This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/GRQeTTIlDXdek7LI3xSxbyP0wko.roa File: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (raw, json) Hash identifier: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0= Subject key identifier: 19:14:1E:4D:32:25:0D:77:5E:93:B2:C8:DF:14:B1:6F:23:F4:C2:4A Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d Certificate serial: 019B7F15A98229FE872ACF44889468C889D1 Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/GRQeTTIlDXdek7LI3xSxbyP0wko.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9186 IP address blocks: 195.245.128.0/18 maxlen: 24 213.58.0.0/16 maxlen: 24 2001:a40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a9:82:29:fe:87:2a:cf:44:88:94:68:c8:89:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19141e4d32250d775e93b2c8df14b16f23f4c24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:e8:4d:1f:5b:9b:18:0c:38:65:86:e7:28: d4:9b:e2:64:d4:9c:c7:38:42:8b:c3:bd:bd:7a:7c: 53:ea:22:51:92:b8:a4:0a:29:8a:31:47:80:6a:59: 11:a7:62:6e:64:c2:93:09:83:d0:9b:1d:61:16:22: 27:a7:a2:31:ed:56:04:97:25:e9:c5:ed:30:e3:fb: 6d:4c:67:fb:52:4c:a2:7a:b5:f8:d3:35:b6:d8:ac: 86:60:48:c7:65:f1:e9:8e:ad:85:ac:89:b7:a7:6c: 47:d2:42:e4:45:4f:a4:76:e0:a2:98:9e:81:d5:19: 0e:7b:21:21:97:85:73:7b:60:a9:44:62:7a:9d:cb: 7b:f5:92:fe:a6:5e:88:9b:be:b4:dc:25:d1:0b:44: 7f:bf:74:ce:12:d7:92:55:f1:aa:ae:d5:13:2c:6b: dd:76:b2:f9:2f:5a:5b:f1:0d:64:1c:17:d1:4a:58: 31:66:b2:16:56:d9:54:a7:cc:96:cc:eb:1d:24:21: 4c:99:68:83:15:2b:26:8e:bc:a0:ce:77:f2:de:2c: dd:bf:43:05:dd:6b:69:bf:f4:92:04:d8:b6:3c:c6: ce:14:21:f7:f2:2e:31:27:f7:c6:81:12:62:7a:5f: 68:24:de:ad:42:58:32:8d:51:2e:5d:60:3f:8a:a1: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:14:1E:4D:32:25:0D:77:5E:93:B2:C8:DF:14:B1:6F:23:F4:C2:4A X509v3 Authority Key Identifier: keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/GRQeTTIlDXdek7LI3xSxbyP0wko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.128.0/18 213.58.0.0/16 IPv6: 2001:a40::/29 Signature Algorithm: sha256WithRSAEncryption 18:1c:36:bf:2a:82:a3:74:9a:28:d6:b3:56:5b:24:d8:8b:87: 4f:27:6b:f6:36:99:09:b6:4d:71:87:ab:e3:e1:9c:c3:40:92: ae:e7:41:0e:81:7b:92:72:ce:94:bf:42:f5:3b:c5:fb:a7:be: d1:22:c4:60:e3:0b:44:06:fe:00:27:d7:f2:72:5c:b7:46:af: 43:49:ed:2e:a7:87:69:87:94:a2:cb:43:6c:3f:9e:13:f9:cc: 16:ed:27:10:fb:b3:fd:ff:b7:2a:52:8e:6e:d5:ec:4d:b6:77: a7:ad:6e:e2:77:de:af:61:ae:a1:04:a6:43:9e:e3:e8:61:6b: 2e:14:26:a0:df:0f:fa:0b:dd:35:62:12:94:c2:0d:61:8b:dd: 46:db:d6:e7:8b:39:8e:d0:14:d9:3d:59:d0:c9:b8:66:a0:c3: 1a:30:2e:31:cf:f7:4b:f0:c5:c2:40:34:bb:36:c2:88:8f:72: f3:f0:c2:d2:1a:9a:2a:5d:7a:28:fb:de:fb:d3:96:a4:a6:22: a0:1b:2d:a5:83:81:67:41:a1:08:7d:e4:b1:c2:a5:b9:6d:62: 05:a7:48:e7:ac:29:70:0b:2c:9c:fc:4c:df:80:bb:16:a9:fb: 7d:6f:75:02:24:37:95:24:5a:e1:95:f4:b4:67:72:0f:a1:8b: 30:75:15:1b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FamCKf6HKs9EiJRoyInRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMWQxOGQ5YTIyMjczNmRiYWMyMzExMTBiODhkZWFjOGRi MDMzNmQwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTE0MWU0ZDMyMjUwZDc3NWU5M2IyYzhkZjE0YjE2ZjIzZjRjMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujXoTR9bmxgMOGWG5yjUm+Jk1JzH OEKLw729enxT6iJRkrikCimKMUeAalkRp2JuZMKTCYPQmx1hFiInp6Ix7VYElyXp xe0w4/ttTGf7UkyierX40zW22KyGYEjHZfHpjq2FrIm3p2xH0kLkRU+kduCimJ6B 1RkOeyEhl4Vze2CpRGJ6nct79ZL+pl6Im7603CXRC0R/v3TOEteSVfGqrtUTLGvd drL5L1pb8Q1kHBfRSlgxZrIWVtlUp8yWzOsdJCFMmWiDFSsmjrygznfy3izdv0MF 3Wtpv/SSBNi2PMbOFCH38i4xJ/fGgRJiel9oJN6tQlgyjVEuXWA/iqHfiQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBkUHk0yJQ13XpOyyN8UsW8j9MJKMB8GA1UdIwQY MBaAFP4dGNmiInNtusIxEQuI3qyNsDNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQt NjU4N2Y3NmZkODEwLzEvR1JRZVRUSWxEWGRlazdMSTN4U3hieVAwd2tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQtNjU4N2Y3NmZkODEw LzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQGw/WAAwMA 1TowDQQCAAIwBwMFAyABCkAwDQYJKoZIhvcNAQELBQADggEBABgcNr8qgqN0mijW s1ZbJNiLh08na/Y2mQm2TXGHq+PhnMNAkq7nQQ6Be5JyzpS/QvU7xfunvtEixGDj C0QG/gAn1/JyXLdGr0NJ7S6nh2mHlKLLQ2w/nhP5zBbtJxD7s/3/typSjm7V7E22 d6etbuJ33q9hrqEEpkOe4+hhay4UJqDfD/oL3TViEpTCDWGL3Ubb1ueLOY7QFNk9 WdDJuGagwxowLjHP90vwxcJANLs2woiPcvPwwtIamipdeij73vvTlqSmIqAbLaWD gWdBoQh95LHCpbltYgWnSOesKXALLJz8TN+Auxap+31vdQIkN5UkWuGV9LRncg+h izB1FRs= -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:43 2026 by rpki-client