This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/gRMoRivinGkBgKRmH-SV8yoYcgU.roa File: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (raw, json) Hash identifier: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k= Subject key identifier: 81:13:28:46:2B:E2:9C:69:01:80:A4:66:1F:E4:95:F3:2A:18:72:05 Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B7F15FCC449F1FE616811001061A42BE8 Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/gRMoRivinGkBgKRmH-SV8yoYcgU.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20616 IP address blocks: 91.208.142.0/24 maxlen: 24 195.246.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fc:c4:49:f1:fe:61:68:11:00:10:61:a4:2b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=811328462be29c690180a4661fe495f32a187205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:df:ac:e1:72:48:25:eb:fa:03:d1:cb:2e: 97:c9:db:98:21:11:a8:a0:94:e0:bf:ea:88:70:eb: 30:fc:98:d6:a3:4f:90:da:79:60:e8:cd:5b:a9:e9: f6:04:fe:e5:84:6b:69:57:de:a3:4a:e5:72:11:60: 59:f6:2e:e3:9b:63:22:20:64:8b:17:54:fd:63:59: 69:ec:de:55:9d:34:c9:5b:c0:2b:ec:70:e5:b8:a5: 81:81:c9:b9:ea:8a:51:a1:8a:14:51:5b:03:2e:7f: 4f:ff:71:e9:8a:a6:ce:0b:3f:9f:34:1a:43:c3:3d: 8c:cf:7f:45:f3:93:0a:84:fa:db:5c:b5:ba:ee:35: 65:47:c0:0d:de:47:c6:e7:e5:dd:81:a2:41:a3:6d: 47:1e:4c:dc:3f:a5:4f:28:df:85:a6:07:7c:e6:fc: a5:99:6a:77:10:fc:6c:10:ee:f7:14:c0:ee:89:bd: 35:9a:f7:7f:77:b7:4a:98:db:fb:4d:1c:b8:b7:4a: 8d:79:e6:7b:74:eb:2e:4c:45:e1:c3:7b:85:d4:ad: 78:38:72:df:91:23:fc:ab:a9:22:fa:dc:eb:66:97: d1:3d:3d:08:6e:ba:67:34:d6:2f:0c:88:4b:8a:92: 51:a0:40:5e:32:ca:a2:a4:30:98:d1:5d:fb:5d:c7: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:13:28:46:2B:E2:9C:69:01:80:A4:66:1F:E4:95:F3:2A:18:72:05 X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/gRMoRivinGkBgKRmH-SV8yoYcgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.142.0/24 195.246.242.0/23 Signature Algorithm: sha256WithRSAEncryption 88:47:54:1f:91:b0:df:80:5d:0f:8c:11:12:58:de:9a:ab:90: 17:3a:fe:bf:85:db:c2:f5:3e:ec:ee:80:9c:82:9b:54:1c:4c: 38:56:17:69:dd:f7:75:d3:76:e2:00:38:44:71:c3:00:52:4d: e4:91:eb:3e:ea:b5:a1:50:c5:61:39:56:20:0c:b5:60:3f:98: 14:2b:29:08:42:41:a4:9a:72:80:7c:d5:41:54:fa:25:4e:4f: c2:11:28:cf:90:a9:47:b8:a3:38:a9:24:f1:fd:3c:1e:25:4e: 4b:13:b8:d6:3a:c9:e2:93:18:64:bc:fe:ac:1e:44:51:4b:24: cc:df:fc:8f:3f:2e:eb:dc:21:cf:ce:d9:e5:f7:10:1b:5d:de: d1:fa:d3:09:dd:dc:29:52:db:a5:bd:b4:c0:d3:d7:ae:cd:4e: ec:63:94:e6:3f:73:4c:42:42:dc:3f:05:a6:9b:9d:13:a5:d7: 54:20:2b:15:8d:40:41:02:5b:b8:fe:44:97:66:55:89:c9:71: 18:ea:4f:6c:b9:3d:62:d5:66:4c:34:e2:68:31:89:20:a6:36: 0c:ff:81:8b:d6:ad:c8:61:91:15:f4:18:15:7a:71:4c:e9:dc: 67:fc:46:cc:a6:c9:82:1a:4a:6f:4e:f8:23:51:69:63:d9:cf: 2d:d1:fd:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FfzESfH+YWgRABBhpCvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTEzMjg0NjJiZTI5YzY5MDE4MGE0NjYxZmU0OTVmMzJhMTg3MjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJzfrOFySCXr+gPRyy6XyduYIRGo oJTgv+qIcOsw/JjWo0+Q2nlg6M1bqen2BP7lhGtpV96jSuVyEWBZ9i7jm2MiIGSL F1T9Y1lp7N5VnTTJW8Ar7HDluKWBgcm56opRoYoUUVsDLn9P/3HpiqbOCz+fNBpD wz2Mz39F85MKhPrbXLW67jVlR8AN3kfG5+XdgaJBo21HHkzcP6VPKN+Fpgd85vyl mWp3EPxsEO73FMDuib01mvd/d7dKmNv7TRy4t0qNeeZ7dOsuTEXhw3uF1K14OHLf kSP8q6ki+tzrZpfRPT0IbrpnNNYvDIhLipJRoEBeMsqipDCY0V37XcdUcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIETKEYr4pxpAYCkZh/klfMqGHIFMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvZ1JNb1JpdmluR2tCZ0tSbUgtU1Y4eW9ZY2dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9COAwQB w/byMA0GCSqGSIb3DQEBCwUAA4IBAQCIR1QfkbDfgF0PjBESWN6aq5AXOv6/hdvC 9T7s7oCcgptUHEw4Vhdp3fd103biADhEccMAUk3kkes+6rWhUMVhOVYgDLVgP5gU KykIQkGkmnKAfNVBVPolTk/CESjPkKlHuKM4qSTx/TweJU5LE7jWOsnikxhkvP6s HkRRSyTM3/yPPy7r3CHPztnl9xAbXd7R+tMJ3dwpUtulvbTA09euzU7sY5TmP3NM QkLcPwWmm50TpddUICsVjUBBAlu4/kSXZlWJyXEY6k9suT1i1WZMNOJoMYkgpjYM /4GL1q3IYZEV9BgVenFM6dxn/EbMpsmCGkpvTvgjUWlj2c8t0f0u -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:16 2026 by rpki-client