This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Gll7cy-kn16EuQChyjd5kxJVar8.roa File: Gll7cy-kn16EuQChyjd5kxJVar8.roa (raw, json) Hash identifier: rAFOy1sEoOQYL6xEmxiSqkBDTDW6pzDgHlfqHYvviWQ= Subject key identifier: 1A:59:7B:73:2F:A4:9F:5E:84:B9:00:A1:CA:37:79:93:12:55:6A:BF Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a Certificate serial: 019B7B3548327C18F5FFE3BFA58C1058A31B Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Gll7cy-kn16EuQChyjd5kxJVar8.roa Signing time: Thu 01 Jan 2026 20:17:28 +0000 ROA not before: Thu 01 Jan 2026 20:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201513 IP address blocks: 2a00:5da0:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:48:32:7c:18:f5:ff:e3:bf:a5:8c:10:58:a3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a597b732fa49f5e84b900a1ca37799312556abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:9e:e1:dd:69:23:2c:bb:bd:ed:e8:49:3f: cd:78:6e:39:b1:3b:f0:92:4c:15:27:73:90:f3:60: b2:60:39:04:d3:fd:af:bf:8b:56:de:a7:92:a3:fe: 09:cd:e6:a8:5f:81:9e:12:0d:20:ac:bf:d0:75:ba: 6c:65:a0:7f:1f:a5:39:8c:ab:9c:d4:0f:5c:4b:74: e3:38:3f:1c:3b:75:a3:19:f4:be:ef:ec:02:49:94: 0b:35:7f:15:b9:7d:64:0c:31:8a:c4:db:cb:8a:9c: 9d:24:68:1a:03:18:8b:36:bf:cc:89:76:2f:e3:6a: 58:9f:bc:65:b2:f3:7c:3a:5f:1e:8e:c5:c3:b8:dc: 90:38:73:de:61:53:fd:7f:28:04:9c:94:47:f5:ac: 0e:b3:9d:20:c5:17:90:1e:26:7c:61:21:84:97:85: d1:e2:7c:9d:84:3d:30:e7:b8:9f:f3:47:c3:25:87: 3f:b9:90:60:f9:9b:e7:2f:fa:1f:01:ac:32:7f:9c: b3:97:47:12:be:43:54:e2:7a:09:8f:2b:e5:81:a3: 83:77:88:3e:a0:92:2f:fe:d5:45:04:fb:91:32:e3: 66:5c:7b:c3:af:51:cc:f0:af:27:f8:f3:fa:e2:52: ee:d4:dc:a0:db:13:74:9a:ab:08:7c:65:fc:41:a0: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:7B:73:2F:A4:9F:5E:84:B9:00:A1:CA:37:79:93:12:55:6A:BF X509v3 Authority Key Identifier: keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Gll7cy-kn16EuQChyjd5kxJVar8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:5da0:8010::/48 Signature Algorithm: sha256WithRSAEncryption bd:68:55:a6:dc:b2:3c:a6:5b:47:58:26:21:8c:32:4e:7e:36: 89:56:71:65:50:bb:f3:28:ba:99:9d:a2:05:36:a2:3b:76:11: 75:08:d8:a3:02:67:8e:80:c6:f0:b8:c2:64:b0:d1:a3:2c:8c: 27:48:6c:6d:7e:8b:e3:c3:c8:65:db:fd:c2:5c:c8:08:db:d1: 06:b5:ba:ab:aa:2b:45:d1:6b:ed:62:ae:f6:69:25:23:36:f1: ff:ea:80:4a:8c:92:d4:0d:59:2f:c2:14:41:86:08:68:94:e1: 2d:93:c7:45:6f:83:03:de:2b:2f:33:03:07:f8:b7:ab:aa:25: c8:3f:67:38:1b:c9:39:99:9c:af:cc:42:3c:da:9d:e4:3d:c8: 1e:f1:0b:ee:86:16:37:aa:48:2b:93:46:d2:ab:47:f1:2b:93: 2e:3b:10:41:ee:be:a6:94:7e:2a:38:76:ee:68:47:d0:df:eb: 62:22:1a:b9:16:b2:bc:23:90:ee:22:d3:19:3c:de:55:29:0a: 11:49:7f:a4:b8:ad:a3:ea:87:ab:4c:9f:64:02:ec:ec:c5:89: 7f:3b:53:05:3d:82:38:23:00:97:34:66:1f:aa:d5:cf:81:10: 72:be:94:1b:83:73:65:01:c6:5a:e7:0e:41:56:5e:85:b9:da: 0c:d1:44:2a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NUgyfBj1/+O/pYwQWKMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm NTExOWEwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTU5N2I3MzJmYTQ5ZjVlODRiOTAwYTFjYTM3Nzk5MzEyNTU2YWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonqe4d1pIyy7ve3oST/NeG45sTvw kkwVJ3OQ82CyYDkE0/2vv4tW3qeSo/4JzeaoX4GeEg0grL/QdbpsZaB/H6U5jKuc 1A9cS3TjOD8cO3WjGfS+7+wCSZQLNX8VuX1kDDGKxNvLipydJGgaAxiLNr/MiXYv 42pYn7xlsvN8Ol8ejsXDuNyQOHPeYVP9fygEnJRH9awOs50gxReQHiZ8YSGEl4XR 4nydhD0w57if80fDJYc/uZBg+ZvnL/ofAawyf5yzl0cSvkNU4noJjyvlgaODd4g+ oJIv/tVFBPuRMuNmXHvDr1HM8K8n+PP64lLu1Nyg2xN0mqsIfGX8QaClLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBpZe3MvpJ9ehLkAoco3eZMSVWq/MB8GA1UdIwQY MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt ZjkxYmI1MTc5MjE3LzEvR2xsN2N5LWtuMTZFdVFDaHlqZDVreEpWYXI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3 LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgBdoIAQ MA0GCSqGSIb3DQEBCwUAA4IBAQC9aFWm3LI8pltHWCYhjDJOfjaJVnFlULvzKLqZ naIFNqI7dhF1CNijAmeOgMbwuMJksNGjLIwnSGxtfovjw8hl2/3CXMgI29EGtbqr qitF0WvtYq72aSUjNvH/6oBKjJLUDVkvwhRBhgholOEtk8dFb4MD3isvMwMH+Ler qiXIP2c4G8k5mZyvzEI82p3kPcge8QvuhhY3qkgrk0bSq0fxK5MuOxBB7r6mlH4q OHbuaEfQ3+tiIhq5FrK8I5DuItMZPN5VKQoRSX+kuK2j6oerTJ9kAuzsxYl/O1MF PYI4IwCXNGYfqtXPgRByvpQbg3NlAcZa5w5BVl6FudoM0UQq -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:34 2026 by rpki-client