This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/GLrMDn_b0I1MejoPRWfg9LMBjjI.roa File: GLrMDn_b0I1MejoPRWfg9LMBjjI.roa (raw, json) Hash identifier: as4V3NC8zYiNgBHptnpjtVduVkflidyYfc83EQtz0Z8= Subject key identifier: 18:BA:CC:0E:7F:DB:D0:8D:4C:7A:3A:0F:45:67:E0:F4:B3:01:8E:32 Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1 Certificate serial: 019B7AC81299B98D217FF22B09ABA71FE27E Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/GLrMDn_b0I1MejoPRWfg9LMBjjI.roa Signing time: Thu 01 Jan 2026 18:18:10 +0000 ROA not before: Thu 01 Jan 2026 18:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212042 IP address blocks: 178.236.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:12:99:b9:8d:21:7f:f2:2b:09:ab:a7:1f:e2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1 Validity Not Before: Jan 1 18:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18bacc0e7fdbd08d4c7a3a0f4567e0f4b3018e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:00:01:df:40:4d:19:1f:6f:70:44:30:53: 66:d6:7d:ff:22:7f:5e:98:18:58:f7:9c:fb:3e:fe: 70:43:a4:bd:59:8c:e7:28:e1:ee:1e:bf:bf:67:76: be:41:2c:45:72:78:ed:a1:55:9a:55:bd:b8:f6:6f: 50:4c:56:0d:e5:b5:ea:8f:aa:8b:43:35:a4:7e:31: 66:50:02:77:3b:55:fa:3c:e8:c5:08:00:c7:57:e1: 43:ae:f8:f8:b4:39:67:5b:e9:2c:aa:46:0b:b8:e8: 22:30:4f:f1:b3:9e:c6:83:a9:aa:b7:dc:05:0e:13: a3:d9:a5:1c:f8:41:05:71:d2:27:a9:66:6b:ad:21: 1d:92:ff:ac:76:97:f5:f9:f0:ab:03:2e:47:9d:ba: ed:48:f6:51:ae:de:2a:b3:89:b4:a6:3d:bb:b6:0e: ed:3d:d0:4f:36:28:ae:da:54:eb:41:63:17:e1:f8: f3:b1:02:36:69:89:bb:34:c4:bd:78:06:e5:b2:21: 83:15:b9:cf:27:e8:23:48:18:db:3e:66:36:f5:33: 6f:06:ba:74:ac:d1:81:8e:8c:a5:70:68:8f:b0:aa: ca:97:91:6a:b0:9e:6a:b6:a6:68:1c:c2:3e:32:24: e4:f0:27:87:0a:f4:07:ab:55:a0:1d:10:6f:6d:1c: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BA:CC:0E:7F:DB:D0:8D:4C:7A:3A:0F:45:67:E0:F4:B3:01:8E:32 X509v3 Authority Key Identifier: keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/GLrMDn_b0I1MejoPRWfg9LMBjjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.236.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:74:38:81:9a:45:df:62:5a:3b:3d:1e:5f:61:c7:aa:62:0f: ea:e5:99:5d:0e:46:77:2d:a9:b3:51:67:66:f6:9f:17:fa:54: 92:00:78:f3:02:7f:fe:4a:33:ef:60:84:26:bc:38:d8:04:b5: eb:0c:00:7b:62:de:11:c8:7f:75:9a:0a:90:0d:a0:56:e9:e8: bc:9f:fa:3f:b1:cf:6e:11:2f:a0:63:37:44:23:06:ea:22:d2: df:ff:ec:c4:fd:15:c1:99:43:03:c7:6d:bb:7a:78:af:33:bd: 14:5c:58:1a:64:d5:83:1e:2b:49:67:cc:2e:89:8b:bb:6e:ab: 2c:d8:9c:f2:fb:7b:83:0c:39:cd:55:c9:b7:98:f6:cf:01:86: af:b8:41:58:4d:97:f8:a3:23:7b:67:22:a0:d7:6b:ba:06:d1: 4a:64:33:28:42:a1:9b:39:8f:4c:2e:80:32:d3:43:a7:89:9b: c9:de:97:1e:b6:75:eb:35:ed:b6:38:e2:b2:63:7c:a4:25:41: 86:50:5c:8e:0a:90:25:48:db:cf:2c:58:c9:61:aa:54:39:07: 99:3a:48:ae:81:c4:62:43:df:de:13:fa:00:b7:2c:4a:aa:fc: da:44:4e:75:ea:52:e3:c2:35:fd:e7:dc:f0:bf:cf:44:27:a1: 2a:e9:2c:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBKZuY0hf/IrCaunH+J+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh ODViYTEwHhcNMjYwMTAxMTgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGJhY2MwZTdmZGJkMDhkNGM3YTNhMGY0NTY3ZTBmNGIzMDE4ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnkAAd9ATRkfb3BEMFNm1n3/In9e mBhY95z7Pv5wQ6S9WYznKOHuHr+/Z3a+QSxFcnjtoVWaVb249m9QTFYN5bXqj6qL QzWkfjFmUAJ3O1X6POjFCADHV+FDrvj4tDlnW+ksqkYLuOgiME/xs57Gg6mqt9wF DhOj2aUc+EEFcdInqWZrrSEdkv+sdpf1+fCrAy5HnbrtSPZRrt4qs4m0pj27tg7t PdBPNiiu2lTrQWMX4fjzsQI2aYm7NMS9eAblsiGDFbnPJ+gjSBjbPmY29TNvBrp0 rNGBjoylcGiPsKrKl5FqsJ5qtqZoHMI+MiTk8CeHCvQHq1WgHRBvbRyWjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBi6zA5/29CNTHo6D0Vn4PSzAY4yMB8GA1UdIwQY MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt NDdkODJhNDFhOGYzLzEvR0xyTURuX2IwSTFNZWpvUFJXZmc5TE1CampJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuzsMA0G CSqGSIb3DQEBCwUAA4IBAQCOdDiBmkXfYlo7PR5fYceqYg/q5ZldDkZ3LamzUWdm 9p8X+lSSAHjzAn/+SjPvYIQmvDjYBLXrDAB7Yt4RyH91mgqQDaBW6ei8n/o/sc9u ES+gYzdEIwbqItLf/+zE/RXBmUMDx227enivM70UXFgaZNWDHitJZ8wuiYu7bqss 2Jzy+3uDDDnNVcm3mPbPAYavuEFYTZf4oyN7ZyKg12u6BtFKZDMoQqGbOY9MLoAy 00OniZvJ3pcetnXrNe22OOKyY3ykJUGGUFyOCpAlSNvPLFjJYapUOQeZOkiugcRi Q9/eE/oAtyxKqvzaRE516lLjwjX959zwv89EJ6Eq6SwQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:52 2026 by rpki-client