This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa File: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (raw, json) Hash identifier: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y= Subject key identifier: 1A:B8:16:4C:F5:9F:88:C8:FC:17:07:4A:62:19:FC:CC:9E:99:ED:EF Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F19FF3217CFD814FABB05E632A027 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212144 IP address blocks: 94.154.118.0/24 maxlen: 24 2a14:c886::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:19:ff:32:17:cf:d8:14:fa:bb:05:e6:32:a0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ab8164cf59f88c8fc17074a6219fccc9e99edef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:c2:b0:08:24:f4:21:ca:69:d5:ba:eb:3e: bc:59:29:73:68:44:8d:49:97:87:be:f9:03:07:92: 13:7f:ed:cd:13:49:50:b6:69:7e:a1:b4:a4:93:6a: 87:6c:1c:1f:64:dd:33:e5:44:2d:74:3f:87:9e:5d: de:fd:61:bb:6e:71:22:36:a7:b7:d1:74:22:ab:65: b9:e2:96:aa:c7:ca:fb:17:93:12:6f:8c:55:55:da: 5c:85:ca:ff:d2:c2:6c:6e:a8:d5:27:22:59:b9:e2: a0:55:82:34:7c:2a:28:81:bc:c5:ba:3d:6c:47:94: 27:98:7d:8d:92:b8:59:b0:e2:a4:fa:0b:15:ee:57: e2:09:4c:ab:df:87:d6:a8:c8:99:08:f6:a8:1f:0e: e6:98:cd:ab:32:ac:0c:88:48:be:3d:90:e6:02:2c: af:9b:cc:04:65:31:3e:2d:04:4c:d5:45:4d:e1:ad: 1c:ca:f2:b9:3b:a5:12:b7:be:6a:9d:3e:02:22:5a: d9:55:c8:8a:2b:38:65:3d:ea:c3:d7:37:c9:b4:34: af:4c:70:5f:2d:12:03:5a:81:86:2c:ad:c8:50:f7: fb:5f:53:ee:c8:b3:0f:0c:4b:ab:c5:d5:68:8f:e3: c8:48:bc:e4:28:df:f2:3c:f9:12:cd:c4:84:ec:17: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:16:4C:F5:9F:88:C8:FC:17:07:4A:62:19:FC:CC:9E:99:ED:EF X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.118.0/24 IPv6: 2a14:c886::/33 Signature Algorithm: sha256WithRSAEncryption 02:15:ef:c1:6c:64:68:ec:92:10:23:57:6d:6d:95:52:93:0e: 70:68:de:93:4a:75:21:19:b8:a9:4a:b3:0f:6b:65:fb:2f:f2: 6e:0f:c9:a9:6f:57:4b:b0:1b:c0:b0:57:f6:07:7a:aa:34:43: f7:e2:44:89:e3:48:59:57:0f:ff:f7:4d:b5:6e:c8:dc:58:b4: ec:ed:60:3e:df:63:ac:7f:8f:c0:40:d0:e3:d1:c8:91:30:53: 84:04:ce:d7:98:bb:49:51:fb:d8:3b:e6:13:ba:ea:a8:45:3d: 98:2e:44:d9:51:92:9e:17:56:10:e1:56:15:45:ca:9c:39:25: da:33:22:84:d3:f3:20:6c:7d:bf:f9:e8:27:ab:8f:b5:6e:eb: 3d:2f:9f:04:85:d6:ba:dd:61:43:42:e4:98:77:cf:ce:12:26: 0e:a3:e0:b2:d2:cb:de:8a:e1:ea:06:08:6a:db:8c:65:78:9f: cf:17:6b:84:33:d3:ac:d8:d3:94:07:df:c9:25:0a:fc:07:39: 36:4f:86:05:85:8b:70:e1:b0:0a:28:f0:4b:c4:e8:06:a0:91: 0c:e9:ba:20:a8:8d:e5:ed:e1:37:af:72:1e:1d:1a:fa:f9:4f: 8e:c4:9c:73:e7:28:87:75:65:84:c2:b6:3d:9a:a4:07:ca:87: 2e:86:ea:ca -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fxn/MhfP2BT6uwXmMqAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWI4MTY0Y2Y1OWY4OGM4ZmMxNzA3NGE2MjE5ZmNjYzllOTllZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEXCsAgk9CHKadW66z68WSlzaESN SZeHvvkDB5ITf+3NE0lQtml+obSkk2qHbBwfZN0z5UQtdD+Hnl3e/WG7bnEiNqe3 0XQiq2W54paqx8r7F5MSb4xVVdpchcr/0sJsbqjVJyJZueKgVYI0fCoogbzFuj1s R5QnmH2NkrhZsOKk+gsV7lfiCUyr34fWqMiZCPaoHw7mmM2rMqwMiEi+PZDmAiyv m8wEZTE+LQRM1UVN4a0cyvK5O6USt75qnT4CIlrZVciKKzhlPerD1zfJtDSvTHBf LRIDWoGGLK3IUPf7X1PuyLMPDEurxdVoj+PISLzkKN/yPPkSzcSE7BdqeQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBq4Fkz1n4jI/BcHSmIZ/Myeme3vMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvR3JnV1RQV2ZpTWo4RndkS1lobjh6SjZaN2U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAXpp2MA4E AgACMAgDBgcqFMiGADANBgkqhkiG9w0BAQsFAAOCAQEAAhXvwWxkaOySECNXbW2V UpMOcGjek0p1IRm4qUqzD2tl+y/ybg/JqW9XS7AbwLBX9gd6qjRD9+JEieNIWVcP //dNtW7I3Fi07O1gPt9jrH+PwEDQ49HIkTBThATO15i7SVH72DvmE7rqqEU9mC5E 2VGSnhdWEOFWFUXKnDkl2jMihNPzIGx9v/noJ6uPtW7rPS+fBIXWut1hQ0LkmHfP zhImDqPgstLL3orh6gYIatuMZXifzxdrhDPTrNjTlAffySUK/Ac5Nk+GBYWLcOGw CijwS8ToBqCRDOm6IKiN5e3hN69yHh0a+vlPjsScc+coh3VlhMK2PZqkB8qHLobq yg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:10 2026 by rpki-client