This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa File: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (raw, json) Hash identifier: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA= Subject key identifier: 82:BD:B8:5B:D8:58:C4:33:FE:B7:F8:83:9D:B4:50:DC:E6:5D:6E:39 Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019B7AC89F1153975E2847F9C707A01C6F6F Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54113 IP address blocks: 185.221.87.0/24 maxlen: 24 2a0d:8000:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9f:11:53:97:5e:28:47:f9:c7:07:a0:1c:6f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82bdb85bd858c433feb7f8839db450dce65d6e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:96:bf:13:04:eb:78:f4:7a:90:ff:f0:64: 53:1c:af:d4:ad:85:f5:b4:78:33:b4:5b:ba:c8:b6: 40:47:4b:53:13:7c:e3:f1:7b:53:ae:40:a6:de:c4: 85:d2:f0:65:c4:44:21:82:37:d3:9a:80:a2:16:52: b3:85:cd:51:6e:2e:85:ac:d8:b6:66:cd:a6:e2:fc: b3:97:89:ca:76:55:95:1e:d3:f7:f6:84:34:10:0b: 30:19:e5:41:25:d8:bd:35:46:c6:d4:37:70:2b:be: cc:3a:b1:c8:f2:fa:fc:00:fa:b3:35:10:ea:46:70: 8c:43:ae:e8:08:8d:75:2c:9b:29:28:95:66:ed:79: 4a:a0:d4:34:c4:35:bb:e2:a7:7b:3d:52:80:f3:f9: 5b:7a:07:de:c2:4d:23:d7:29:5e:cc:38:ef:8e:55: 43:4a:f3:93:43:d8:a8:06:79:79:53:b8:ee:db:fd: 44:d3:4a:2f:11:11:80:3a:7a:5e:e5:60:7e:6f:e6: 5a:35:37:99:ea:d5:fe:10:b0:2f:22:57:76:a6:78: 5f:c2:d4:61:67:77:63:de:28:d3:ea:cc:68:83:e4: d0:5e:82:a1:2b:58:51:08:c7:5b:43:86:49:f2:ca: 6a:63:40:c5:e5:89:32:75:ab:41:e8:de:b1:9f:fa: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:B8:5B:D8:58:C4:33:FE:B7:F8:83:9D:B4:50:DC:E6:5D:6E:39 X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.87.0/24 IPv6: 2a0d:8000:1::/48 Signature Algorithm: sha256WithRSAEncryption 9c:e4:4c:3c:21:2d:12:09:9d:a7:f9:13:68:1e:71:3e:a7:c4: 26:5b:ea:9a:7d:52:f5:71:10:c2:e6:d5:44:86:57:17:e5:b6: 50:0e:44:f1:a3:ef:26:e8:69:75:85:e5:f1:c8:17:6a:67:90: 32:c7:36:89:e0:2e:7c:94:b5:32:75:aa:1a:19:9f:5d:23:bf: a6:b2:92:bd:e3:20:6e:d0:79:04:48:58:2c:12:9c:05:de:88: 0a:00:9b:30:68:6a:18:8c:2a:ae:35:12:4b:fe:54:5f:32:7c: b6:cb:bd:b1:4e:c7:ba:06:1f:97:16:47:b3:08:09:47:9c:6c: 90:92:29:ca:fa:b6:0b:1e:3f:c4:ea:29:e7:b2:87:b7:e4:5c: 78:0e:e3:96:a2:4e:ba:9e:a8:32:63:63:76:95:4b:06:41:0d: 25:7b:a9:05:c5:f1:e2:1a:6a:9d:f5:1c:5a:32:f1:47:c0:89: 5d:f0:c5:c5:8f:7f:bd:37:08:f9:bd:be:b3:b3:46:73:90:f8: 2d:fe:7e:23:2c:2d:25:c2:c5:ee:02:e5:fe:bd:8a:a5:56:c2: 79:0b:40:8a:ba:84:82:4d:a6:eb:a5:9a:d6:2e:01:78:cc:5c: 49:bd:83:b3:2c:4b:e9:44:ab:29:05:f9:ba:21:7b:02:28:c5: 4e:b4:2f:d0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yJ8RU5deKEf5xwegHG9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmJkYjg1YmQ4NThjNDMzZmViN2Y4ODM5ZGI0NTBkY2U2NWQ2ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EaWvxME63j0epD/8GRTHK/UrYX1 tHgztFu6yLZAR0tTE3zj8XtTrkCm3sSF0vBlxEQhgjfTmoCiFlKzhc1Rbi6FrNi2 Zs2m4vyzl4nKdlWVHtP39oQ0EAswGeVBJdi9NUbG1DdwK77MOrHI8vr8APqzNRDq RnCMQ67oCI11LJspKJVm7XlKoNQ0xDW74qd7PVKA8/lbegfewk0j1ylezDjvjlVD SvOTQ9ioBnl5U7ju2/1E00ovERGAOnpe5WB+b+ZaNTeZ6tX+ELAvIld2pnhfwtRh Z3dj3ijT6sxog+TQXoKhK1hRCMdbQ4ZJ8spqY0DF5YkydatB6N6xn/q4qwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIK9uFvYWMQz/rf4g520UNzmXW45MB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvZ3IyNFc5aFl4RFAtdF9pRG5iUlEzT1pkYmprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAud1XMA8E AgACMAkDBwAqDYAAAAEwDQYJKoZIhvcNAQELBQADggEBAJzkTDwhLRIJnaf5E2ge cT6nxCZb6pp9UvVxEMLm1USGVxfltlAORPGj7yboaXWF5fHIF2pnkDLHNongLnyU tTJ1qhoZn10jv6aykr3jIG7QeQRIWCwSnAXeiAoAmzBoahiMKq41Ekv+VF8yfLbL vbFOx7oGH5cWR7MICUecbJCSKcr6tgseP8TqKeeyh7fkXHgO45aiTrqeqDJjY3aV SwZBDSV7qQXF8eIaap31HFoy8UfAiV3wxcWPf703CPm9vrOzRnOQ+C3+fiMsLSXC xe4C5f69iqVWwnkLQIq6hIJNpuulmtYuAXjMXEm9g7MsS+lEqykF+bohewIoxU60 L9A= -----END CERTIFICATE-----Generated at Sun Jan 25 11:59:56 2026 by rpki-client