This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/GLWh56MMEykKTE4rrV87G9Vgki8.roa File: GLWh56MMEykKTE4rrV87G9Vgki8.roa (raw, json) Hash identifier: 02Z7LQfQNnw59BWb8xFGQ1xpLvcBlJFnepDp+x8RT7E= Subject key identifier: 18:B5:A1:E7:A3:0C:13:29:0A:4C:4E:2B:AD:5F:3B:1B:D5:60:92:2F Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef Certificate serial: 019B7759035E3EB74D2AB2D80CD0E9134D63 Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/GLWh56MMEykKTE4rrV87G9Vgki8.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58010 IP address blocks: 109.109.192.0/21 maxlen: 24 185.114.212.0/22 maxlen: 24 185.114.212.0/24 maxlen: 24 185.114.213.0/24 maxlen: 24 185.114.214.0/24 maxlen: 24 185.114.215.0/24 maxlen: 24 2a06:71c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:03:5e:3e:b7:4d:2a:b2:d8:0c:d0:e9:13:4d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18b5a1e7a30c13290a4c4e2bad5f3b1bd560922f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:34:12:1c:ab:6b:e6:21:9e:14:21:f8:6d: c2:49:47:51:91:60:54:de:0c:94:86:9f:e6:66:30: b8:c8:70:ea:ac:e4:25:6e:6b:22:8c:52:9b:4b:dd: 13:62:bf:d3:69:73:9f:a7:f7:70:6f:ce:fd:18:0e: 21:a5:7c:8d:f7:51:d4:c4:1c:f8:53:02:e3:f9:45: 6a:e9:b3:cc:20:c7:c2:c6:4b:52:19:93:a8:1a:9c: a1:62:88:56:70:e8:98:33:8b:b8:38:90:ea:7d:40: 13:d0:40:50:33:d9:9a:c5:5c:b2:67:d1:09:d4:bc: f7:32:17:a8:15:bf:20:95:fd:56:57:a9:0f:15:27: 0a:fc:bd:d4:f2:54:e0:0f:b4:38:ad:0c:9b:4d:55: c4:13:30:a6:f6:1a:da:ac:f7:ea:68:46:39:14:c2: 1d:04:26:36:31:bc:96:e3:97:b3:fc:fd:35:fc:a5: cc:49:0c:bd:a4:e0:c4:56:a0:86:c7:f0:85:ba:30: 89:4c:b8:3f:7e:4d:51:ed:48:d7:8f:10:7f:b4:83: 75:e2:d2:13:5e:9a:46:82:fd:55:f5:46:0d:7f:f9: 2b:ab:36:92:17:27:83:8e:b1:d9:35:95:d5:e5:32: 74:5b:4e:0d:be:fc:42:43:c5:7e:e9:f8:aa:5d:34: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B5:A1:E7:A3:0C:13:29:0A:4C:4E:2B:AD:5F:3B:1B:D5:60:92:2F X509v3 Authority Key Identifier: keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/GLWh56MMEykKTE4rrV87G9Vgki8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.109.192.0/21 185.114.212.0/22 IPv6: 2a06:71c0::/29 Signature Algorithm: sha256WithRSAEncryption 53:0b:ea:5a:06:50:3a:6b:0a:f8:ac:ea:b6:5a:e2:32:ba:24: 5e:1f:21:ba:9b:1d:86:61:a4:0a:aa:60:48:2e:bc:6f:02:83: cd:f0:0b:50:36:db:6d:78:71:7d:b6:68:ed:23:89:89:04:78: e4:25:59:60:b0:2e:1b:f2:2e:d6:ec:58:fe:d7:80:44:b3:86: 24:9b:7e:4d:91:06:9a:88:17:f1:82:29:e2:36:75:99:a4:fa: 92:e8:c2:e8:31:5a:7d:40:ab:8f:61:fd:70:ae:b4:da:45:a8: 58:90:93:56:3e:84:7e:8e:08:e0:33:c1:20:57:b9:0a:91:45: f4:fe:b9:93:5d:43:c4:63:1c:9a:9f:74:0b:90:ae:05:12:d5: e8:0d:b4:32:d4:c4:ed:aa:b0:7c:06:ff:82:ac:9f:5d:c0:56: 62:9b:21:be:b8:22:48:4a:95:15:87:9a:41:63:4f:11:1d:b9: d0:6d:c2:38:07:aa:57:c2:f8:6d:71:53:98:7b:1c:e1:aa:50: c0:26:77:23:11:31:12:27:01:dc:b5:76:ff:6b:2d:30:05:60: 79:8d:23:2b:8f:84:b2:cb:16:91:57:0a:4b:7e:bc:09:31:4b: 9d:e5:79:ad:e7:3e:c6:64:71:1b:71:80:7f:2d:09:ef:7e:ec: e7:86:d9:1c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WQNePrdNKrLYDNDpE01jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk NDU0ZWYwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGI1YTFlN2EzMGMxMzI5MGE0YzRlMmJhZDVmM2IxYmQ1NjA5MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyI0Ehyra+YhnhQh+G3CSUdRkWBU 3gyUhp/mZjC4yHDqrOQlbmsijFKbS90TYr/TaXOfp/dwb879GA4hpXyN91HUxBz4 UwLj+UVq6bPMIMfCxktSGZOoGpyhYohWcOiYM4u4OJDqfUAT0EBQM9maxVyyZ9EJ 1Lz3MheoFb8glf1WV6kPFScK/L3U8lTgD7Q4rQybTVXEEzCm9hrarPfqaEY5FMId BCY2MbyW45ez/P01/KXMSQy9pODEVqCGx/CFujCJTLg/fk1R7UjXjxB/tIN14tIT XppGgv1V9UYNf/krqzaSFyeDjrHZNZXV5TJ0W04NvvxCQ8V+6fiqXTTaxwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBi1oeejDBMpCkxOK61fOxvVYJIvMB8GA1UdIwQY MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt N2E3MmUyNmM4OTE4LzEvR0xXaDU2TU1FeWtLVEU0cnJWODdHOVZna2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4 LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbW3AAwQC uXLUMA0EAgACMAcDBQMqBnHAMA0GCSqGSIb3DQEBCwUAA4IBAQBTC+paBlA6awr4 rOq2WuIyuiReHyG6mx2GYaQKqmBILrxvAoPN8AtQNttteHF9tmjtI4mJBHjkJVlg sC4b8i7W7Fj+14BEs4Ykm35NkQaaiBfxginiNnWZpPqS6MLoMVp9QKuPYf1wrrTa RahYkJNWPoR+jgjgM8EgV7kKkUX0/rmTXUPEYxyan3QLkK4FEtXoDbQy1MTtqrB8 Bv+CrJ9dwFZimyG+uCJISpUVh5pBY08RHbnQbcI4B6pXwvhtcVOYexzhqlDAJncj ETESJwHctXb/ay0wBWB5jSMrj4SyyxaRVwpLfrwJMUud5Xmt5z7GZHEbcYB/LQnv fuznhtkc -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:15 2026 by rpki-client