This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/gLMBJkPbwcb-wlbRSTpyVXmPT60.roa File: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (raw, json) Hash identifier: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs= Subject key identifier: 80:B3:01:26:43:DB:C1:C6:FE:C2:56:D1:49:3A:72:55:79:8F:4F:AD Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57 Certificate serial: 019B7F80F8CB886BB7CA7E662CF35DA0FABC Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/gLMBJkPbwcb-wlbRSTpyVXmPT60.roa Signing time: Fri 02 Jan 2026 16:18:37 +0000 ROA not before: Fri 02 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 158.146.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:f8:cb:88:6b:b7:ca:7e:66:2c:f3:5d:a0:fa:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57 Validity Not Before: Jan 2 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80b3012643dbc1c6fec256d1493a7255798f4fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:27:68:ac:79:33:9f:c9:c0:ea:7f:48:51: 71:67:e7:a4:17:d8:11:f7:e4:df:7b:ed:58:71:93: c4:d3:b3:6c:c3:9a:bf:f1:8b:a8:a4:dd:b7:b9:8b: 05:f2:63:e8:b0:2e:1b:32:93:b3:d3:39:fd:2f:4a: 45:e3:27:7f:e0:61:89:97:b4:b7:fc:37:95:e3:1e: 15:71:c6:3a:6e:0f:3b:17:a6:38:e5:54:49:db:3d: 6e:18:0b:d0:16:d6:d9:d9:e8:97:a2:ce:cb:f8:e3: ec:99:25:59:d3:13:c9:7f:be:0e:6b:2c:0c:c5:1a: ed:52:1c:8e:be:fa:39:a9:0a:61:e8:3a:b2:51:63: 5b:a8:5b:19:a7:f7:91:b5:94:fa:d3:4a:7b:8d:cd: 61:6a:5d:b2:59:9b:dc:25:e5:6d:d3:34:cc:51:07: 79:b3:ab:3e:8f:17:90:5c:10:f2:9e:d9:0e:6b:95: d8:23:4d:dc:1e:91:b9:a1:41:0f:06:d8:34:c3:74: 4e:c3:b2:c9:92:6f:45:dc:8e:a1:c2:c3:07:fc:5c: f9:47:98:59:2c:7d:40:89:4e:2e:4d:5e:f8:6b:d4: a2:77:3b:51:f2:b6:e5:f9:ad:4a:91:01:26:2f:e0: 0a:b0:2d:f4:c7:ed:9c:22:58:b1:72:41:5a:88:83: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B3:01:26:43:DB:C1:C6:FE:C2:56:D1:49:3A:72:55:79:8F:4F:AD X509v3 Authority Key Identifier: keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/gLMBJkPbwcb-wlbRSTpyVXmPT60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.146.137.0/24 Signature Algorithm: sha256WithRSAEncryption 00:8b:6b:de:a6:8a:d8:e1:77:28:02:22:9c:a9:15:0c:e7:bf: 8e:20:a7:e3:2e:51:d1:7b:d2:a1:bc:8a:6a:68:99:cc:d5:d7: 5d:bf:ea:80:26:7e:af:2b:63:f2:2e:cf:8e:3d:c3:e5:43:b1: 4d:33:4a:da:c6:fe:36:e3:0e:04:b4:69:f7:92:89:5e:a0:0a: 9e:d6:ec:3b:0a:be:50:fd:11:2f:7b:0f:78:0e:80:ef:a6:a9: f7:12:44:23:4e:ab:a2:68:c3:46:16:c1:f6:15:0d:cf:92:1d: 47:a0:84:26:23:69:02:3e:ee:b0:64:51:cb:27:bc:e3:42:c3: 69:9e:15:86:e5:76:b6:40:d2:67:25:07:ed:f4:50:78:99:67: 3e:da:6c:6b:a8:4b:97:fa:3d:bd:1d:18:15:ae:17:3e:e9:9b: c9:8b:73:36:70:11:ef:d3:d3:3e:5c:80:af:62:d1:83:7f:2f: 6a:a9:4e:85:10:c4:11:3b:c7:ee:d3:14:7f:63:07:81:9c:8d: 2e:11:8d:8a:5a:a7:be:00:f2:b2:7e:0b:45:71:ab:b8:30:de: ab:d3:6d:ac:72:f2:c1:09:8e:e5:da:9c:4d:d6:50:88:4c:3b: fb:79:86:3d:8c:82:ab:09:1e:a2:4b:7b:2b:84:7e:ef:8a:6f: 24:dd:51:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gPjLiGu3yn5mLPNdoPq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk ZDNlNTcwHhcNMjYwMTAyMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGIzMDEyNjQzZGJjMWM2ZmVjMjU2ZDE0OTNhNzI1NTc5OGY0ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ScnaKx5M5/JwOp/SFFxZ+ekF9gR 9+Tfe+1YcZPE07Nsw5q/8YuopN23uYsF8mPosC4bMpOz0zn9L0pF4yd/4GGJl7S3 /DeV4x4VccY6bg87F6Y45VRJ2z1uGAvQFtbZ2eiXos7L+OPsmSVZ0xPJf74OaywM xRrtUhyOvvo5qQph6DqyUWNbqFsZp/eRtZT600p7jc1hal2yWZvcJeVt0zTMUQd5 s6s+jxeQXBDyntkOa5XYI03cHpG5oUEPBtg0w3ROw7LJkm9F3I6hwsMH/Fz5R5hZ LH1AiU4uTV74a9SidztR8rbl+a1KkQEmL+AKsC30x+2cIlixckFaiIPYHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICzASZD28HG/sJW0Uk6clV5j0+tMB8GA1UdIwQY MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt N2E5NGM3YzM2MjE3LzEvZ0xNQkprUGJ3Y2Itd2xiUlNUcHlWWG1QVDYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3 LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnpKJMA0G CSqGSIb3DQEBCwUAA4IBAQAAi2veporY4XcoAiKcqRUM57+OIKfjLlHRe9KhvIpq aJnM1dddv+qAJn6vK2PyLs+OPcPlQ7FNM0raxv424w4EtGn3koleoAqe1uw7Cr5Q /REvew94DoDvpqn3EkQjTquiaMNGFsH2FQ3Pkh1HoIQmI2kCPu6wZFHLJ7zjQsNp nhWG5Xa2QNJnJQft9FB4mWc+2mxrqEuX+j29HRgVrhc+6ZvJi3M2cBHv09M+XICv YtGDfy9qqU6FEMQRO8fu0xR/YweBnI0uEY2KWqe+APKyfgtFcau4MN6r022scvLB CY7l2pxN1lCITDv7eYY9jIKrCR6iS3srhH7vim8k3VHq -----END CERTIFICATE-----Generated at Sat Jan 17 02:55:30 2026 by rpki-client