This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/GrwS7z5skQLr1kWHFgshe5BTW1o.roa File: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (raw, json) Hash identifier: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM= Subject key identifier: 1A:BC:12:EF:3E:6C:91:02:EB:D6:45:87:16:0B:21:7B:90:53:5B:5A Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Certificate serial: 019B76EB49033C18744F66C53F23B9321839 Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/GrwS7z5skQLr1kWHFgshe5BTW1o.roa Signing time: Thu 01 Jan 2026 00:18:09 +0000 ROA not before: Thu 01 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50716 IP address blocks: 87.76.0.0/20 maxlen: 22 91.239.16.0/22 maxlen: 22 109.197.192.0/21 maxlen: 22 176.116.136.0/21 maxlen: 22 176.116.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:49:03:3c:18:74:4f:66:c5:3f:23:b9:32:18:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1abc12ef3e6c9102ebd64587160b217b90535b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:2a:b2:3b:72:10:e6:90:a9:5a:82:5e:f1: 88:fe:2c:25:e0:88:85:cd:cf:72:48:a1:7d:76:a2: a2:50:ac:45:a6:93:c9:ad:8e:c2:7a:56:37:56:59: 77:85:41:ed:6e:c9:24:3f:8a:e8:c7:ef:14:a4:00: b2:f9:3b:0e:59:a4:ca:31:08:5c:a8:30:6c:71:54: 19:68:61:db:d4:bb:f1:ad:4c:0a:94:83:ce:f6:6b: 35:be:54:a5:62:86:14:5e:54:9d:48:0b:df:e3:f9: 40:80:4e:82:bb:91:6e:92:5f:53:72:6a:33:a7:ec: 8e:d5:70:ed:8e:78:ca:5c:3d:b0:32:e7:20:11:64: 89:47:e7:42:9c:1b:3a:b5:63:92:17:1b:a2:ef:21: f7:dc:f5:dd:80:78:96:5c:36:c4:a7:7b:ef:a9:4d: 8f:be:8e:e7:4e:7f:c5:ea:b4:3b:cc:0a:a3:e3:bf: 91:8c:5a:b7:49:a6:2e:7e:d3:13:e2:12:ea:b3:18: 9e:c8:c5:40:f8:05:97:86:aa:50:6a:8e:91:1d:e6: 7d:36:4c:d9:57:31:88:e8:e9:6d:ee:11:96:44:27: 27:1a:e0:14:da:a6:0d:7c:52:17:60:7f:a3:0a:08: f3:78:db:68:81:f8:09:06:75:2d:e1:1b:39:f6:14: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BC:12:EF:3E:6C:91:02:EB:D6:45:87:16:0B:21:7B:90:53:5B:5A X509v3 Authority Key Identifier: keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/GrwS7z5skQLr1kWHFgshe5BTW1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.76.0.0/20 91.239.16.0/22 109.197.192.0/21 176.116.136.0/21 Signature Algorithm: sha256WithRSAEncryption 14:97:27:19:bc:39:37:2c:c4:66:04:b2:6f:d3:53:26:93:e5: 0f:49:a0:7a:81:97:83:33:8b:de:00:82:26:b8:94:8e:59:71: 82:30:d4:7c:0f:20:f7:17:63:48:57:7d:a9:32:51:4a:ba:59: f8:97:e9:e8:f1:16:09:2b:cf:d7:fa:93:eb:bd:f1:f3:f1:ab: 49:3f:54:10:a8:37:a9:07:73:d1:35:07:0b:f8:30:f2:22:d2: 7d:9b:0c:88:6c:75:2a:5a:c2:e5:d7:a5:40:69:d2:c3:8a:bb: 96:56:d2:c8:53:eb:3c:e5:50:3c:35:d1:b4:f9:77:3b:7a:6c: 45:37:f2:c5:f3:b4:4c:27:ad:62:df:45:c3:41:54:cc:a7:73: 3f:ee:16:ee:ea:8b:cc:3d:46:06:69:a6:4f:d2:44:e6:7e:eb: 9e:9c:61:64:47:36:97:89:39:a7:fb:6b:64:dd:7d:07:1b:33: 6c:d6:15:7c:df:cd:4c:ec:8e:83:fc:3c:07:0c:25:30:51:2c: 1c:34:11:d9:ef:2b:69:76:87:51:f5:35:8c:f4:4a:a1:af:70: c5:da:b0:47:72:f6:1e:b4:3b:b4:b1:84:82:24:86:96:83:6d: 87:74:80:06:19:33:4c:97:cd:3f:b5:c2:4f:3f:8e:a2:0d:32: 9a:b0:a5:0c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt260kDPBh0T2bFPyO5Mhg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0 ZjhjYjEwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWJjMTJlZjNlNmM5MTAyZWJkNjQ1ODcxNjBiMjE3YjkwNTM1YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nAqsjtyEOaQqVqCXvGI/iwl4IiF zc9ySKF9dqKiUKxFppPJrY7CelY3Vll3hUHtbskkP4rox+8UpACy+TsOWaTKMQhc qDBscVQZaGHb1LvxrUwKlIPO9ms1vlSlYoYUXlSdSAvf4/lAgE6Cu5Fukl9Tcmoz p+yO1XDtjnjKXD2wMucgEWSJR+dCnBs6tWOSFxui7yH33PXdgHiWXDbEp3vvqU2P vo7nTn/F6rQ7zAqj47+RjFq3SaYuftMT4hLqsxieyMVA+AWXhqpQao6RHeZ9NkzZ VzGI6Olt7hGWRCcnGuAU2qYNfFIXYH+jCgjzeNtogfgJBnUt4Rs59hR6GQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBq8Eu8+bJEC69ZFhxYLIXuQU1taMB8GA1UdIwQY MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt MGZjOWJmY2Q3NGE2LzEvR3J3Uzd6NXNrUUxyMWtXSEZnc2hlNUJUVzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2 LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEV0wAAwQC W+8QAwQDbcXAAwQDsHSIMA0GCSqGSIb3DQEBCwUAA4IBAQAUlycZvDk3LMRmBLJv 01Mmk+UPSaB6gZeDM4veAIImuJSOWXGCMNR8DyD3F2NIV32pMlFKuln4l+no8RYJ K8/X+pPrvfHz8atJP1QQqDepB3PRNQcL+DDyItJ9mwyIbHUqWsLl16VAadLDiruW VtLIU+s85VA8NdG0+Xc7emxFN/LF87RMJ61i30XDQVTMp3M/7hbu6ovMPUYGaaZP 0kTmfuuenGFkRzaXiTmn+2tk3X0HGzNs1hV8381M7I6D/DwHDCUwUSwcNBHZ7ytp dodR9TWM9Eqhr3DF2rBHcvYetDu0sYSCJIaWg22HdIAGGTNMl80/tcJPP46iDTKa sKUM -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:12 2026 by rpki-client