This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa File: GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa (raw, json) Hash identifier: Vhct9Hz5giaL8GbiD0lTZ+WsxND/eXGjAzq9jIuUyys= Subject key identifier: 1A:52:52:C1:38:B6:15:BD:12:68:98:CA:2E:5A:93:63:94:98:4C:B2 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 019B797EDFAD8D1A19FAE6B7C7A844AF4B73 Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.225.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:df:ad:8d:1a:19:fa:e6:b7:c7:a8:44:af:4b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a5252c138b615bd126898ca2e5a936394984cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:46:2e:02:f9:46:70:72:2a:29:db:06:65: c6:5f:f8:a6:91:33:40:ef:c4:2f:01:66:69:36:ed: 35:c9:dd:6d:7f:19:37:c9:06:e7:13:be:23:80:bc: ec:58:cf:cc:94:6a:4f:1f:f2:2f:a5:e7:a8:e9:20: e6:0f:42:46:ee:9a:d2:c9:2a:51:92:59:e6:96:9e: 57:0e:72:44:58:ae:81:cc:4e:39:42:98:a3:b9:15: d7:f0:ad:68:da:ef:86:f6:d5:56:b6:23:c7:b3:21: 6d:9f:bb:5b:0c:d0:78:7f:76:52:12:56:76:37:60: 85:69:e8:78:cc:68:42:56:67:9a:b4:63:da:8d:15: c4:6b:79:07:0b:c1:ce:c9:ce:86:a7:93:4b:df:db: 7e:fe:15:23:11:9e:86:d5:6d:3e:3b:5f:ef:64:c3: 59:ea:77:db:e4:15:e9:ad:96:3c:3a:bb:f9:84:f0: 4e:ba:2b:76:34:a7:03:14:cd:1f:6c:e5:e5:d1:30: 70:35:ea:a0:a6:f5:19:5d:2e:be:52:9b:65:6a:2c: c0:25:2b:51:14:06:6e:7c:1e:50:12:c0:0e:f8:95: 4c:6a:d4:d9:77:ff:03:7b:e6:06:8f:b7:8f:91:6a: ed:fb:26:d6:e2:99:db:7e:48:ca:ad:5d:9e:be:6b: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:52:C1:38:B6:15:BD:12:68:98:CA:2E:5A:93:63:94:98:4C:B2 X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.236.0/22 Signature Algorithm: sha256WithRSAEncryption b8:eb:49:95:8f:eb:db:25:0a:7c:64:82:e1:85:7a:bc:13:4e: a9:d9:56:4f:86:8d:c3:ea:d2:67:d7:6d:0b:bf:cc:a5:d5:77: 63:61:4a:cc:bd:be:c5:08:f4:18:c8:6c:d0:79:f9:f1:9f:99: bd:03:d8:6c:50:9a:74:20:73:3b:ae:50:98:ff:df:9e:7c:9c: 1b:29:9d:6f:ab:d8:6b:3a:e0:70:59:a3:21:af:d8:ff:09:25: 69:a5:9d:3d:58:00:98:44:58:bd:37:05:a8:07:51:41:19:75: 33:0d:a8:9d:bd:4f:4f:56:53:28:51:0c:24:d9:e9:9e:d1:d2: 7b:03:e2:00:f0:54:19:f6:8a:6f:bc:79:6b:98:12:02:69:86: d5:2d:9c:b0:10:ae:8c:be:6f:85:ec:75:97:39:3d:13:10:5f: 68:9f:51:f3:b6:36:b5:30:28:53:a4:e9:48:fc:d9:c3:62:dd: 62:1d:24:26:24:70:cd:b5:4e:1d:8b:c7:1b:64:14:3a:ac:8c: 67:7d:7f:c1:74:88:dc:cc:02:56:bc:31:2a:3f:4e:5d:95:aa: 27:4c:b9:74:b8:b9:cf:80:6f:c9:bb:74:61:c8:86:2e:20:86: 94:e8:ba:d8:73:4e:a5:f9:f8:48:0f:25:db:1e:e5:a9:45:3d: 6a:8a:f0:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ft+tjRoZ+ua3x6hEr0tzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTUyNTJjMTM4YjYxNWJkMTI2ODk4Y2EyZTVhOTM2Mzk0OTg0Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl1GLgL5RnByKinbBmXGX/imkTNA 78QvAWZpNu01yd1tfxk3yQbnE74jgLzsWM/MlGpPH/Ivpeeo6SDmD0JG7prSySpR klnmlp5XDnJEWK6BzE45QpijuRXX8K1o2u+G9tVWtiPHsyFtn7tbDNB4f3ZSElZ2 N2CFaeh4zGhCVmeatGPajRXEa3kHC8HOyc6Gp5NL39t+/hUjEZ6G1W0+O1/vZMNZ 6nfb5BXprZY8Orv5hPBOuit2NKcDFM0fbOXl0TBwNeqgpvUZXS6+UptlaizAJStR FAZufB5QEsAO+JVMatTZd/8De+YGj7ePkWrt+ybW4pnbfkjKrV2evmtYJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpSUsE4thW9EmiYyi5ak2OUmEyyMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvR2xKU3dUaTJGYjBTYUpqS0xscVRZNVNZVExJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueHsMA0G CSqGSIb3DQEBCwUAA4IBAQC460mVj+vbJQp8ZILhhXq8E06p2VZPho3D6tJn120L v8yl1XdjYUrMvb7FCPQYyGzQefnxn5m9A9hsUJp0IHM7rlCY/9+efJwbKZ1vq9hr OuBwWaMhr9j/CSVppZ09WACYRFi9NwWoB1FBGXUzDaidvU9PVlMoUQwk2eme0dJ7 A+IA8FQZ9opvvHlrmBICaYbVLZywEK6Mvm+F7HWXOT0TEF9on1Hztja1MChTpOlI /NnDYt1iHSQmJHDNtU4di8cbZBQ6rIxnfX/BdIjczAJWvDEqP05dlaonTLl0uLnP gG/Ju3RhyIYuIIaU6LrYc06l+fhIDyXbHuWpRT1qivDc -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:20 2026 by rpki-client