This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GlnZBy4jh_okNhFQfLJAADBG8rQ.roa File: GlnZBy4jh_okNhFQfLJAADBG8rQ.roa (raw, json) Hash identifier: CyBuOmeiXOTajKz2D6wRhtGttl31tO+8UMxqLsHxr8w= Subject key identifier: 1A:59:D9:07:2E:23:87:FA:24:36:11:50:7C:B2:40:00:30:46:F2:B4 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACB563CA6D2281D06E2DC8FE08457 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GlnZBy4jh_okNhFQfLJAADBG8rQ.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 213.218.248.0/24 maxlen: 24 213.218.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cb:56:3c:a6:d2:28:1d:06:e2:dc:8f:e0:84:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a59d9072e2387fa243611507cb240003046f2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:4f:48:5f:26:ae:18:d5:2c:d5:6f:0d:69: 94:d7:5e:c8:8b:9f:c7:05:46:b1:32:8c:5b:c4:1e: 1d:61:47:10:50:b1:e1:33:46:03:64:f2:cc:af:ed: aa:74:b8:46:71:74:32:6a:7f:b7:01:a1:cd:48:d2: 6c:e1:3d:99:7c:bf:e6:8b:fc:be:50:9f:fc:5d:60: 0b:31:8b:40:b7:04:ec:fe:44:91:48:99:fd:e4:53: d7:7e:c6:75:dc:33:59:80:e9:65:3a:c8:10:02:09: aa:b9:e1:76:76:9b:25:76:7f:0e:cf:4b:42:f7:8a: 55:2e:90:c1:d1:94:89:c1:d5:ea:0b:5c:e7:89:00: a7:3a:5d:1c:94:1a:58:9f:79:29:11:0a:64:f7:b9: 10:ba:f3:6e:00:83:8e:b8:3f:24:40:30:90:37:b7: 06:94:bc:bc:1b:02:b2:4c:c8:f9:dc:3b:80:e4:f7: e1:48:d9:3d:59:84:e3:21:74:48:9f:bf:44:39:76: 8f:ed:42:7f:a1:0b:4e:40:2e:64:1b:5b:76:f6:d9: 76:12:32:ac:40:e4:50:19:57:59:aa:70:0a:48:0d: 3c:25:3c:66:f2:4d:b5:3d:aa:d0:a9:22:e7:b8:b0: fe:5f:ff:3c:40:0d:9c:92:59:02:f6:c1:6d:56:cc: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:D9:07:2E:23:87:FA:24:36:11:50:7C:B2:40:00:30:46:F2:B4 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GlnZBy4jh_okNhFQfLJAADBG8rQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.218.248.0/23 Signature Algorithm: sha256WithRSAEncryption 96:15:cb:80:1d:6d:16:d6:eb:83:da:46:e8:b5:6c:82:03:f8: c6:eb:38:89:ec:74:4e:e0:84:23:80:48:cc:ec:db:e5:c4:93: 1c:8c:ba:a7:d2:9e:03:70:08:d6:8d:68:f3:88:61:c0:7e:bf: 9a:66:eb:8e:0e:af:17:dd:a7:47:65:10:83:1e:c1:e8:9d:7b: 4a:f7:4e:3b:33:46:f0:0b:1b:70:74:29:44:62:b6:14:63:3c: 2d:a0:0c:95:61:15:0a:73:7e:2b:6f:6c:e1:b4:b2:d7:4b:0b: bd:68:23:61:f2:b5:4d:14:90:c4:62:f1:4e:36:d1:7b:4a:46: d6:16:d2:1e:d1:3b:48:e0:3c:9e:53:37:fc:aa:35:1d:50:e0: 49:9a:e1:93:af:dc:4a:da:f3:75:12:e7:03:dc:e7:33:54:14: bf:a7:43:d7:96:c7:5e:5d:04:95:5a:e7:5e:0e:f8:e9:8a:5d: a7:98:30:e5:c1:f1:12:3c:db:bd:9a:8e:ca:d8:15:26:50:66: 26:20:17:cc:7a:5b:cc:28:83:e1:9d:a8:b0:06:d5:45:53:4f: 03:10:ea:1a:24:91:57:32:9c:15:d9:42:94:22:1f:28:2f:67: 78:95:5d:e7:11:d2:3c:33:fe:77:d0:57:08:33:80:2b:64:8c: bd:91:34:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WstWPKbSKB0G4tyP4IRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTU5ZDkwNzJlMjM4N2ZhMjQzNjExNTA3Y2IyNDAwMDMwNDZmMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySRPSF8mrhjVLNVvDWmU117Ii5/H BUaxMoxbxB4dYUcQULHhM0YDZPLMr+2qdLhGcXQyan+3AaHNSNJs4T2ZfL/mi/y+ UJ/8XWALMYtAtwTs/kSRSJn95FPXfsZ13DNZgOllOsgQAgmqueF2dpsldn8Oz0tC 94pVLpDB0ZSJwdXqC1zniQCnOl0clBpYn3kpEQpk97kQuvNuAIOOuD8kQDCQN7cG lLy8GwKyTMj53DuA5PfhSNk9WYTjIXRIn79EOXaP7UJ/oQtOQC5kG1t29tl2EjKs QORQGVdZqnAKSA08JTxm8k21ParQqSLnuLD+X/88QA2cklkC9sFtVsz7xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpZ2QcuI4f6JDYRUHyyQAAwRvK0MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvR2xuWkJ5NGpoX29rTmhGUWZMSkFBREJHOHJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1dr4MA0G CSqGSIb3DQEBCwUAA4IBAQCWFcuAHW0W1uuD2kbotWyCA/jG6ziJ7HRO4IQjgEjM 7NvlxJMcjLqn0p4DcAjWjWjziGHAfr+aZuuODq8X3adHZRCDHsHonXtK9047M0bw CxtwdClEYrYUYzwtoAyVYRUKc34rb2zhtLLXSwu9aCNh8rVNFJDEYvFONtF7SkbW FtIe0TtI4DyeUzf8qjUdUOBJmuGTr9xK2vN1EucD3OczVBS/p0PXlsdeXQSVWude Dvjpil2nmDDlwfESPNu9mo7K2BUmUGYmIBfMelvMKIPhnaiwBtVFU08DEOoaJJFX MpwV2UKUIh8oL2d4lV3nEdI8M/530FcIM4ArZIy9kTT1 -----END CERTIFICATE-----Generated at Mon Jan 19 18:41:17 2026 by rpki-client