This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/GrxF-Z6g8x7Myhoo6_yrBMBBtIw.roa File: GrxF-Z6g8x7Myhoo6_yrBMBBtIw.roa (raw, json) Hash identifier: KHfAEEJOgExqo49TxB4REgLZoluYcPxAiiRPplUp4YI= Subject key identifier: 1A:BC:45:F9:9E:A0:F3:1E:CC:CA:1A:28:EB:FC:AB:04:C0:41:B4:8C Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Certificate serial: 019B2286FB7509BFE912D5F0032BCCA259C3 Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/GrxF-Z6g8x7Myhoo6_yrBMBBtIw.roa Signing time: Mon 15 Dec 2025 15:00:30 +0000 ROA not before: Mon 15 Dec 2025 15:00:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49632 IP address blocks: 188.125.160.0/24 maxlen: 24 188.125.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:86:fb:75:09:bf:e9:12:d5:f0:03:2b:cc:a2:59:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Validity Not Before: Dec 15 15:00:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1abc45f99ea0f31eccca1a28ebfcab04c041b48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:ae:25:ad:0a:0b:8d:da:f8:8d:72:5e:f0: 17:74:db:78:54:70:db:41:6f:49:8e:13:3e:22:15: fb:82:3e:ed:48:ed:a6:67:00:1a:11:71:0c:a0:46: d7:c1:69:af:55:ac:4c:fb:c4:0d:36:d1:b1:e8:f1: 88:60:34:35:b0:63:d1:b1:3e:67:e5:81:2d:e8:a5: ed:70:8d:8b:56:1c:56:7c:be:b3:dc:a0:5d:49:f2: ee:bf:30:5d:86:7a:d1:b0:d9:87:3f:42:23:4c:ca: 59:02:68:ef:9f:09:ea:9b:90:46:14:0a:9c:14:ac: c8:e8:70:39:42:ad:14:e8:0f:53:45:95:da:8b:17: 56:f9:d6:24:55:a7:1d:eb:61:fc:62:e8:0e:9d:b0: e5:55:0a:ba:b9:67:f3:ff:16:b8:b8:83:fc:40:f7: 49:7b:94:fd:0b:30:67:08:26:95:d3:4a:bd:c4:51: a4:5f:45:f9:cb:c7:82:9e:f0:78:5f:8c:b6:a9:04: db:f6:2f:79:11:6c:b1:7e:82:63:1c:cc:6d:d7:49: ee:db:d0:05:31:b3:97:19:f2:4b:c9:9f:9b:3c:8b: ca:91:d1:c4:a5:75:35:fd:21:4c:7b:ac:7b:c2:ab: 6a:e6:15:6d:8f:ef:ba:15:6d:9a:07:f4:96:a5:f6: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BC:45:F9:9E:A0:F3:1E:CC:CA:1A:28:EB:FC:AB:04:C0:41:B4:8C X509v3 Authority Key Identifier: keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/GrxF-Z6g8x7Myhoo6_yrBMBBtIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.160.0/24 188.125.168.0/24 Signature Algorithm: sha256WithRSAEncryption ac:0f:45:7d:4d:37:7a:b0:d1:7f:d5:43:01:85:2e:c3:5c:37: a9:7e:5b:eb:14:3d:00:d5:8c:08:a2:59:21:0e:dc:52:ed:12: 11:37:66:57:d7:fd:9f:2b:7c:90:eb:ea:b4:2e:a9:c9:ae:cb: 43:a9:a4:76:9f:67:4f:c8:03:13:21:02:7f:db:06:39:65:ea: 67:39:b3:ee:02:e7:32:ef:91:80:e8:cc:c4:bd:c9:26:2d:18: 9a:6d:39:21:6d:21:a2:af:f8:00:16:6f:9f:de:0b:0d:7d:24: 9e:c3:75:3a:ff:a6:0a:5c:41:8e:0b:94:02:40:d4:65:db:5d: 05:7e:68:6e:8a:5d:39:ab:d6:6c:58:bd:f5:16:6f:43:32:50: 97:29:80:8f:22:04:65:dd:3a:76:68:16:4b:75:8d:19:28:2f: 68:ca:ae:2c:15:7c:e6:4d:75:b7:e6:1c:19:db:68:02:77:2e: b1:f0:11:0f:3b:7f:48:74:d5:c5:af:da:2e:40:fc:5e:2f:91: 0c:07:da:c5:48:8e:39:8e:39:f9:4a:83:23:a3:fb:9d:26:94: 62:a3:1a:83:dc:1e:72:99:e4:68:bb:67:0f:82:6a:ef:7e:be: 12:9c:31:75:c6:bb:33:a0:0d:08:bc:38:0c:6a:6f:fb:fc:1e: 2f:0d:86:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsihvt1Cb/pEtXwAyvMolnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0 M2Q4MGMwHhcNMjUxMjE1MTUwMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWJjNDVmOTllYTBmMzFlY2NjYTFhMjhlYmZjYWIwNGMwNDFiNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3WuJa0KC43a+I1yXvAXdNt4VHDb QW9JjhM+IhX7gj7tSO2mZwAaEXEMoEbXwWmvVaxM+8QNNtGx6PGIYDQ1sGPRsT5n 5YEt6KXtcI2LVhxWfL6z3KBdSfLuvzBdhnrRsNmHP0IjTMpZAmjvnwnqm5BGFAqc FKzI6HA5Qq0U6A9TRZXaixdW+dYkVacd62H8YugOnbDlVQq6uWfz/xa4uIP8QPdJ e5T9CzBnCCaV00q9xFGkX0X5y8eCnvB4X4y2qQTb9i95EWyxfoJjHMxt10nu29AF MbOXGfJLyZ+bPIvKkdHEpXU1/SFMe6x7wqtq5hVtj++6FW2aB/SWpfbjIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBq8RfmeoPMezMoaKOv8qwTAQbSMMB8GA1UdIwQY MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt NjliOTUzYzlkNWFhLzEvR3J4Ri1aNmc4eDdNeWhvbzZfeXJCTUJCdEl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvH2gAwQA vH2oMA0GCSqGSIb3DQEBCwUAA4IBAQCsD0V9TTd6sNF/1UMBhS7DXDepflvrFD0A 1YwIolkhDtxS7RIRN2ZX1/2fK3yQ6+q0LqnJrstDqaR2n2dPyAMTIQJ/2wY5Zepn ObPuAucy75GA6MzEvckmLRiabTkhbSGir/gAFm+f3gsNfSSew3U6/6YKXEGOC5QC QNRl210Ffmhuil05q9ZsWL31Fm9DMlCXKYCPIgRl3Tp2aBZLdY0ZKC9oyq4sFXzm TXW35hwZ22gCdy6x8BEPO39IdNXFr9ouQPxeL5EMB9rFSI45jjn5SoMjo/udJpRi oxqD3B5ymeRou2cPgmrvfr4SnDF1xrszoA0IvDgMam/7/B4vDYYk -----END CERTIFICATE-----Generated at Sat Dec 20 00:49:53 2025 by rpki-client