This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa File: glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa (raw, json) Hash identifier: BJBEqU9Ndqs4BRPdMDfiUT/sHTP2TSMpS+6KJivs8n8= Subject key identifier: 82:53:C9:28:BC:F2:12:D3:90:DC:0D:15:27:55:91:FE:88:A4:50:80 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B790FFE3667C919654EC241DDDCCE1CDF Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213637 IP address blocks: 2.56.63.0/24 maxlen: 24 37.247.108.0/24 maxlen: 24 37.247.111.0/24 maxlen: 24 46.20.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fe:36:67:c9:19:65:4e:c2:41:dd:dc:ce:1c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8253c928bcf212d390dc0d15275591fe88a45080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:f5:94:23:59:d5:40:fa:57:0c:65:db:31: 29:90:5f:32:96:2e:c1:67:b0:4c:dc:d7:13:94:a0: 83:7c:37:d5:c4:b9:fa:ac:15:38:28:44:af:b1:bc: e0:b8:fb:d5:29:85:e7:e7:d1:f4:88:b4:1a:bc:b3: 17:42:2f:80:11:1b:3a:3a:15:42:34:e3:e1:29:f4: 42:7d:6f:f4:3d:93:ce:ce:51:18:bc:d7:4a:96:62: c2:b4:3a:08:1d:5f:e4:3e:6f:ac:28:c8:77:6e:03: 7c:53:99:2a:eb:a0:03:ac:cd:84:ec:2d:13:6d:b0: 60:cb:2a:9c:fa:dd:db:b3:bc:30:be:6b:f0:85:0a: fa:fc:37:b9:64:19:6c:6d:38:f0:7a:5c:6a:5c:95: 70:ec:de:b1:7e:47:59:50:6e:60:d1:a9:11:d6:97: f9:61:d9:54:b7:3d:d9:b0:04:71:a4:fb:b1:2d:9d: 66:a2:d5:a1:3b:63:4d:cf:50:56:78:7f:a7:2d:4e: 9a:cd:6e:c7:62:8d:83:19:33:32:6c:27:f2:03:f7: 9a:dd:5a:71:e4:9d:c0:ad:19:1e:6f:d1:5e:07:ce: 90:3a:11:70:ff:ad:32:b8:15:14:e1:4b:b5:92:3d: d6:34:83:0b:61:c1:a1:da:0a:ff:8d:b5:f8:b9:88: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:53:C9:28:BC:F2:12:D3:90:DC:0D:15:27:55:91:FE:88:A4:50:80 X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.63.0/24 37.247.108.0/24 37.247.111.0/24 46.20.15.0/24 Signature Algorithm: sha256WithRSAEncryption 51:4d:16:8e:38:62:d9:a8:bb:57:95:c3:fd:9d:4f:8d:0f:36: 59:87:5e:5e:fc:10:f2:d2:6d:67:1f:33:d0:12:72:1c:a2:fb: 75:b5:8c:0b:d4:98:f2:31:f3:95:3a:17:66:1d:32:58:15:0d: 4c:f8:0f:b9:15:f4:57:2e:07:da:90:5b:23:82:f5:f6:6e:90: cf:43:ae:c2:a3:ae:6c:d8:38:cf:4e:dd:b7:36:fe:a3:e3:45: ac:d4:e5:6b:8a:b6:46:ec:86:dd:f8:f0:27:23:a4:20:b1:39: 6a:66:c0:3a:1d:8f:dd:c7:31:af:60:7c:a4:df:6f:30:63:5d: 21:0f:c0:5f:6d:96:4b:a5:e1:2f:68:c6:a8:0a:26:af:b2:0b: 1f:55:58:ad:b1:50:4f:cf:d3:65:35:14:fe:70:a7:6a:13:f3: 66:fb:a9:2e:d4:e0:65:22:5b:5e:37:ca:eb:2e:0b:87:02:f8: 50:e6:95:e6:c9:bd:bd:f5:88:c1:b9:5f:e3:cd:b6:ca:0d:1e: 1a:c0:cb:a6:0d:72:98:fa:60:de:d4:62:57:a7:ef:80:0e:a7: f0:ed:b8:fd:6a:b9:b7:ed:2a:c3:e5:bf:85:d1:aa:5b:58:66: 44:83:7f:43:22:83:fd:0b:87:62:b2:6b:6a:c6:4d:9b:0b:2b: 79:c6:f1:b1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5D/42Z8kZZU7CQd3czhzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjUzYzkyOGJjZjIxMmQzOTBkYzBkMTUyNzU1OTFmZTg4YTQ1MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJD1lCNZ1UD6Vwxl2zEpkF8yli7B Z7BM3NcTlKCDfDfVxLn6rBU4KESvsbzguPvVKYXn59H0iLQavLMXQi+AERs6OhVC NOPhKfRCfW/0PZPOzlEYvNdKlmLCtDoIHV/kPm+sKMh3bgN8U5kq66ADrM2E7C0T bbBgyyqc+t3bs7wwvmvwhQr6/De5ZBlsbTjwelxqXJVw7N6xfkdZUG5g0akR1pf5 YdlUtz3ZsARxpPuxLZ1motWhO2NNz1BWeH+nLU6azW7HYo2DGTMybCfyA/ea3Vpx 5J3ArRkeb9FeB86QOhFw/60yuBUU4Uu1kj3WNIMLYcGh2gr/jbX4uYisyQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIJTySi88hLTkNwNFSdVkf6IpFCAMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvZ2xQSktMenlFdE9RM0EwVkoxV1Jfb2lrVUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjg/AwQA JfdsAwQAJfdvAwQALhQPMA0GCSqGSIb3DQEBCwUAA4IBAQBRTRaOOGLZqLtXlcP9 nU+NDzZZh15e/BDy0m1nHzPQEnIcovt1tYwL1JjyMfOVOhdmHTJYFQ1M+A+5FfRX LgfakFsjgvX2bpDPQ67Co65s2DjPTt23Nv6j40Ws1OVrirZG7Ibd+PAnI6QgsTlq ZsA6HY/dxzGvYHyk328wY10hD8BfbZZLpeEvaMaoCiavsgsfVVitsVBPz9NlNRT+ cKdqE/Nm+6ku1OBlIlteN8rrLguHAvhQ5pXmyb299YjBuV/jzbbKDR4awMumDXKY +mDe1GJXp++ADqfw7bj9arm37SrD5b+F0apbWGZEg39DIoP9C4dismtqxk2bCyt5 xvGx -----END CERTIFICATE-----Generated at Wed Jan 21 17:17:45 2026 by rpki-client