This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Glvl1fxIoSKBXplNroW9Wo2H104.roa File: Glvl1fxIoSKBXplNroW9Wo2H104.roa (raw, json) Hash identifier: buEuEch7dIWOjC6xy0eKSgr+lOtrtonmW94sh/igJyM= Subject key identifier: 1A:5B:E5:D5:FC:48:A1:22:81:5E:99:4D:AE:85:BD:5A:8D:87:D7:4E Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9D7741A46506621CC710DBE2CC33 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Glvl1fxIoSKBXplNroW9Wo2H104.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41378 IP address blocks: 45.9.8.0/22 maxlen: 24 45.9.8.0/24 maxlen: 24 45.9.9.0/24 maxlen: 24 45.9.10.0/24 maxlen: 24 45.9.11.0/24 maxlen: 24 103.149.248.0/23 maxlen: 24 185.145.244.0/24 maxlen: 24 2a0e:aa00:100::/44 maxlen: 48 2a0e:aa00:110::/44 maxlen: 48 2a0e:aa00:120::/44 maxlen: 48 2a0e:aa00:130::/44 maxlen: 48 2a0e:aa00:140::/44 maxlen: 48 2a0e:aa00:200::/44 maxlen: 48 2a0e:aa00:210::/44 maxlen: 48 2a0e:aa00:220::/44 maxlen: 48 2a0e:aa00:230::/44 maxlen: 48 2a0e:aa00:300::/44 maxlen: 48 2a0e:aa00:310::/44 maxlen: 48 2a0e:aa00:aa00::/40 maxlen: 48 2a0e:aa02::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9d:77:41:a4:65:06:62:1c:c7:10:db:e2:cc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a5be5d5fc48a122815e994dae85bd5a8d87d74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:32:f9:b4:87:4d:d8:b8:9d:e5:41:e0:35: 8a:f9:5d:6a:ac:25:c3:c5:d1:2d:5d:56:43:bc:9e: 89:3e:c9:0b:c3:55:e7:c9:a8:bf:32:59:20:f8:fe: 90:d8:51:14:65:87:1e:a2:1c:30:b2:e2:a8:9d:32: 1d:b5:55:ce:58:5b:dc:18:d2:c3:ab:2d:48:99:f6: 8a:f8:9a:eb:50:4b:da:fb:d3:d4:8b:fe:d9:db:dd: 03:c2:bd:0a:47:d1:9d:b7:04:76:21:58:6c:c1:42: a6:7e:b6:da:ba:13:15:5c:7a:cc:f1:8d:a1:d4:45: e2:2a:9c:25:8f:17:8a:0b:6c:4d:46:8f:93:9c:0d: 5f:69:67:c5:d2:50:c6:bb:cd:98:3f:ba:a0:4d:05: a4:65:d1:49:33:2e:8e:b2:a2:a0:ba:41:2f:99:d2: 3f:b1:33:31:0b:89:58:6a:85:51:b3:cf:b2:dd:22: 24:5c:6d:4b:9c:be:5b:1e:eb:e3:3d:ba:90:6c:e7: fb:40:5c:d0:90:10:2b:68:44:51:22:5a:56:70:38: 61:a2:75:26:b8:52:9b:6a:dc:c0:47:6a:60:88:e0: 9c:2e:c8:e4:b3:2d:99:88:ce:e8:23:59:20:48:6f: 3c:00:c7:ce:22:50:45:be:80:e3:38:83:52:bb:81: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5B:E5:D5:FC:48:A1:22:81:5E:99:4D:AE:85:BD:5A:8D:87:D7:4E X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Glvl1fxIoSKBXplNroW9Wo2H104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.8.0/22 103.149.248.0/23 185.145.244.0/24 IPv6: 2a0e:aa00:100::-2a0e:aa00:14f:ffff:ffff:ffff:ffff:ffff 2a0e:aa00:200::/42 2a0e:aa00:300::/43 2a0e:aa00:aa00::/40 2a0e:aa02::/32 Signature Algorithm: sha256WithRSAEncryption 92:47:1c:53:d0:a1:94:15:5a:cc:6b:36:b7:75:88:bd:a2:39: 5e:89:5a:c8:27:65:28:6f:f0:d4:dc:7b:fb:e6:4a:c2:b5:24: e1:c8:f7:93:25:c1:da:89:0c:fc:62:54:ee:79:fb:9e:8c:d9: dd:a0:60:d6:eb:3d:34:e5:1d:14:b2:a9:43:e4:78:9f:b5:70: e7:19:22:74:91:4b:83:5a:e5:4e:7c:23:15:5e:fd:06:1d:6b: e7:1e:42:60:05:81:58:7f:ce:be:b2:f6:ed:bf:8d:ac:9c:63: ee:cf:5b:9f:fd:76:8c:24:13:c6:1d:50:41:72:c6:e9:17:2e: 97:17:b2:c9:bb:64:8f:21:8e:a4:0b:09:e4:c8:7d:05:1c:54: 56:d1:fd:27:e0:79:5d:fa:03:d4:8a:dc:95:89:64:7f:fd:98: 10:b8:73:2d:9a:50:4f:1a:7a:ee:09:fb:7f:a1:de:f7:51:55: 3d:93:4c:f6:ef:47:73:99:61:7c:aa:a1:51:be:89:6d:19:af: 4a:f1:27:30:58:40:97:b4:b7:e6:d2:db:7c:1f:74:34:9c:e5: 84:1d:02:d7:d0:49:e4:70:ac:25:71:76:9a:2a:fa:28:27:23: f0:d6:eb:98:f5:cf:5b:04:8e:2c:ce:ef:ff:d1:8f:a7:fb:3f: 04:1f:43:4c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt5fp13QaRlBmIcxxDb4swzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTViZTVkNWZjNDhhMTIyODE1ZTk5NGRhZTg1YmQ1YThkODdkNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmYy+bSHTdi4neVB4DWK+V1qrCXD xdEtXVZDvJ6JPskLw1Xnyai/Mlkg+P6Q2FEUZYceohwwsuKonTIdtVXOWFvcGNLD qy1ImfaK+JrrUEva+9PUi/7Z290Dwr0KR9GdtwR2IVhswUKmfrbauhMVXHrM8Y2h 1EXiKpwljxeKC2xNRo+TnA1faWfF0lDGu82YP7qgTQWkZdFJMy6OsqKgukEvmdI/ sTMxC4lYaoVRs8+y3SIkXG1LnL5bHuvjPbqQbOf7QFzQkBAraERRIlpWcDhhonUm uFKbatzAR2pgiOCcLsjksy2ZiM7oI1kgSG88AMfOIlBFvoDjOINSu4HQgQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFBpb5dX8SKEigV6ZTa6FvVqNh9dOMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvR2x2bDFmeElvU0tCWHBsTnJvVzlXbzJIMTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjAYBAIAATASAwQCLQkIAwQB Z5X4AwQAuZH0MDoEAgACMDQwEQMGACoOqgABAwcEKg6qAAFAAwcGKg6qAAIAAwcF Kg6qAAMAAwYAKg6qAKoDBQAqDqoCMA0GCSqGSIb3DQEBCwUAA4IBAQCSRxxT0KGU FVrMaza3dYi9ojleiVrIJ2Uob/DU3Hv75krCtSThyPeTJcHaiQz8YlTuefuejNnd oGDW6z005R0UsqlD5HiftXDnGSJ0kUuDWuVOfCMVXv0GHWvnHkJgBYFYf86+svbt v42snGPuz1uf/XaMJBPGHVBBcsbpFy6XF7LJu2SPIY6kCwnkyH0FHFRW0f0n4Hld +gPUityViWR//ZgQuHMtmlBPGnruCft/od73UVU9k0z270dzmWF8qqFRvoltGa9K 8ScwWECXtLfm0tt8H3Q0nOWEHQLX0EnkcKwlcXaaKvooJyPw1uuY9c9bBI4szu// 0Y+n+z8EH0NM -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:04 2026 by rpki-client