This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/gxcl9XCHDE4fGimi4jiKM9IDg8o.roa File: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (raw, json) Hash identifier: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg= Subject key identifier: 83:17:25:F5:70:87:0C:4E:1F:1A:29:A2:E2:38:8A:33:D2:03:83:CA Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019B7DC981705480D13139A5BBB1B8C4FE8A Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/gxcl9XCHDE4fGimi4jiKM9IDg8o.roa Signing time: Fri 02 Jan 2026 08:18:36 +0000 ROA not before: Fri 02 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 158.46.144.0/24 maxlen: 24 158.46.145.0/24 maxlen: 24 158.46.146.0/24 maxlen: 24 158.46.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:81:70:54:80:d1:31:39:a5:bb:b1:b8:c4:fe:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jan 2 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=831725f570870c4e1f1a29a2e2388a33d20383ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:31:74:84:6d:2d:9d:62:f8:21:63:58:c3: 9f:74:c7:c8:50:fb:70:a9:58:ce:7a:59:4d:a8:02: 0c:a8:10:22:8d:04:d4:60:be:2e:00:28:eb:ef:bb: cc:b7:0e:8f:f1:5a:1f:69:d2:a4:48:28:16:db:73: 29:49:e3:e5:88:5c:6d:07:33:bf:36:90:38:10:e9: 2d:67:bf:e9:50:ac:b3:7e:9e:46:65:bd:06:6f:69: a9:3c:80:f9:3d:9b:f7:9c:b9:a9:f3:33:71:77:6f: 98:48:eb:19:cc:bb:c3:f8:3e:9e:9b:10:e9:ae:60: 58:ed:40:5b:55:f4:ff:cc:77:cb:b8:d4:a1:12:d4: 7b:d1:b5:69:b4:e8:11:f2:e5:f4:87:90:62:eb:71: e4:ea:ba:66:16:42:83:6a:7d:0b:c2:68:e2:8c:37: bd:79:68:7b:2f:a7:dd:55:54:05:8d:d3:5c:32:1b: fe:b6:68:f5:bc:0c:38:56:95:b0:4e:31:bf:42:ca: a2:36:0f:37:9a:e7:a3:ee:a1:7d:39:6d:36:40:48: f1:48:2f:c9:4f:fe:70:bd:26:1f:a5:df:64:05:52: 11:6b:75:0d:6f:8f:7b:9a:78:77:4d:50:5d:70:0c: 04:c6:9a:37:3d:46:9f:c1:7d:81:27:94:af:57:f6: 70:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:17:25:F5:70:87:0C:4E:1F:1A:29:A2:E2:38:8A:33:D2:03:83:CA X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/gxcl9XCHDE4fGimi4jiKM9IDg8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.46.144.0/22 Signature Algorithm: sha256WithRSAEncryption b2:e9:d5:2c:58:3d:fc:8f:1d:8d:d5:42:37:fe:f3:35:52:b9: db:c5:f5:c0:ff:20:bd:81:f4:7c:e1:9d:c3:a6:a6:c7:48:c6: af:0b:79:07:4e:f1:d0:0c:eb:13:00:dd:5a:06:3e:09:9f:f0: d7:17:49:98:ec:33:60:14:5b:5d:6e:cf:2a:fd:26:09:ac:b4: a1:8e:d0:29:6b:d4:e0:77:bb:46:0d:c6:ea:c8:c8:51:6c:dc: 80:c0:c6:c0:50:98:bb:29:61:23:34:02:ab:cc:5d:00:e6:45: e4:76:7a:78:f1:d3:6c:05:1c:18:80:0c:3b:56:46:27:d9:d2: 6b:db:53:8e:e5:16:97:93:73:4e:a0:88:4a:96:94:66:74:47: e0:13:68:4c:45:6f:75:b5:94:17:1e:ca:e8:2e:ba:30:06:cd: ca:14:bd:c4:95:9a:48:ca:7c:c5:0a:0a:6a:77:57:ca:f8:5f: fe:49:cb:dc:be:ea:ad:20:2c:93:50:1f:78:d4:a5:4e:e0:fa: e6:48:af:df:df:a6:7c:82:7c:6a:aa:2a:f5:53:cd:33:7c:31: 28:7d:85:a2:53:75:3c:04:e7:4d:a3:ed:93:8b:77:14:37:bd: 1b:d8:3e:27:5c:f6:68:71:35:30:cb:cc:f7:5e:98:dd:4a:d6: 33:4d:7b:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yYFwVIDRMTmlu7G4xP6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMTAyMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzE3MjVmNTcwODcwYzRlMWYxYTI5YTJlMjM4OGEzM2QyMDM4M2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUwxdIRtLZ1i+CFjWMOfdMfIUPtw qVjOellNqAIMqBAijQTUYL4uACjr77vMtw6P8VofadKkSCgW23MpSePliFxtBzO/ NpA4EOktZ7/pUKyzfp5GZb0Gb2mpPID5PZv3nLmp8zNxd2+YSOsZzLvD+D6emxDp rmBY7UBbVfT/zHfLuNShEtR70bVptOgR8uX0h5Bi63Hk6rpmFkKDan0LwmjijDe9 eWh7L6fdVVQFjdNcMhv+tmj1vAw4VpWwTjG/QsqiNg83muej7qF9OW02QEjxSC/J T/5wvSYfpd9kBVIRa3UNb497mnh3TVBdcAwExpo3PUafwX2BJ5SvV/ZwiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMXJfVwhwxOHxopouI4ijPSA4PKMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvZ3hjbDlYQ0hERTRmR2ltaTRqaUtNOUlEZzhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCni6QMA0G CSqGSIb3DQEBCwUAA4IBAQCy6dUsWD38jx2N1UI3/vM1UrnbxfXA/yC9gfR84Z3D pqbHSMavC3kHTvHQDOsTAN1aBj4Jn/DXF0mY7DNgFFtdbs8q/SYJrLShjtApa9Tg d7tGDcbqyMhRbNyAwMbAUJi7KWEjNAKrzF0A5kXkdnp48dNsBRwYgAw7VkYn2dJr 21OO5RaXk3NOoIhKlpRmdEfgE2hMRW91tZQXHsroLrowBs3KFL3ElZpIynzFCgpq d1fK+F/+ScvcvuqtICyTUB941KVO4PrmSK/f36Z8gnxqqir1U80zfDEofYWiU3U8 BOdNo+2Ti3cUN70b2D4nXPZocTUwy8z3XpjdStYzTXtQ -----END CERTIFICATE-----Generated at Tue Jan 20 03:37:19 2026 by rpki-client