This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GlXszewXglRlLrLqEbGp4ColNb0.roa File: GlXszewXglRlLrLqEbGp4ColNb0.roa (raw, json) Hash identifier: 99lHymrsUMFYXw9LqMZnVZg7UXpX+ed7wZL6Vagss9E= Subject key identifier: 1A:55:EC:CD:EC:17:82:54:65:2E:B2:EA:11:B1:A9:E0:2A:25:35:BD Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A93EA2A5709349BC15391F07A461 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GlXszewXglRlLrLqEbGp4ColNb0.roa Signing time: Fri 02 Jan 2026 14:20:19 +0000 ROA not before: Fri 02 Jan 2026 14:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20115 IP address blocks: 92.71.32.0/20 maxlen: 24 92.71.64.0/18 maxlen: 24 213.201.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a9:3e:a2:a5:70:93:49:bc:15:39:1f:07:a4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a55eccdec178254652eb2ea11b1a9e02a2535bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:d0:30:bb:ac:51:d6:41:89:b6:32:15:a0: 3c:ec:db:cb:e2:b8:12:28:e3:56:98:ff:e7:43:94: 30:81:f6:00:2e:98:61:a6:91:62:cf:13:75:28:b6: b4:3c:d1:25:7e:f5:0e:84:8d:2a:00:ac:01:e4:3f: f5:5f:3c:30:ed:71:38:87:24:e2:eb:f2:92:34:23: f2:1a:7e:d9:23:96:01:33:3d:ab:f9:af:f5:62:a7: fd:20:ca:87:12:f4:4a:98:5e:b9:5a:fb:5b:7c:d6: f9:ab:35:32:a0:4a:fe:5e:30:5c:a3:32:2e:ed:96: d5:e6:71:cc:57:95:35:d9:b4:2e:73:98:63:2a:a0: 5c:c8:89:fe:73:90:17:66:8b:d7:08:c2:47:45:ff: b9:ff:98:a3:1b:7a:c4:0b:82:ec:0f:a7:95:f5:f8: c4:0f:b8:7e:02:2c:de:6a:a0:e6:02:a7:b2:d3:b1: 87:72:2e:c7:7a:f3:fe:7d:bd:ba:ab:b5:01:46:06: 2a:9c:01:ab:20:82:a3:23:fa:6c:58:62:7a:0d:2e: bc:af:a6:43:6d:5f:bb:88:a8:f8:10:57:2d:04:db: 1e:dd:85:e6:ac:33:99:ac:50:67:d2:f2:cc:14:23: 02:5e:52:03:80:a4:44:c8:65:f2:ec:9f:09:34:01: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:55:EC:CD:EC:17:82:54:65:2E:B2:EA:11:B1:A9:E0:2A:25:35:BD X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GlXszewXglRlLrLqEbGp4ColNb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.71.32.0/20 92.71.64.0/18 213.201.240.0/20 Signature Algorithm: sha256WithRSAEncryption a5:8d:b0:23:db:61:9f:df:4a:dc:8a:af:c5:a9:09:7d:a9:8b: 02:3e:dc:13:cc:0f:e1:04:27:de:e8:ec:86:07:32:11:64:30: b7:27:f8:92:c2:2b:0c:6b:1b:26:ee:ec:33:bd:30:f4:0c:d3: da:b9:9c:60:e7:61:8a:6c:78:1d:3e:84:af:8d:a9:58:d9:c0: 85:e4:12:f9:0b:1e:d7:98:89:2a:f0:9e:5e:bf:40:6b:ce:0b: 4b:af:24:90:df:b3:eb:cc:44:27:9a:84:57:0d:f8:87:27:24: c8:bb:0f:99:06:fa:b1:ad:4c:b2:30:88:7e:7d:2b:18:1a:9c: cb:43:dc:64:04:6c:43:5c:50:7d:e3:24:ba:07:cc:7a:06:ed: 84:37:a8:d8:44:a9:20:d0:d4:59:84:86:2f:50:f9:f2:64:dd: df:a6:f2:a5:ee:d7:1a:ca:dc:26:f4:97:50:8b:dd:9f:d4:80: 3c:81:fd:5c:1f:d7:51:73:64:c4:f2:47:a6:9d:48:82:f8:16: 94:f8:f8:b3:58:f8:09:16:3e:37:16:ad:19:71:d4:b1:98:12: 54:a7:c2:3e:01:ee:d8:32:07:4a:f5:6e:f9:0d:68:11:71:45: 34:e2:eb:53:b8:72:22:c2:9d:13:a0:b0:25:48:79:27:03:f2: 2d:0f:a2:c9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FKk+oqVwk0m8FTkfB6RhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTU1ZWNjZGVjMTc4MjU0NjUyZWIyZWExMWIxYTllMDJhMjUzNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXLQMLusUdZBibYyFaA87NvL4rgS KONWmP/nQ5QwgfYALphhppFizxN1KLa0PNElfvUOhI0qAKwB5D/1Xzww7XE4hyTi 6/KSNCPyGn7ZI5YBMz2r+a/1Yqf9IMqHEvRKmF65WvtbfNb5qzUyoEr+XjBcozIu 7ZbV5nHMV5U12bQuc5hjKqBcyIn+c5AXZovXCMJHRf+5/5ijG3rEC4LsD6eV9fjE D7h+AizeaqDmAqey07GHci7HevP+fb26q7UBRgYqnAGrIIKjI/psWGJ6DS68r6ZD bV+7iKj4EFctBNse3YXmrDOZrFBn0vLMFCMCXlIDgKREyGXy7J8JNAGPvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBpV7M3sF4JUZS6y6hGxqeAqJTW9MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvR2xYc3pld1hnbFJsTHJMcUViR3A0Q29sTmIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEXEcgAwQG XEdAAwQE1cnwMA0GCSqGSIb3DQEBCwUAA4IBAQCljbAj22Gf30rciq/FqQl9qYsC PtwTzA/hBCfe6OyGBzIRZDC3J/iSwisMaxsm7uwzvTD0DNPauZxg52GKbHgdPoSv jalY2cCF5BL5Cx7XmIkq8J5ev0BrzgtLrySQ37PrzEQnmoRXDfiHJyTIuw+ZBvqx rUyyMIh+fSsYGpzLQ9xkBGxDXFB94yS6B8x6Bu2EN6jYRKkg0NRZhIYvUPnyZN3f pvKl7tcaytwm9JdQi92f1IA8gf1cH9dRc2TE8kemnUiC+BaU+PizWPgJFj43Fq0Z cdSxmBJUp8I+Ae7YMgdK9W75DWgRcUU04utTuHIiwp0ToLAlSHknA/ItD6LJ -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:17 2026 by rpki-client