This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/gRe574DN90lJZ-bbAAqI3B__Ym0.roa File: gRe574DN90lJZ-bbAAqI3B__Ym0.roa (raw, json) Hash identifier: mI4D0v2VpyRqI8+dI4PhrtBe5RLqPKBNt/GXRECvJ9M= Subject key identifier: 81:17:B9:EF:80:CD:F7:49:49:67:E6:DB:00:0A:88:DC:1F:FF:62:6D Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Certificate serial: 019B775955507B769A71BB31B596D24FE276 Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/gRe574DN90lJZ-bbAAqI3B__Ym0.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21276 IP address blocks: 93.187.111.0/24 maxlen: 32 185.110.92.0/24 maxlen: 32 185.110.95.0/24 maxlen: 32 2a14:5400::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:55:50:7b:76:9a:71:bb:31:b5:96:d2:4f:e2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8117b9ef80cdf7494967e6db000a88dc1fff626d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:1e:d4:d2:9b:28:c2:b5:28:bf:c2:a5:a5: 9e:71:16:81:6f:25:46:47:e2:db:4c:a7:c5:0d:57: 20:61:1c:fd:e8:d5:fb:a6:aa:99:2b:87:4e:52:bd: 51:02:c0:72:a8:b9:52:46:db:c1:9d:48:59:64:6b: 1e:cb:98:9d:e8:e9:ae:9d:70:96:61:19:ce:3c:77: 67:36:1d:c1:02:b3:9d:16:20:89:f4:88:96:a3:3c: 2f:6f:9a:21:19:f3:c1:68:5a:6f:e9:4c:6b:83:4d: c4:56:57:85:4f:bc:09:03:97:bf:f4:e2:16:7f:49: f0:e9:e1:d0:94:b3:9d:e6:2d:80:62:3a:a5:9e:c8: 8c:90:2b:f6:d4:01:87:e8:86:a3:e2:69:64:37:29: 37:f2:71:79:3d:fc:b7:d7:ea:0e:d2:e9:31:17:9e: 33:65:41:5a:39:1a:0a:b7:a6:ff:7c:d9:ac:2a:4f: 1e:a9:01:0b:96:71:e4:0f:b1:ac:ad:c9:ec:b3:47: 57:f2:ad:d5:fd:2e:70:fa:f0:06:d3:74:1f:96:18: e1:6c:c0:e1:c7:34:bd:26:93:dd:61:b3:12:e4:66: e5:e8:d4:0c:d1:f3:db:8c:c2:b7:9e:1f:02:0d:98: 9d:27:06:1c:c9:2a:d7:cc:01:90:8e:f6:56:b1:88: 44:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:17:B9:EF:80:CD:F7:49:49:67:E6:DB:00:0A:88:DC:1F:FF:62:6D X509v3 Authority Key Identifier: keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/gRe574DN90lJZ-bbAAqI3B__Ym0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.111.0/24 185.110.92.0/24 185.110.95.0/24 IPv6: 2a14:5400::/32 Signature Algorithm: sha256WithRSAEncryption 86:66:61:39:68:7c:fd:91:c6:af:35:31:5a:1a:da:8b:ae:ed: d6:ae:78:0c:d9:f0:d8:c3:66:f3:7a:b4:49:1c:23:92:1e:05: 50:2e:6c:0c:89:ea:2a:68:62:1d:f7:00:39:65:44:40:43:41: d6:bb:18:63:6c:3d:f4:c5:68:2f:f7:32:5d:41:f9:11:50:18: 1c:15:df:37:0c:67:65:09:e1:35:12:7b:67:40:bf:7d:57:a9: d4:91:d6:87:4c:2e:ac:ed:f7:c2:15:82:37:a8:4a:55:d2:58: c8:5f:a2:da:29:ef:fe:f0:46:85:37:10:6b:21:d4:ca:28:39: 88:c9:f0:ba:1a:d2:72:3a:20:e3:5b:d8:ce:71:a7:c0:d1:bb: 35:88:37:06:c8:0d:cb:79:a6:dd:d6:66:db:07:03:7d:5f:bc: 4c:2c:30:44:4c:69:89:56:fa:c8:15:9d:8f:a3:3e:c5:6b:ce: f2:da:61:1a:ab:5c:0d:64:07:1c:f8:58:7b:c9:29:e7:b2:9f: f6:48:47:5a:7b:dc:b6:01:eb:8b:01:49:24:6f:5a:77:6a:04: 3e:dc:a4:25:c6:83:40:34:b5:cf:03:07:fd:56:09:8f:89:df: 40:70:c0:67:0c:61:4a:8e:67:5c:d9:b7:42:be:82:cd:d0:d7: 58:b1:e1:87 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WVVQe3aacbsxtZbST+J2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi NDFhNGUwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTE3YjllZjgwY2RmNzQ5NDk2N2U2ZGIwMDBhODhkYzFmZmY2MjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm30e1NKbKMK1KL/CpaWecRaBbyVG R+LbTKfFDVcgYRz96NX7pqqZK4dOUr1RAsByqLlSRtvBnUhZZGsey5id6OmunXCW YRnOPHdnNh3BArOdFiCJ9IiWozwvb5ohGfPBaFpv6Uxrg03EVleFT7wJA5e/9OIW f0nw6eHQlLOd5i2AYjqlnsiMkCv21AGH6Iaj4mlkNyk38nF5Pfy31+oO0ukxF54z ZUFaORoKt6b/fNmsKk8eqQELlnHkD7Gsrcnss0dX8q3V/S5w+vAG03QflhjhbMDh xzS9JpPdYbMS5Gbl6NQM0fPbjMK3nh8CDZidJwYcySrXzAGQjvZWsYhEgQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIEXue+AzfdJSWfm2wAKiNwf/2JtMB8GA1UdIwQY MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt NDRmZGU5NmI4YWVjLzEvZ1JlNTc0RE45MGxKWi1iYkFBcUkzQl9fWW0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAXbtvAwQA uW5cAwQAuW5fMA0EAgACMAcDBQAqFFQAMA0GCSqGSIb3DQEBCwUAA4IBAQCGZmE5 aHz9kcavNTFaGtqLru3WrngM2fDYw2bzerRJHCOSHgVQLmwMieoqaGId9wA5ZURA Q0HWuxhjbD30xWgv9zJdQfkRUBgcFd83DGdlCeE1EntnQL99V6nUkdaHTC6s7ffC FYI3qEpV0ljIX6LaKe/+8EaFNxBrIdTKKDmIyfC6GtJyOiDjW9jOcafA0bs1iDcG yA3Leabd1mbbBwN9X7xMLDBETGmJVvrIFZ2Poz7Fa87y2mEaq1wNZAcc+Fh7ySnn sp/2SEdae9y2AeuLAUkkb1p3agQ+3KQlxoNANLXPAwf9VgmPid9AcMBnDGFKjmdc 2bdCvoLN0NdYseGH -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:31 2026 by rpki-client