO4TVhJ5ttMkjGpYNmpVfz5OGgRjzEHkZcDTrl8CC8PKD3NSSg5MNAel DgsLYgPBMnz5NHyABlV/QU4gWIPVQn+veaYZnbE+QArdwQL0PUEGpTDQKGkyDuse fUcfmjyffWSijUOsnfgN334vbQ2c5q9OxJBDJ/nOD9dH3PDde3UdZV0DylDmX7PZ WF26lTS4 -----END CERTIFICATE-----Generated at Thu Jan 8 16:45:09 2026 by rpki-client