This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/grH--ZzsS7Hjnl_oQY0MhGRNHY0.roa File: grH--ZzsS7Hjnl_oQY0MhGRNHY0.roa (raw, json) Hash identifier: rdvfLbibhR4Qre58AXGnA2drDCvjCKsgbKWbcy5cEts= Subject key identifier: 82:B1:FE:F9:9C:EC:4B:B1:E3:9E:5F:E8:41:8D:0C:84:64:4D:1D:8D Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8014298E31C3B12790717B1F499230 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/grH--ZzsS7Hjnl_oQY0MhGRNHY0.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25454 IP address blocks: 92.181.0.0/24 maxlen: 24 92.181.1.0/24 maxlen: 24 92.181.2.0/23 maxlen: 23 92.181.4.0/23 maxlen: 23 92.181.6.0/23 maxlen: 23 92.181.8.0/23 maxlen: 23 92.181.10.0/23 maxlen: 23 92.181.12.0/23 maxlen: 23 92.181.14.0/23 maxlen: 23 92.181.16.0/23 maxlen: 23 92.181.18.0/23 maxlen: 23 92.181.20.0/23 maxlen: 23 92.181.22.0/24 maxlen: 24 92.181.23.0/24 maxlen: 24 92.181.24.0/23 maxlen: 23 92.181.26.0/23 maxlen: 23 92.181.28.0/23 maxlen: 23 92.181.30.0/23 maxlen: 23 92.181.32.0/23 maxlen: 23 92.181.34.0/23 maxlen: 23 92.181.36.0/23 maxlen: 23 92.181.38.0/24 maxlen: 24 92.181.39.0/24 maxlen: 24 92.181.40.0/23 maxlen: 23 92.181.42.0/24 maxlen: 24 92.181.48.0/23 maxlen: 23 92.181.50.0/23 maxlen: 23 92.181.52.0/23 maxlen: 23 92.181.54.0/23 maxlen: 23 92.181.56.0/23 maxlen: 23 92.181.58.0/23 maxlen: 23 92.181.60.0/23 maxlen: 23 92.181.62.0/23 maxlen: 23 92.181.64.0/24 maxlen: 24 92.181.65.0/24 maxlen: 24 92.181.66.0/24 maxlen: 24 92.181.67.0/24 maxlen: 24 92.181.68.0/24 maxlen: 24 92.181.69.0/24 maxlen: 24 92.181.70.0/23 maxlen: 23 92.181.72.0/23 maxlen: 23 92.181.74.0/24 maxlen: 24 92.181.75.0/24 maxlen: 24 92.181.76.0/23 maxlen: 23 92.181.78.0/23 maxlen: 23 92.181.80.0/23 maxlen: 23 92.181.82.0/23 maxlen: 23 92.181.84.0/23 maxlen: 23 92.181.86.0/23 maxlen: 23 92.181.88.0/24 maxlen: 24 92.181.89.0/24 maxlen: 24 92.181.90.0/23 maxlen: 23 92.181.92.0/23 maxlen: 23 92.181.94.0/23 maxlen: 23 92.181.96.0/23 maxlen: 23 92.181.98.0/23 maxlen: 23 92.181.100.0/23 maxlen: 23 2a01:c8c0::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:14:29:8e:31:c3:b1:27:90:71:7b:1f:49:92:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b1fef99cec4bb1e39e5fe8418d0c84644d1d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:85:49:46:c1:67:f5:94:08:77:35:15:00:ea: b1:70:1a:00:b5:39:21:86:66:8b:87:cf:b1:8b:75: 07:be:38:3c:4a:87:ed:97:e5:1a:47:a6:a6:50:54: 83:49:64:89:e2:a3:48:50:4f:62:2b:dc:77:51:88: 8c:37:e4:49:5a:7d:1d:9e:b2:d7:83:ab:a5:45:38: 8c:27:bb:bd:6a:71:03:fb:34:b3:d0:d1:80:a7:d2: 3c:b9:76:e3:c0:7e:8b:23:9a:da:39:a4:d9:fc:07: 9b:ca:7f:2f:ce:22:40:01:e0:7e:e4:d6:82:7e:a1: 24:57:7c:c5:0f:71:fb:a3:88:61:0e:5b:05:49:09: 7e:b2:26:4d:fa:02:e3:23:eb:3f:d9:5f:ea:ba:c9: 1a:d9:57:bc:16:e6:2c:53:a7:dc:b2:6f:11:92:13: cd:45:dd:77:e9:f5:20:bc:16:42:42:ca:84:a2:9e: c8:56:18:1e:37:cc:5d:9a:10:9f:ee:ed:cb:13:5a: d6:da:69:e5:08:8f:9a:f3:11:2d:9e:cc:e9:13:ed: 78:b2:44:05:49:3e:ce:85:86:96:eb:87:33:6e:94: 87:6f:a4:f0:cd:46:ac:c3:62:68:4f:83:b0:b4:46: 1c:d2:0c:d9:5d:4c:91:4d:96:e3:c6:f8:09:ba:5c: 4c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:FE:F9:9C:EC:4B:B1:E3:9E:5F:E8:41:8D:0C:84:64:4D:1D:8D X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/grH--ZzsS7Hjnl_oQY0MhGRNHY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.181.0.0-92.181.42.255 92.181.48.0-92.181.101.255 IPv6: 2a01:c8c0::/28 Signature Algorithm: sha256WithRSAEncryption 82:17:83:0d:2e:25:49:28:3f:4b:3b:3c:a7:75:7a:01:71:ba: dc:f4:83:98:87:c1:01:1e:b9:4b:8a:91:ee:4b:d8:40:35:6b: 75:51:db:ec:8d:65:4c:fc:7f:03:5e:49:be:be:0c:a5:bc:ec: 1b:4b:61:4a:d8:3c:78:a4:60:31:a9:a1:db:e5:e2:9c:31:f2: 1a:fd:48:83:40:20:cd:a6:b3:dd:3e:5c:49:7b:57:bd:6a:12: 58:ab:2d:4d:a1:bc:f8:a7:64:15:02:c3:18:6f:84:e2:26:76: 37:1b:cc:2d:7f:55:9a:4e:c3:65:bc:ad:6b:ce:29:a7:36:fa: 33:52:4a:eb:d6:5f:82:4c:22:39:77:c0:62:4e:27:61:49:11: 3d:49:a1:23:c3:17:06:56:cb:fc:fa:c0:4d:74:4d:a1:9c:30: d3:22:e9:6f:38:ef:c8:30:46:d1:9a:03:b9:c5:39:86:e4:8f: bf:4a:05:a1:b2:5d:03:ee:a4:4d:7f:06:07:0a:3a:29:83:ea: 45:51:93:b9:88:df:bc:9f:18:9a:04:bd:80:00:ae:9c:e7:31: 61:f9:ad:0d:83:09:81:16:63:0d:e5:89:7a:e7:3d:89:b8:bc: 21:b1:09:c2:81:47:25:00:23:86:2f:e9:3b:b4:f8:dc:3c:be: da:9c:45:2e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8gBQpjjHDsSeQcXsfSZIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmIxZmVmOTljZWM0YmIxZTM5ZTVmZTg0MThkMGM4NDY0NGQxZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IVJRsFn9ZQIdzUVAOqxcBoAtTkh hmaLh8+xi3UHvjg8Softl+UaR6amUFSDSWSJ4qNIUE9iK9x3UYiMN+RJWn0dnrLX g6ulRTiMJ7u9anED+zSz0NGAp9I8uXbjwH6LI5raOaTZ/Aebyn8vziJAAeB+5NaC fqEkV3zFD3H7o4hhDlsFSQl+siZN+gLjI+s/2V/quska2Ve8FuYsU6fcsm8RkhPN Rd136fUgvBZCQsqEop7IVhgeN8xdmhCf7u3LE1rW2mnlCI+a8xEtnszpE+14skQF ST7OhYaW64czbpSHb6TwzUasw2JoT4OwtEYc0gzZXUyRTZbjxvgJulxM/QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIKx/vmc7Eux455f6EGNDIRkTR2NMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvZ3JILS1aenNTN0hqbmxfb1FZME1oR1JOSFkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAhBAIAATAbMAsDAwBctQME AFy1KjAMAwQEXLUwAwQBXLVkMA0EAgACMAcDBQQqAcjAMA0GCSqGSIb3DQEBCwUA A4IBAQCCF4MNLiVJKD9LOzyndXoBcbrc9IOYh8EBHrlLipHuS9hANWt1UdvsjWVM /H8DXkm+vgylvOwbS2FK2Dx4pGAxqaHb5eKcMfIa/UiDQCDNprPdPlxJe1e9ahJY qy1Nobz4p2QVAsMYb4TiJnY3G8wtf1WaTsNlvK1rzimnNvozUkrr1l+CTCI5d8Bi TidhSRE9SaEjwxcGVsv8+sBNdE2hnDDTIulvOO/IMEbRmgO5xTmG5I+/SgWhsl0D 7qRNfwYHCjopg+pFUZO5iN+8nxiaBL2AAK6c5zFh+a0NgwmBFmMN5Yl65z2JuLwh sQnCgUclACOGL+k7tPjcPL7anEUu -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:00 2026 by rpki-client