This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/grQlShm9Yf4p9v0UY4WRgIC18Rg.roa File: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (raw, json) Hash identifier: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg= Subject key identifier: 82:B4:25:4A:19:BD:61:FE:29:F6:FD:14:63:85:91:80:80:B5:F1:18 Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Certificate serial: 019B7FF21C9EC860A7D663D0949B6158400C Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/grQlShm9Yf4p9v0UY4WRgIC18Rg.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10393 IP address blocks: 185.39.236.0/24 maxlen: 24 185.39.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1c:9e:c8:60:a7:d6:63:d0:94:9b:61:58:40:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b4254a19bd61fe29f6fd146385918080b5f118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:33:3f:88:bc:8f:66:ae:db:21:71:1e:7c: 7c:d2:5f:24:de:0e:55:1e:db:72:01:8b:0b:bf:3d: 86:e4:34:6e:ad:36:73:fe:7d:9a:57:e8:9b:ca:ee: 6e:22:d5:09:f4:03:d6:87:4b:7e:1c:b8:2b:87:d9: b0:0e:dd:9b:0b:53:5e:ec:c9:54:71:59:29:bb:6d: 2a:6e:cf:46:84:4e:da:51:2c:80:82:f2:97:ad:f6: 21:ea:73:ba:9f:75:69:1f:f1:0a:55:ec:7a:ef:89: 4b:fd:58:5b:81:6d:36:67:1d:8d:16:94:b5:30:15: c0:7c:cb:89:1d:d4:5b:e9:0c:01:94:ab:64:90:be: e5:06:04:86:b1:fa:de:ea:9a:94:e4:cf:eb:34:f8: 60:00:03:39:24:91:e6:37:31:db:f5:63:0c:62:fd: fe:ea:c5:26:9e:95:28:db:dc:54:2c:5e:7d:ba:82: ca:dc:51:ae:b2:b5:7e:37:6a:b1:c0:33:5f:37:5e: 03:17:4e:a7:94:4e:fe:6a:83:a0:07:af:2e:a4:5e: 96:05:dd:ff:3a:ff:1f:5b:ae:ca:f7:34:de:49:63: bc:5e:8c:f5:0e:7e:a6:69:9c:4d:73:47:e2:9b:d4: ff:c0:19:c5:37:29:1b:ed:ce:5d:3b:00:f3:19:53: 9d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:25:4A:19:BD:61:FE:29:F6:FD:14:63:85:91:80:80:B5:F1:18 X509v3 Authority Key Identifier: keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/grQlShm9Yf4p9v0UY4WRgIC18Rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.236.0/23 Signature Algorithm: sha256WithRSAEncryption 62:1b:d8:92:d3:cf:34:96:ac:eb:c3:f2:90:32:dc:d1:02:d9: ce:0c:93:83:6d:35:aa:83:4b:5d:1f:5c:56:58:9c:e3:9c:2a: 15:ec:00:ab:b9:1a:16:5b:c5:1d:3e:16:b8:30:66:f3:58:60: 8d:96:5d:2f:7a:b0:c0:9b:8c:ed:92:f6:e3:a5:ed:98:16:d0: 87:03:8c:31:3e:84:cd:50:11:21:92:cd:02:f3:ce:7e:d8:4e: 44:da:f5:b8:50:f1:24:42:d7:5f:a0:d6:c8:d5:54:05:7f:cc: 9c:b0:5f:47:6e:1d:91:b8:d1:c0:c8:97:20:4e:29:f2:9e:3c: 47:33:6a:fb:6c:82:2b:ea:1c:e7:8c:e5:e9:a1:5e:93:d2:d7: c7:b1:b3:6f:76:53:75:cc:2d:e3:a4:72:41:2e:35:59:00:ad: 85:82:24:cb:07:52:8c:4f:7e:98:c5:a9:81:de:b4:0b:b6:00: 96:bd:90:25:19:59:8c:1c:92:1d:85:e5:de:e0:eb:f0:67:fc: 26:8b:32:dc:3d:2c:2f:07:92:91:2a:ac:35:c2:80:7b:6d:b1: 14:38:75:38:27:bb:3f:80:ce:d7:ed:20:4e:e3:c2:a4:4e:30: 2e:e8:e4:8d:fc:b3:5e:14:be:dc:d2:5a:80:f5:d3:04:03:ff: da:64:ec:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hyeyGCn1mPQlJthWEAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx MzZjYjAwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmI0MjU0YTE5YmQ2MWZlMjlmNmZkMTQ2Mzg1OTE4MDgwYjVmMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumwzP4i8j2au2yFxHnx80l8k3g5V HttyAYsLvz2G5DRurTZz/n2aV+ibyu5uItUJ9APWh0t+HLgrh9mwDt2bC1Ne7MlU cVkpu20qbs9GhE7aUSyAgvKXrfYh6nO6n3VpH/EKVex674lL/VhbgW02Zx2NFpS1 MBXAfMuJHdRb6QwBlKtkkL7lBgSGsfre6pqU5M/rNPhgAAM5JJHmNzHb9WMMYv3+ 6sUmnpUo29xULF59uoLK3FGusrV+N2qxwDNfN14DF06nlE7+aoOgB68upF6WBd3/ Ov8fW67K9zTeSWO8Xoz1Dn6maZxNc0fim9T/wBnFNykb7c5dOwDzGVOdtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIK0JUoZvWH+Kfb9FGOFkYCAtfEYMB8GA1UdIwQY MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt ODI1N2Q1MTkyOGE5LzEvZ3JRbFNobTlZZjRwOXYwVVk0V1JnSUMxOFJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5 LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSfsMA0G CSqGSIb3DQEBCwUAA4IBAQBiG9iS0880lqzrw/KQMtzRAtnODJODbTWqg0tdH1xW WJzjnCoV7ACruRoWW8UdPha4MGbzWGCNll0verDAm4ztkvbjpe2YFtCHA4wxPoTN UBEhks0C885+2E5E2vW4UPEkQtdfoNbI1VQFf8ycsF9Hbh2RuNHAyJcgTinynjxH M2r7bIIr6hznjOXpoV6T0tfHsbNvdlN1zC3jpHJBLjVZAK2FgiTLB1KMT36YxamB 3rQLtgCWvZAlGVmMHJIdheXe4OvwZ/wmizLcPSwvB5KRKqw1woB7bbEUOHU4J7s/ gM7X7SBO48KkTjAu6OSN/LNeFL7c0lqA9dMEA//aZOwJ -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:16 2026 by rpki-client