This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/GRivXpYp4CuhiN76JDUjX3oocvQ.roa File: GRivXpYp4CuhiN76JDUjX3oocvQ.roa (raw, json) Hash identifier: INwnsmHYjS772AhOCOKo1mO3+hjHZod9QoImR0vqNKc= Subject key identifier: 19:18:AF:5E:96:29:E0:2B:A1:88:DE:FA:24:35:23:5F:7A:28:72:F4 Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Certificate serial: 019B7AC7925D76DC50ED76F4A99A05D9A02F Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/GRivXpYp4CuhiN76JDUjX3oocvQ.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133499 IP address blocks: 80.240.116.0/22 maxlen: 32 80.240.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:92:5d:76:dc:50:ed:76:f4:a9:9a:05:d9:a0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1918af5e9629e02ba188defa2435235f7a2872f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:b5:d0:5e:50:f3:72:95:32:ec:34:3a:6b: d9:6b:a2:d2:2d:bf:bc:af:97:59:8c:b7:a2:26:38: b3:bb:37:2a:5d:83:4c:08:08:ef:a1:65:03:4b:df: 70:ab:51:17:05:bd:77:6f:04:9b:3e:c9:ab:08:17: 9d:56:27:b5:09:31:95:fb:5a:48:d7:65:c3:31:dd: d0:31:7a:6e:5b:26:cf:ee:1f:c3:44:d7:f8:ea:21: a7:df:7d:75:72:54:3d:f6:e3:14:98:62:2e:d9:cc: 72:0c:e6:2d:3d:4f:83:8c:00:59:ac:77:c4:89:76: 0c:3e:fd:0c:e1:4a:ae:d8:00:96:b1:7f:64:b1:47: 51:88:de:a3:97:54:80:53:09:8e:25:90:2e:9a:64: 3f:b1:84:86:5d:cb:f8:d7:fd:ab:d0:a5:f8:e2:7a: e3:ae:dd:d2:a4:fd:ba:6a:be:16:18:27:21:e9:a3: fe:ea:d6:10:7d:38:26:6b:50:66:9f:36:93:d8:56: 9d:4e:ed:df:48:8a:5d:fb:4c:d2:a8:c0:92:10:51: 14:99:af:85:73:f7:e9:2c:2d:23:4d:14:44:57:da: 9a:bf:34:56:61:ca:f9:e9:31:51:ff:01:ca:f8:07: 95:79:d3:87:2b:2a:d4:38:51:35:e2:5a:54:e0:e3: 72:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:18:AF:5E:96:29:E0:2B:A1:88:DE:FA:24:35:23:5F:7A:28:72:F4 X509v3 Authority Key Identifier: keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/GRivXpYp4CuhiN76JDUjX3oocvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.116.0-80.240.123.255 Signature Algorithm: sha256WithRSAEncryption 65:7e:48:00:94:97:e6:e8:62:c1:f3:ca:b7:43:34:49:0a:c7: 85:1e:e4:e5:5d:04:38:93:72:b7:5f:4e:dc:d8:ba:8e:c1:e8: bc:b6:48:b2:a2:14:68:66:fd:c9:7d:ea:d4:4e:4e:e1:c4:e5: 75:bc:1f:ab:a6:44:cb:76:12:c7:51:91:86:5a:90:8e:ee:87: 8e:ac:9e:c3:0c:64:70:69:5e:2e:41:03:7b:f0:26:c5:b9:55: 73:d8:a7:7f:de:71:e3:22:c0:85:31:80:c7:57:ac:7b:57:0f: 4c:3c:a2:4b:58:ad:52:b1:f4:2c:b7:29:a8:b0:74:b2:79:ec: 5a:9d:fc:ca:cf:df:b4:3e:6e:60:99:c9:fd:f4:55:61:dc:63: 7f:fb:20:eb:c7:ec:19:24:93:88:67:91:96:dc:30:97:db:88: 41:4f:9b:a2:bc:f9:ff:de:fd:58:46:45:a7:b5:b2:77:fa:be: c0:a0:e9:8f:d7:2f:01:cc:69:ce:6c:05:ee:d8:77:14:c8:d3: fd:67:6c:1e:cd:7b:50:3c:90:d5:18:f9:d7:f3:6a:40:a7:55: 84:0d:71:c8:86:29:a8:2e:ee:1f:23:3d:0a:c3:45:63:e8:03: 85:6d:05:3d:6b:03:76:69:c5:78:01:c7:b6:c5:57:d9:00:2c: 12:06:67:6f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x5JddtxQ7Xb0qZoF2aAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz MmVhOWIwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTE4YWY1ZTk2MjllMDJiYTE4OGRlZmEyNDM1MjM1ZjdhMjg3MmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiq10F5Q83KVMuw0OmvZa6LSLb+8 r5dZjLeiJjizuzcqXYNMCAjvoWUDS99wq1EXBb13bwSbPsmrCBedVie1CTGV+1pI 12XDMd3QMXpuWybP7h/DRNf46iGn3311clQ99uMUmGIu2cxyDOYtPU+DjABZrHfE iXYMPv0M4Uqu2ACWsX9ksUdRiN6jl1SAUwmOJZAummQ/sYSGXcv41/2r0KX44nrj rt3SpP26ar4WGCch6aP+6tYQfTgma1BmnzaT2FadTu3fSIpd+0zSqMCSEFEUma+F c/fpLC0jTRREV9qavzRWYcr56TFR/wHK+AeVedOHKyrUOFE14lpU4ONyPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBkYr16WKeAroYje+iQ1I196KHL0MB8GA1UdIwQY MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt ZmRhMDExZTVjOTcyLzEvR1JpdlhwWXA0Q3VoaU43NkpEVWpYM29vY3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJQ8HQD BAJQ8HgwDQYJKoZIhvcNAQELBQADggEBAGV+SACUl+boYsHzyrdDNEkKx4Ue5OVd BDiTcrdfTtzYuo7B6Ly2SLKiFGhm/cl96tROTuHE5XW8H6umRMt2EsdRkYZakI7u h46snsMMZHBpXi5BA3vwJsW5VXPYp3/eceMiwIUxgMdXrHtXD0w8oktYrVKx9Cy3 KaiwdLJ57Fqd/MrP37Q+bmCZyf30VWHcY3/7IOvH7Bkkk4hnkZbcMJfbiEFPm6K8 +f/e/VhGRae1snf6vsCg6Y/XLwHMac5sBe7YdxTI0/1nbB7Ne1A8kNUY+dfzakCn VYQNcciGKagu7h8jPQrDRWPoA4VtBT1rA3ZpxXgBx7bFV9kALBIGZ28= -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:40 2026 by rpki-client