This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GL_jqCHzPW1_sM-gkTTpGIheK-Q.roa File: GL_jqCHzPW1_sM-gkTTpGIheK-Q.roa (raw, json) Hash identifier: gJjknN8oMtGVmMSYSFiYXdwP/RFUBRRZCTQOZK9pNF0= Subject key identifier: 18:BF:E3:A8:21:F3:3D:6D:7F:B0:CF:A0:91:34:E9:18:88:5E:2B:E4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8448A9C3DA174A73BF2591E96B59FE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GL_jqCHzPW1_sM-gkTTpGIheK-Q.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 973 IP address blocks: 31.58.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:48:a9:c3:da:17:4a:73:bf:25:91:e9:6b:59:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18bfe3a821f33d6d7fb0cfa09134e918885e2be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:70:a8:cf:c3:2f:02:97:35:3c:a6:9b:4d: 1f:a5:a5:d5:fa:57:a8:04:f9:79:ba:ac:c7:95:3d: ba:7f:01:79:5d:f9:52:07:13:78:04:04:50:90:57: b3:f5:15:05:6a:7e:c0:b9:66:8d:7e:e4:d4:7c:c2: 02:51:5e:54:72:a0:fb:43:59:05:a2:79:9b:bd:c8: 2c:3c:a4:f2:90:60:ee:38:39:60:35:05:ee:7d:ac: 15:cb:09:3f:43:50:50:87:46:b4:4c:ca:7e:94:7a: 7a:a0:be:92:ad:de:42:14:29:8c:9d:bc:ca:71:80: b9:e8:c0:36:07:a3:35:77:9f:b0:e2:cd:3f:bf:de: 88:f8:7d:dc:12:55:96:48:2f:82:2d:5d:eb:89:29: 09:a2:25:1f:d0:fc:aa:4b:5a:91:a5:08:20:bf:ba: 03:5e:59:0d:90:27:37:7c:09:6a:52:d6:96:6d:5a: d9:75:65:06:0c:3a:c3:35:85:ac:f5:17:41:c4:91: 0e:c0:a8:cd:49:d3:91:01:ed:8d:15:d1:99:b8:bc: 53:90:72:8f:d2:f2:d8:df:97:29:c4:e9:23:91:54: e4:e4:38:97:1b:93:af:84:a0:5d:ae:5f:f1:c4:95: 7a:29:87:c0:03:95:e4:c1:68:ff:2a:76:b7:3e:35: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:E3:A8:21:F3:3D:6D:7F:B0:CF:A0:91:34:E9:18:88:5E:2B:E4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GL_jqCHzPW1_sM-gkTTpGIheK-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.100.0/24 Signature Algorithm: sha256WithRSAEncryption 52:3c:83:b0:01:3f:ec:77:e6:f7:85:d2:44:c6:d5:bf:32:7e: 23:f7:84:8c:54:74:7f:3e:5e:93:49:11:1c:e3:38:56:d3:9f: 2d:67:96:02:ac:14:f3:36:2a:27:39:73:7f:ab:4c:b6:d4:58: 7e:3d:c7:8d:32:34:2c:ee:c4:ab:c6:75:79:7a:d8:69:5a:32: 83:b7:66:2b:f7:b8:29:cd:a7:4b:ee:8d:2e:b6:39:e3:6b:d7: f5:0a:06:4c:4f:71:fb:e5:bb:ee:d0:c9:83:ec:f6:c1:4b:4d: 71:3e:b0:c8:11:be:8d:a7:57:70:c2:c3:e8:35:e7:ed:93:0d: 2e:47:82:32:ba:92:1c:4a:d5:98:9b:a3:43:d2:db:be:75:9b: f0:e2:81:31:dd:5a:3a:fd:85:3e:74:b5:8e:ce:a0:28:c9:ad: 36:93:15:2a:19:49:ca:3b:05:1e:4b:70:09:67:59:c8:d8:dc: 85:b8:0c:7d:81:53:ec:fc:1e:82:b7:cf:a7:06:f9:66:b1:40: e9:e3:42:19:e3:c3:53:36:34:a1:fd:8e:f4:13:b3:c4:48:b0: 07:d4:4b:d1:c7:3c:47:91:40:6a:31:80:7e:e0:96:5d:ce:99: 91:d0:72:d5:2b:f1:62:75:a7:43:ee:3c:43:7f:d7:fa:0f:be: 5c:ab:68:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hEipw9oXSnO/JZHpa1n+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGJmZTNhODIxZjMzZDZkN2ZiMGNmYTA5MTM0ZTkxODg4NWUyYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdpwqM/DLwKXNTymm00fpaXV+leo BPl5uqzHlT26fwF5XflSBxN4BARQkFez9RUFan7AuWaNfuTUfMICUV5UcqD7Q1kF onmbvcgsPKTykGDuODlgNQXufawVywk/Q1BQh0a0TMp+lHp6oL6Srd5CFCmMnbzK cYC56MA2B6M1d5+w4s0/v96I+H3cElWWSC+CLV3riSkJoiUf0PyqS1qRpQggv7oD XlkNkCc3fAlqUtaWbVrZdWUGDDrDNYWs9RdBxJEOwKjNSdORAe2NFdGZuLxTkHKP 0vLY35cpxOkjkVTk5DiXG5OvhKBdrl/xxJV6KYfAA5XkwWj/Kna3PjVGAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBi/46gh8z1tf7DPoJE06RiIXivkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvR0xfanFDSHpQVzFfc00tZ2tUVHBHSWhlSy1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpkMA0G CSqGSIb3DQEBCwUAA4IBAQBSPIOwAT/sd+b3hdJExtW/Mn4j94SMVHR/Pl6TSREc 4zhW058tZ5YCrBTzNionOXN/q0y21Fh+PceNMjQs7sSrxnV5ethpWjKDt2Yr97gp zadL7o0utjnja9f1CgZMT3H75bvu0MmD7PbBS01xPrDIEb6Np1dwwsPoNeftkw0u R4IyupIcStWYm6ND0tu+dZvw4oEx3Vo6/YU+dLWOzqAoya02kxUqGUnKOwUeS3AJ Z1nI2NyFuAx9gVPs/B6Ct8+nBvlmsUDp40IZ48NTNjSh/Y70E7PESLAH1EvRxzxH kUBqMYB+4JZdzpmR0HLVK/FidadD7jxDf9f6D75cq2gl -----END CERTIFICATE-----Generated at Mon Jan 5 14:39:16 2026 by rpki-client