This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Gl-bCqsM_3Tvr5OvvUi6metmyLs.roa File: Gl-bCqsM_3Tvr5OvvUi6metmyLs.roa (raw, json) Hash identifier: S1qNP0oysZbyywXcWCr7CvISX/sgIt0XUYcgRYIXl1I= Subject key identifier: 1A:5F:9B:0A:AB:0C:FF:74:EF:AF:93:AF:BD:48:BA:99:EB:66:C8:BB Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DE664A31C1E54E3A41DB8730E2C7 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Gl-bCqsM_3Tvr5OvvUi6metmyLs.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 159.148.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:de:66:4a:31:c1:e5:4e:3a:41:db:87:30:e2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a5f9b0aab0cff74efaf93afbd48ba99eb66c8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:43:0d:bb:d6:9b:58:9b:f2:ec:f1:f7:9d: c5:ba:f3:6e:b4:f7:c2:e2:4a:77:d3:74:17:44:b5: 55:25:10:aa:8b:05:1d:bc:47:5f:83:0f:37:28:23: 55:89:c5:42:ce:fc:f0:f2:b9:c0:3d:f4:b9:f4:1d: e7:5d:49:f8:70:8b:38:ce:a7:10:1e:5e:64:7a:9b: 1a:6f:31:c8:21:91:ae:45:9d:16:92:91:24:12:5f: a3:88:b2:7b:7e:01:7a:58:87:0a:75:f9:2a:89:d3: 62:75:eb:25:15:26:60:d5:f8:e5:87:28:fe:93:33: e4:d4:1a:3c:9d:1a:b2:98:8d:0e:74:46:b3:0a:2d: da:3c:c1:62:92:56:26:9f:04:2b:c7:66:07:18:9b: 76:7d:b7:b4:12:23:7d:20:9b:e2:cf:ae:3f:23:e9: 74:58:e1:0c:f2:cf:4a:fe:55:c1:d5:da:11:b0:85: 4c:1a:db:3c:72:5d:2c:77:0e:f2:b3:46:d1:29:65: 58:93:f3:f7:7a:b7:6e:db:83:5a:f2:fe:c6:11:c8: 5c:8d:1d:18:49:d3:c6:f6:e9:ac:08:65:13:a4:62: f2:28:27:1d:a9:b8:02:41:79:bc:e2:4e:15:0b:57: 89:c2:fc:30:1c:8f:57:1f:ed:fe:14:7b:42:25:a8: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5F:9B:0A:AB:0C:FF:74:EF:AF:93:AF:BD:48:BA:99:EB:66:C8:BB X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Gl-bCqsM_3Tvr5OvvUi6metmyLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.58.0/24 Signature Algorithm: sha256WithRSAEncryption 45:57:5b:c1:92:c9:21:a4:14:9e:c9:7a:88:fa:d0:a4:23:54: 06:52:61:02:fb:d9:4b:ea:31:ce:e8:14:ab:9d:27:ef:58:0d: 17:05:14:9d:00:99:cc:5e:a4:f3:be:a1:47:cb:65:19:eb:3e: af:1b:a5:53:71:29:d1:48:cd:87:4f:9c:44:73:87:6f:70:c2: 98:27:e6:e1:fc:76:fb:3b:70:2f:7f:6d:47:12:57:16:05:05: 92:cd:14:7c:e5:b8:80:87:99:49:66:86:6a:37:58:be:97:6a: 8b:c1:b6:6f:24:25:5e:f8:21:7c:68:d2:c7:20:30:69:3e:82: ed:33:bf:bb:c3:0a:0d:54:b0:86:5f:a8:00:e3:a8:fc:ba:60: 4e:aa:4b:de:3a:ab:03:8f:93:03:b0:b4:67:a6:7c:18:48:c4: f3:f5:56:b8:af:2f:c5:de:ef:46:cf:87:e0:b4:9e:70:34:a4: ac:b7:da:67:5b:43:73:9d:8a:28:7b:e7:91:fc:f9:97:f9:c0: f1:08:64:9f:93:45:9c:e0:3b:f1:2e:44:48:f3:9c:11:40:5c: 5f:db:9a:53:af:35:16:8f:b6:29:44:c8:55:c5:61:e4:eb:85: 7a:ab:58:00:cb:89:d4:04:f2:8b:c5:70:75:fa:03:f1:02:39: 06:d2:5e:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x95mSjHB5U46QduHMOLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTVmOWIwYWFiMGNmZjc0ZWZhZjkzYWZiZDQ4YmE5OWViNjZjOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJDDbvWm1ib8uzx953FuvNutPfC 4kp303QXRLVVJRCqiwUdvEdfgw83KCNVicVCzvzw8rnAPfS59B3nXUn4cIs4zqcQ Hl5kepsabzHIIZGuRZ0WkpEkEl+jiLJ7fgF6WIcKdfkqidNideslFSZg1fjlhyj+ kzPk1Bo8nRqymI0OdEazCi3aPMFiklYmnwQrx2YHGJt2fbe0EiN9IJviz64/I+l0 WOEM8s9K/lXB1doRsIVMGts8cl0sdw7ys0bRKWVYk/P3erdu24Na8v7GEchcjR0Y SdPG9umsCGUTpGLyKCcdqbgCQXm84k4VC1eJwvwwHI9XH+3+FHtCJajIuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpfmwqrDP9076+Tr71IupnrZsi7MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvR2wtYkNxc01fM1R2cjVPdnZVaTZtZXRteUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5Q6MA0G CSqGSIb3DQEBCwUAA4IBAQBFV1vBkskhpBSeyXqI+tCkI1QGUmEC+9lL6jHO6BSr nSfvWA0XBRSdAJnMXqTzvqFHy2UZ6z6vG6VTcSnRSM2HT5xEc4dvcMKYJ+bh/Hb7 O3Avf21HElcWBQWSzRR85biAh5lJZoZqN1i+l2qLwbZvJCVe+CF8aNLHIDBpPoLt M7+7wwoNVLCGX6gA46j8umBOqkveOqsDj5MDsLRnpnwYSMTz9Va4ry/F3u9Gz4fg tJ5wNKSst9pnW0NznYooe+eR/PmX+cDxCGSfk0Wc4DvxLkRI85wRQFxf25pTrzUW j7YpRMhVxWHk64V6q1gAy4nUBPKLxXB1+gPxAjkG0l4L -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:59 2026 by rpki-client