This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/Grqr3zYOgPbnYQO8DA4VgsDDUrM.roa File: Grqr3zYOgPbnYQO8DA4VgsDDUrM.roa (raw, json) Hash identifier: aJOAZYE1fZOQaAtwLCBBewOwLiqrU497TanU9W5w1Jg= Subject key identifier: 1A:BA:AB:DF:36:0E:80:F6:E7:61:03:BC:0C:0E:15:82:C0:C3:52:B3 Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44 Certificate serial: 019B7D5CBD2DDDD3A2DE8616B88B12892C6C Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/Grqr3zYOgPbnYQO8DA4VgsDDUrM.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30876 IP address blocks: 213.180.156.0/22 maxlen: 22 213.180.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bd:2d:dd:d3:a2:de:86:16:b8:8b:12:89:2c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1abaabdf360e80f6e76103bc0c0e1582c0c352b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:3b:c5:f3:d5:3b:dc:46:2d:0d:fe:a8:e1: f9:0c:dc:1f:d0:34:53:8c:ce:e0:58:df:92:d5:91: df:5b:04:41:00:2b:7a:4d:a6:a2:fd:bd:a3:19:68: a0:cf:ae:b8:2c:dd:ab:9f:af:8e:9d:76:73:34:83: 94:94:8e:13:a9:77:b5:0a:61:89:3f:89:d0:c7:14: 6d:8d:0a:b1:5a:79:0d:09:af:85:83:ac:f6:e9:b9: f2:b2:24:32:68:66:fd:5c:1a:e2:42:a6:d4:61:3c: 84:00:65:14:d5:36:81:f6:c2:64:62:4f:e3:c2:4a: 6f:d0:2c:a5:60:38:9a:0a:1f:20:25:a3:51:5f:c4: 16:81:08:55:90:35:8a:d7:ca:c2:ca:e8:03:3c:9b: 8a:b1:38:51:2e:b5:3f:d2:33:61:cf:68:4d:9e:bc: db:c7:dc:a0:91:29:06:11:8d:6f:a8:6c:68:a1:d3: 67:df:e9:87:08:37:ca:f9:4c:ff:d0:62:2f:0c:a0: fc:c2:65:2b:14:ad:c8:f3:87:01:6b:9a:37:17:33: f1:f1:05:30:46:d5:66:b3:19:67:cd:3e:62:9f:8b: 4e:1b:2d:04:4d:b7:f1:b0:61:79:da:d7:fb:a4:43: 83:ca:52:3e:9d:f5:3b:c3:af:35:6f:5a:58:18:87: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:AB:DF:36:0E:80:F6:E7:61:03:BC:0C:0E:15:82:C0:C3:52:B3 X509v3 Authority Key Identifier: keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/Grqr3zYOgPbnYQO8DA4VgsDDUrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.180.156.0/22 Signature Algorithm: sha256WithRSAEncryption 67:9f:be:89:44:2f:7d:72:45:19:d2:6f:ea:3a:fb:5b:57:73: 0f:55:3d:81:c0:dd:1a:33:2d:a8:83:62:ab:ac:67:d9:0d:c2: 09:62:7f:4e:7e:77:4f:f2:d4:89:e3:a9:10:aa:38:4f:5a:37: b2:73:4c:a6:af:3e:aa:63:70:12:92:1d:0d:47:55:fc:43:71: a4:57:27:8f:80:71:37:49:aa:70:93:47:c9:83:ae:40:33:2f: 0f:82:b2:b1:7b:a3:ab:11:a4:7f:81:09:f9:c8:da:93:99:17: fb:a9:69:e7:ea:5b:22:d4:6e:dc:43:0a:d5:05:c5:9c:09:9d: ad:de:bc:e5:df:7c:2d:bf:87:05:b8:77:31:6f:f8:7f:50:e5: 7e:88:31:73:0b:40:6e:c4:ab:da:fa:58:a4:ef:b1:45:ce:dc: 7c:2f:78:fe:34:4c:35:7e:a4:50:01:df:3d:ce:8a:bc:05:fb: 47:1b:05:a5:41:84:fe:8f:85:75:1e:82:c6:07:8e:22:21:07: ea:2f:60:87:1c:f4:33:c9:61:40:d0:50:33:ef:4a:70:07:0d: e5:0f:24:89:c2:0c:cc:ed:50:21:0b:a3:e7:82:ee:39:b7:a3: 3d:e7:19:4d:fc:35:df:be:fa:b8:82:70:b4:02:7e:f1:c6:dc: e6:92:76:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XL0t3dOi3oYWuIsSiSxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk ZjhmNDQwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWJhYWJkZjM2MGU4MGY2ZTc2MTAzYmMwYzBlMTU4MmMwYzM1MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOo7xfPVO9xGLQ3+qOH5DNwf0DRT jM7gWN+S1ZHfWwRBACt6Taai/b2jGWigz664LN2rn6+OnXZzNIOUlI4TqXe1CmGJ P4nQxxRtjQqxWnkNCa+Fg6z26bnysiQyaGb9XBriQqbUYTyEAGUU1TaB9sJkYk/j wkpv0CylYDiaCh8gJaNRX8QWgQhVkDWK18rCyugDPJuKsThRLrU/0jNhz2hNnrzb x9ygkSkGEY1vqGxoodNn3+mHCDfK+Uz/0GIvDKD8wmUrFK3I84cBa5o3FzPx8QUw RtVmsxlnzT5in4tOGy0ETbfxsGF52tf7pEODylI+nfU7w681b1pYGIconQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBq6q982DoD252EDvAwOFYLAw1KzMB8GA1UdIwQY MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt NWY0ODM2MDgzYTMwLzEvR3JxcjN6WU9nUGJuWVFPOERBNFZnc0REVXJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEtNWY0ODM2MDgzYTMw LzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bScMA0G CSqGSIb3DQEBCwUAA4IBAQBnn76JRC99ckUZ0m/qOvtbV3MPVT2BwN0aMy2og2Kr rGfZDcIJYn9OfndP8tSJ46kQqjhPWjeyc0ymrz6qY3ASkh0NR1X8Q3GkVyePgHE3 Sapwk0fJg65AMy8PgrKxe6OrEaR/gQn5yNqTmRf7qWnn6lsi1G7cQwrVBcWcCZ2t 3rzl33wtv4cFuHcxb/h/UOV+iDFzC0BuxKva+lik77FFztx8L3j+NEw1fqRQAd89 zoq8BftHGwWlQYT+j4V1HoLGB44iIQfqL2CHHPQzyWFA0FAz70pwBw3lDySJwgzM 7VAhC6Pngu45t6M95xlN/DXfvvq4gnC0An7xxtzmknbM -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:45 2026 by rpki-client