This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa File: gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa (raw, json) Hash identifier: XbNVPIMyzYNGS/m6xHDz4/G85Dxs4nrc/Ehwb2bG/rs= Subject key identifier: 82:5D:A7:9B:03:B8:BF:40:9E:64:B8:C7:9B:74:83:44:8C:A8:B3:C4 Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Certificate serial: 019B7F83DA14126F00B46E0EF2B53A07954F Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa Signing time: Fri 02 Jan 2026 16:21:46 +0000 ROA not before: Fri 02 Jan 2026 16:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 192.33.88.0/24 maxlen: 24 2001:67c:2e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:da:14:12:6f:00:b4:6e:0e:f2:b5:3a:07:95:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=825da79b03b8bf409e64b8c79b7483448ca8b3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:cd:a3:10:47:7b:38:33:5b:07:87:db:ed: 01:3a:45:82:45:f0:6d:2f:6c:10:13:0d:dd:59:7b: 43:bf:a5:d8:18:bd:a2:12:ad:64:96:08:01:02:1f: 87:ad:f7:cd:27:fa:5b:3c:aa:47:be:03:4f:27:0f: 6d:ff:d1:6c:33:d7:fe:5f:20:8d:29:60:21:b1:e8: 71:02:a5:69:f9:4f:f5:d1:dc:ab:f4:cd:60:18:4d: 89:5a:d6:8c:69:5b:b5:ae:df:7e:e5:6d:54:c4:9b: 0e:34:af:6c:16:8d:8b:3e:32:ea:5e:63:cf:37:bc: f2:43:1c:7a:d1:25:ae:ad:79:1b:f3:45:b1:56:4e: 44:60:14:78:b9:6b:24:71:b6:48:8a:84:05:9c:0d: 73:ae:09:cf:3a:a1:46:0f:f2:90:fb:86:12:80:a7: d3:9f:77:34:44:8a:33:1e:09:ee:a5:54:74:31:ab: 14:26:42:89:e9:df:83:d8:b6:7a:bf:f8:32:4a:c1: df:c3:c3:48:28:3a:3f:17:20:b6:08:ce:26:b6:15: 36:49:22:38:08:af:aa:f8:18:e7:77:83:f3:1d:34: 75:39:6a:9b:10:af:d9:7d:27:55:d8:7b:62:51:96: 6c:e2:ec:cd:92:3f:1b:4d:e0:bc:df:67:09:02:20: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5D:A7:9B:03:B8:BF:40:9E:64:B8:C7:9B:74:83:44:8C:A8:B3:C4 X509v3 Authority Key Identifier: keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.33.88.0/24 IPv6: 2001:67c:2e40::/48 Signature Algorithm: sha256WithRSAEncryption 92:bf:c0:6f:47:ff:08:51:05:83:22:24:8c:27:c6:99:df:d2: 89:9b:5e:33:ce:87:77:04:b1:42:a4:dd:c7:9f:23:de:ae:54: 2d:5e:50:f1:74:fe:b3:49:88:bb:2a:88:06:68:77:82:81:1c: d8:8b:f4:0c:65:3d:6e:47:be:5d:52:ee:c1:5e:c6:84:e6:2c: f2:2a:49:f9:9a:8a:81:f1:8f:f5:54:68:02:a2:6a:ce:fa:0f: ad:09:ae:99:38:24:d7:b2:34:55:43:22:3d:2b:15:a6:87:e1: 29:ab:34:9b:f4:89:70:0f:a9:36:40:1a:ec:47:bd:ca:7e:83: a4:0e:a2:26:d6:f2:aa:1a:2c:4e:b1:8c:8e:b9:ce:49:93:0e: b9:53:dd:e0:7c:07:30:31:05:82:da:bb:b3:5c:51:5a:6e:a1: 04:92:10:5b:f3:ef:ae:40:bb:50:25:66:fc:e5:6e:4b:c0:52: 69:3f:cd:0e:9a:94:31:90:29:4f:16:ad:b1:8b:d8:e6:1d:b6: 3e:79:60:64:cf:14:5d:e0:14:48:06:e9:34:b3:ec:ca:db:9b: dd:c9:38:51:80:89:8d:f7:6c:7e:06:3b:a9:28:7d:57:97:a9: 55:e1:93:ef:22:2f:fd:76:2e:6a:ce:37:63:27:40:16:4e:ff: 3a:ea:5c:2e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g9oUEm8AtG4O8rU6B5VPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx ZTI5YzQwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjVkYTc5YjAzYjhiZjQwOWU2NGI4Yzc5Yjc0ODM0NDhjYThiM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDDNoxBHezgzWweH2+0BOkWCRfBt L2wQEw3dWXtDv6XYGL2iEq1klggBAh+HrffNJ/pbPKpHvgNPJw9t/9FsM9f+XyCN KWAhsehxAqVp+U/10dyr9M1gGE2JWtaMaVu1rt9+5W1UxJsONK9sFo2LPjLqXmPP N7zyQxx60SWurXkb80WxVk5EYBR4uWskcbZIioQFnA1zrgnPOqFGD/KQ+4YSgKfT n3c0RIozHgnupVR0MasUJkKJ6d+D2LZ6v/gySsHfw8NIKDo/FyC2CM4mthU2SSI4 CK+q+Bjnd4PzHTR1OWqbEK/ZfSdV2HtiUZZs4uzNkj8bTeC832cJAiDmIwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIJdp5sDuL9AnmS4x5t0g0SMqLPEMB8GA1UdIwQY MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt Mzg2YzFmOGIwNjQwLzEvZ2wybm13TzR2MENlWkxqSG0zU0RSSXlvczhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCFYMA8E AgACMAkDBwAgAQZ8LkAwDQYJKoZIhvcNAQELBQADggEBAJK/wG9H/whRBYMiJIwn xpnf0ombXjPOh3cEsUKk3cefI96uVC1eUPF0/rNJiLsqiAZod4KBHNiL9AxlPW5H vl1S7sFexoTmLPIqSfmaioHxj/VUaAKias76D60Jrpk4JNeyNFVDIj0rFaaH4Smr NJv0iXAPqTZAGuxHvcp+g6QOoibW8qoaLE6xjI65zkmTDrlT3eB8BzAxBYLau7Nc UVpuoQSSEFvz765Au1AlZvzlbkvAUmk/zQ6alDGQKU8WrbGL2OYdtj55YGTPFF3g FEgG6TSz7Mrbm93JOFGAiY33bH4GO6kofVeXqVXhk+8iL/12LmrON2MnQBZO/zrq XC4= -----END CERTIFICATE-----Generated at Sat Jan 17 08:24:51 2026 by rpki-client