This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/glZyXrPaS-A5B-uDGD57n_cghM4.roa File: glZyXrPaS-A5B-uDGD57n_cghM4.roa (raw, json) Hash identifier: hN4EBtzuzzmtFf4jb2AUJs0NYi/FfTZ89jIlf1W/4gA= Subject key identifier: 82:56:72:5E:B3:DA:4B:E0:39:07:EB:83:18:3E:7B:9F:F7:20:84:CE Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABD8B4882C6460D28C1B85E71DC36 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/glZyXrPaS-A5B-uDGD57n_cghM4.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205896 IP address blocks: 109.176.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bd:8b:48:82:c6:46:0d:28:c1:b8:5e:71:dc:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8256725eb3da4be03907eb83183e7b9ff72084ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:05:6e:22:76:9c:ce:a7:36:80:b8:3b:f0: a7:d0:df:86:6f:a2:69:7d:3f:86:14:4a:3e:9e:b4: 58:d1:4a:31:4c:17:ea:7a:ff:f7:bf:7c:94:64:73: 34:5d:30:e6:54:2c:12:ab:10:41:b0:ee:21:c0:43: dd:a4:bd:c4:f2:bf:d3:a6:94:56:6f:24:7a:eb:68: 4c:97:bd:97:28:49:87:c9:2d:8c:bf:c0:7c:81:19: d1:24:85:e1:25:5c:37:10:b3:36:e4:de:b8:f8:60: 55:89:a4:fe:cc:ce:18:2a:6a:e1:b2:37:7e:fd:c7: a5:91:6e:e7:1c:e7:b5:07:b1:84:ff:46:7d:d6:47: a1:e9:7b:e5:17:21:eb:fc:4e:89:f2:07:f9:21:13: a2:9f:08:84:ac:a3:18:1e:48:68:bf:07:33:d6:dd: 75:e7:08:b6:81:9b:5a:2b:be:88:46:4e:ba:e0:d7: 18:68:26:74:a4:86:c8:d8:13:10:89:2e:72:e3:9c: 61:2e:66:de:26:d9:1d:47:51:9c:1f:5d:9f:8d:9d: 1b:bf:89:b6:ad:d6:31:c6:48:a9:2d:eb:fc:eb:69: 03:b2:dd:ce:08:c0:5c:7a:5c:44:77:b4:bb:1e:96: 80:42:88:fb:fb:d6:b2:8a:65:60:08:e5:76:6b:1d: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:72:5E:B3:DA:4B:E0:39:07:EB:83:18:3E:7B:9F:F7:20:84:CE X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/glZyXrPaS-A5B-uDGD57n_cghM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.83.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:43:cc:0d:80:a8:63:ad:1b:f0:30:b1:6a:0a:4a:fe:5d:a0: b0:be:84:3d:e4:a8:e2:e2:57:9e:7a:02:03:ee:5f:ab:72:4f: 42:da:40:ca:98:c7:44:9b:40:ea:c7:2d:a4:8d:d7:eb:3e:74: 22:8d:01:ad:20:22:1e:84:ce:38:d4:78:05:f4:fc:62:80:20: 1d:8c:cc:1b:40:87:b4:0d:86:80:ef:8b:e6:79:a5:1c:3e:8f: 72:d3:8b:d1:fc:10:f1:8d:cf:94:18:50:00:fd:ca:6b:de:01: 5a:cf:0e:f9:00:31:25:eb:73:7c:2d:db:38:b6:b3:8d:a9:06: 97:ba:b7:70:06:e5:99:e8:f5:84:e7:65:d1:81:46:86:be:6f: 3e:dc:8d:8c:7c:65:b4:68:4b:32:eb:2d:d5:f4:74:fd:e3:44: 56:e3:d1:d3:5b:af:73:ed:db:50:b5:5a:fc:e3:92:50:10:e8: 38:11:99:06:f1:a1:be:91:65:a2:7d:01:a7:05:2d:b1:64:5a: f1:4b:00:e2:63:df:51:28:d1:c6:7c:21:20:bb:11:d5:54:e7: 36:46:79:16:f1:b9:a1:2b:da:e9:3a:f4:6a:49:cb:ec:c8:fc: 1f:25:55:47:4a:46:48:20:28:49:ce:46:80:e3:76:53:64:4f: d0:84:17:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wr2LSILGRg0owbhecdw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjU2NzI1ZWIzZGE0YmUwMzkwN2ViODMxODNlN2I5ZmY3MjA4NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe8FbiJ2nM6nNoC4O/Cn0N+Gb6Jp fT+GFEo+nrRY0UoxTBfqev/3v3yUZHM0XTDmVCwSqxBBsO4hwEPdpL3E8r/TppRW byR662hMl72XKEmHyS2Mv8B8gRnRJIXhJVw3ELM25N64+GBViaT+zM4YKmrhsjd+ /celkW7nHOe1B7GE/0Z91keh6XvlFyHr/E6J8gf5IROinwiErKMYHkhovwcz1t11 5wi2gZtaK76IRk664NcYaCZ0pIbI2BMQiS5y45xhLmbeJtkdR1GcH12fjZ0bv4m2 rdYxxkipLev862kDst3OCMBcelxEd7S7HpaAQoj7+9ayimVgCOV2ax2KrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJWcl6z2kvgOQfrgxg+e5/3IITOMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZ2xaeVhyUGFTLUE1Qi11REdENTduX2NnaE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbBTMA0G CSqGSIb3DQEBCwUAA4IBAQCeQ8wNgKhjrRvwMLFqCkr+XaCwvoQ95Kji4leeegID 7l+rck9C2kDKmMdEm0Dqxy2kjdfrPnQijQGtICIehM441HgF9PxigCAdjMwbQIe0 DYaA74vmeaUcPo9y04vR/BDxjc+UGFAA/cpr3gFazw75ADEl63N8Lds4trONqQaX urdwBuWZ6PWE52XRgUaGvm8+3I2MfGW0aEsy6y3V9HT940RW49HTW69z7dtQtVr8 45JQEOg4EZkG8aG+kWWifQGnBS2xZFrxSwDiY99RKNHGfCEguxHVVOc2RnkW8bmh K9rpOvRqScvsyPwfJVVHSkZIIChJzkaA43ZTZE/QhBfh -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:06 2026 by rpki-client