This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/GRmYf5fBtQllaFBPiERX0WNTqyw.roa File: GRmYf5fBtQllaFBPiERX0WNTqyw.roa (raw, json) Hash identifier: OUUewVjWM6OodlJe2MBm0csiVAeXeLMBert10ePJJOg= Subject key identifier: 19:19:98:7F:97:C1:B5:09:65:68:50:4F:88:44:57:D1:63:53:AB:2C Certificate issuer: /CN=38a37c24ddca347d713ed794d33cd4a81a8b498a Certificate serial: 019B7F843D31AD59200E220CF1383AB9FB6E Authority key identifier: 38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/GRmYf5fBtQllaFBPiERX0WNTqyw.roa Signing time: Fri 02 Jan 2026 16:22:11 +0000 ROA not before: Fri 02 Jan 2026 16:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34978 IP address blocks: 81.29.224.0/20 maxlen: 20 185.52.8.0/22 maxlen: 22 185.52.8.0/24 maxlen: 24 185.52.9.0/24 maxlen: 24 185.52.10.0/24 maxlen: 24 185.52.11.0/24 maxlen: 24 2a04:c640::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3d:31:ad:59:20:0e:22:0c:f1:38:3a:b9:fb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a37c24ddca347d713ed794d33cd4a81a8b498a Validity Not Before: Jan 2 16:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1919987f97c1b5096568504f884457d16353ab2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:21:7f:2f:ca:40:eb:4f:48:fe:56:3e:b9: 6a:4d:60:bf:a6:f9:6e:9b:28:00:69:6c:93:f4:e8: 8f:e7:20:6c:1f:c0:5c:15:eb:a7:1f:c5:9b:08:8d: fb:fd:28:d1:d8:13:2d:40:ff:53:a0:1d:96:a0:d1: 36:ee:47:de:f0:86:79:0f:6c:34:d5:2b:73:91:3b: f3:ec:b3:3d:d2:29:cd:ff:30:4c:02:20:13:0d:c7: 9d:95:bb:54:55:33:f3:c7:c6:44:4d:7f:45:59:60: 8a:e7:b5:e3:93:88:16:cb:4d:85:87:10:61:0e:bc: af:75:6e:b5:00:02:8f:f1:6b:21:ff:c7:37:5c:fa: 79:f8:eb:73:6f:84:72:9c:8d:4b:74:6e:b3:9a:2b: 5d:a7:12:e8:ba:ca:e3:31:36:e4:c7:3c:b6:5e:5d: e7:28:71:aa:9c:3b:8e:91:7a:db:1e:f9:06:5f:30: a7:72:63:d3:f6:eb:6a:9d:43:d5:aa:37:ed:82:c1: 11:78:07:00:12:9b:a6:87:14:85:45:e2:8b:c0:b4: 4d:99:e3:97:f3:d5:31:79:67:c8:79:16:c1:10:d3: f3:fd:63:ed:ef:3d:45:28:22:5a:75:f5:75:2f:dd: 00:84:7f:d3:a7:fb:ea:9b:e9:02:53:fc:13:b8:3d: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:19:98:7F:97:C1:B5:09:65:68:50:4F:88:44:57:D1:63:53:AB:2C X509v3 Authority Key Identifier: keyid:38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/GRmYf5fBtQllaFBPiERX0WNTqyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.224.0/20 185.52.8.0/22 IPv6: 2a04:c640::/29 Signature Algorithm: sha256WithRSAEncryption 30:d8:2c:ea:bc:a4:48:1a:66:8a:67:f0:fd:8e:b4:ce:d8:03: 37:ea:ed:f0:17:db:92:a7:68:df:d0:1c:0e:75:a1:42:aa:b0: 88:ae:3f:75:34:4b:65:55:82:d5:58:68:5f:dc:fc:cf:04:0d: ad:87:53:fe:90:08:f1:4a:02:d5:bf:cf:0a:8a:64:0d:2f:5c: 9c:f0:74:3e:e1:63:42:99:71:8f:b9:02:f2:74:df:6e:51:d9: ea:9b:85:fb:21:41:4e:2d:f7:8a:b3:2b:65:45:fe:82:f1:f4: d0:99:eb:92:3b:bc:47:4b:3a:d9:25:6e:ff:da:d9:98:ea:19: 20:4d:9a:30:4a:4c:15:75:ab:eb:6b:2f:4e:fe:49:68:82:8b: f5:32:ee:83:09:f3:9c:d8:12:5c:f0:1d:38:38:0b:0a:f9:fa: 62:7d:67:71:9b:6e:1d:0d:6e:91:8a:2a:06:a3:e9:cd:27:30: d0:d0:fa:dc:7b:01:b0:e0:f1:b0:4b:89:39:9f:7c:cc:71:d6: f8:b8:e7:46:1d:33:98:5b:d6:d1:bf:b9:88:51:f9:60:a0:7d: b9:c2:47:7a:ac:a1:25:8e:7e:54:9a:11:47:05:fa:71:81:12: a4:6e:78:11:ec:a8:9b:4a:59:b0:0c:e4:29:a1:be:85:fe:8a: 33:ea:d2:23 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hD0xrVkgDiIM8Tg6uftuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YTM3YzI0ZGRjYTM0N2Q3MTNlZDc5NGQzM2NkNGE4MWE4 YjQ5OGEwHhcNMjYwMTAyMTYyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTE5OTg3Zjk3YzFiNTA5NjU2ODUwNGY4ODQ0NTdkMTYzNTNhYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTAhfy/KQOtPSP5WPrlqTWC/pvlu mygAaWyT9OiP5yBsH8BcFeunH8WbCI37/SjR2BMtQP9ToB2WoNE27kfe8IZ5D2w0 1StzkTvz7LM90inN/zBMAiATDcedlbtUVTPzx8ZETX9FWWCK57Xjk4gWy02FhxBh DryvdW61AAKP8Wsh/8c3XPp5+Otzb4RynI1LdG6zmitdpxLousrjMTbkxzy2Xl3n KHGqnDuOkXrbHvkGXzCncmPT9utqnUPVqjftgsEReAcAEpumhxSFReKLwLRNmeOX 89UxeWfIeRbBENPz/WPt7z1FKCJadfV1L90AhH/Tp/vqm+kCU/wTuD1ejQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBkZmH+XwbUJZWhQT4hEV9FjU6ssMB8GA1UdIwQY MBaAFDijfCTdyjR9cT7XlNM81Kgai0mKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0tOOEpOM0tOSDF4UHRlVTB6elVxQnFMU1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZTMzYzMtZDE5Ny00NWYyLTgyOGUt NDRhNDlkMjYzNzAwLzEvR1JtWWY1ZkJ0UWxsYUZCUGlFUlgwV05UcXl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZTMzYzMtZDE5Ny00NWYyLTgyOGUtNDRhNDlkMjYzNzAw LzEvT0tOOEpOM0tOSDF4UHRlVTB6elVxQnFMU1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUR3gAwQC uTQIMA0EAgACMAcDBQMqBMZAMA0GCSqGSIb3DQEBCwUAA4IBAQAw2CzqvKRIGmaK Z/D9jrTO2AM36u3wF9uSp2jf0BwOdaFCqrCIrj91NEtlVYLVWGhf3PzPBA2th1P+ kAjxSgLVv88KimQNL1yc8HQ+4WNCmXGPuQLydN9uUdnqm4X7IUFOLfeKsytlRf6C 8fTQmeuSO7xHSzrZJW7/2tmY6hkgTZowSkwVdavray9O/klogov1Mu6DCfOc2BJc 8B04OAsK+fpifWdxm24dDW6RiioGo+nNJzDQ0PrcewGw4PGwS4k5n3zMcdb4uOdG HTOYW9bRv7mIUflgoH25wkd6rKEljn5UmhFHBfpxgRKkbngR7KibSlmwDOQpob6F /ooz6tIj -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:06 2026 by rpki-client