This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/Gr2HNFebnqweKA8qaD2IyszWQgI.roa File: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (raw, json) Hash identifier: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU= Subject key identifier: 1A:BD:87:34:57:9B:9E:AC:1E:28:0F:2A:68:3D:88:CA:CC:D6:42:02 Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071 Certificate serial: 019B7CED38A4DFBF90DAB07A984F299F4C17 Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/Gr2HNFebnqweKA8qaD2IyszWQgI.roa Signing time: Fri 02 Jan 2026 04:17:59 +0000 ROA not before: Fri 02 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 82.112.64.0/19 maxlen: 24 94.198.48.0/23 maxlen: 24 160.20.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:38:a4:df:bf:90:da:b0:7a:98:4f:29:9f:4c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071 Validity Not Before: Jan 2 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1abd8734579b9eac1e280f2a683d88caccd64202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7f:2c:89:73:81:95:3e:f9:3a:68:c8:79:55: d1:c1:3c:92:f9:aa:b5:69:e9:db:5d:5d:12:89:d3: 60:2a:20:64:68:78:65:52:11:a5:3d:99:70:55:59: 62:6b:24:80:d6:23:b9:30:45:73:bb:9d:8f:e4:f0: f2:46:fe:e6:f5:9e:d1:93:64:47:5b:f9:ea:5a:36: 2f:91:1b:31:df:1e:53:8e:b0:d0:af:ac:6e:ac:60: a2:36:3f:fe:9d:ed:43:e8:eb:fb:02:be:d9:a5:ca: 80:d6:5c:2d:a2:24:36:67:30:9c:13:fa:ec:09:cd: 29:e6:31:d6:31:ae:2c:1f:32:9d:6c:17:7e:cd:06: 86:70:1b:e5:2d:1a:83:a8:fb:00:80:16:97:0b:05: e3:c6:0b:0b:a7:f8:f7:d2:37:6c:29:9f:6e:68:2c: 67:60:1d:7a:05:df:a1:2b:a8:ad:76:49:83:cd:6e: f8:c9:6b:03:fa:8c:80:ef:3f:c4:da:7a:c8:00:ee: 32:35:ff:b4:75:37:b1:1b:35:68:ac:65:d6:dd:02: ad:33:6c:0a:1a:6a:00:44:fb:a5:94:26:ad:5d:ce: b4:9f:42:da:5d:20:7b:de:24:41:9d:a2:33:0c:43: aa:c7:66:a2:42:24:b5:07:ce:80:55:7d:1d:3e:bf: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BD:87:34:57:9B:9E:AC:1E:28:0F:2A:68:3D:88:CA:CC:D6:42:02 X509v3 Authority Key Identifier: keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/Gr2HNFebnqweKA8qaD2IyszWQgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.112.64.0/19 94.198.48.0/23 160.20.214.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:18:c4:c6:bc:d4:cd:ea:2c:d8:1c:57:9c:bc:27:64:72:95: e9:be:61:2c:95:44:04:39:9f:a2:c1:10:ef:a6:eb:37:b6:e6: 0b:37:c9:4d:bb:56:34:e0:a3:66:f9:e5:27:da:3a:0b:ee:09: 94:95:53:a9:c3:15:32:87:7a:83:82:9c:10:6f:8b:7e:4e:ba: 85:38:eb:8b:78:48:db:f9:ca:2e:73:12:34:7d:3c:9c:28:11: 61:fe:54:e5:5a:c2:56:2c:fd:d0:99:54:85:33:8b:4a:65:75: 1b:ef:ce:3f:26:3e:b2:f5:65:ca:af:46:93:b5:c2:49:21:ea: 65:e9:ca:ee:82:80:4f:fb:3e:2f:9b:b8:96:ed:6f:0b:ac:7d: dc:41:31:c3:98:5e:1a:a3:ae:c3:9a:92:68:61:d1:b9:26:61: b5:4d:83:c0:69:86:b8:bd:a8:52:f7:c6:17:58:74:0a:e0:8c: 59:98:dc:03:6b:bb:9e:d2:34:3d:11:19:d1:2a:69:af:19:97: 04:23:1c:09:7f:96:17:44:17:49:1d:50:53:18:0f:1a:ab:31: 11:74:aa:1b:60:23:ec:99:3d:18:25:94:59:3f:17:21:be:eb: ca:08:2c:87:2a:a4:5c:6d:15:d2:35:a8:ce:4a:99:57:10:2f: 0d:32:00:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87Tik37+Q2rB6mE8pn0wXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTdiMTUzZWVkMTEwYmNiZDE0ZGM3ZTMzZmQ0N2YwMmUy ZmUwNzEwHhcNMjYwMTAyMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWJkODczNDU3OWI5ZWFjMWUyODBmMmE2ODNkODhjYWNjZDY0MjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X8siXOBlT75OmjIeVXRwTyS+aq1 aenbXV0SidNgKiBkaHhlUhGlPZlwVVliaySA1iO5MEVzu52P5PDyRv7m9Z7Rk2RH W/nqWjYvkRsx3x5TjrDQr6xurGCiNj/+ne1D6Ov7Ar7ZpcqA1lwtoiQ2ZzCcE/rs Cc0p5jHWMa4sHzKdbBd+zQaGcBvlLRqDqPsAgBaXCwXjxgsLp/j30jdsKZ9uaCxn YB16Bd+hK6itdkmDzW74yWsD+oyA7z/E2nrIAO4yNf+0dTexGzVorGXW3QKtM2wK GmoARPullCatXc60n0LaXSB73iRBnaIzDEOqx2aiQiS1B86AVX0dPr/y2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBq9hzRXm56sHigPKmg9iMrM1kICMB8GA1UdIwQY MBaAFH1XsVPu0RC8vRTcfjP9R/AuL+BxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQt MDgwNzA5MWFhNzdkLzEvR3IySE5GZWJucXdlS0E4cWFEMkl5c3pXUWdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQtMDgwNzA5MWFhNzdk LzEvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFUnBAAwQB XsYwAwQBoBTWMA0GCSqGSIb3DQEBCwUAA4IBAQBdGMTGvNTN6izYHFecvCdkcpXp vmEslUQEOZ+iwRDvpus3tuYLN8lNu1Y04KNm+eUn2joL7gmUlVOpwxUyh3qDgpwQ b4t+TrqFOOuLeEjb+coucxI0fTycKBFh/lTlWsJWLP3QmVSFM4tKZXUb784/Jj6y 9WXKr0aTtcJJIepl6crugoBP+z4vm7iW7W8LrH3cQTHDmF4ao67DmpJoYdG5JmG1 TYPAaYa4vahS98YXWHQK4IxZmNwDa7ue0jQ9ERnRKmmvGZcEIxwJf5YXRBdJHVBT GA8aqzERdKobYCPsmT0YJZRZPxchvuvKCCyHKqRcbRXSNajOSplXEC8NMgAl -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:00 2026 by rpki-client