This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa File: gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa (raw, json) Hash identifier: UP0movw74FgBnc/2Abquw52G3rsl7ENPcm+vDD+jqRQ= Subject key identifier: 82:5E:93:47:99:6A:09:ED:1E:17:6B:31:7D:B3:84:87:6C:55:D9:8B Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872 Certificate serial: 019B7F15F8CCD4DD34694E46A3D021F65DC2 Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 185.248.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f8:cc:d4:dd:34:69:4e:46:a3:d0:21:f6:5d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=825e9347996a09ed1e176b317db384876c55d98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:a0:6e:05:18:b7:32:c5:47:79:33:53:ed: 72:41:df:ff:ac:21:c6:af:0f:3d:cd:cb:f9:5d:84: 60:4f:9c:97:9a:f0:ac:b8:ce:5d:65:e8:9c:c3:ab: cd:dc:e2:62:3d:55:d4:92:64:30:e3:ea:2b:85:4e: 65:b5:5d:4c:4e:9b:4f:a0:92:e0:33:ee:00:e9:3e: 05:a6:4b:e0:a4:8a:97:96:5f:28:52:9b:6a:68:1d: 8b:15:0f:49:46:1a:10:9b:d2:ab:ac:dc:3a:e3:2f: 60:30:36:19:f1:53:59:67:28:91:55:a0:e9:ad:20: ed:88:1f:e1:1b:6c:ae:28:19:ce:27:47:b5:cb:9b: 5a:49:86:fc:1a:c6:5a:29:3c:0c:ac:57:a8:96:ae: a6:f9:0c:6f:29:ce:2e:35:d0:f4:ba:f9:93:a8:fc: 33:df:d8:e8:5a:70:2a:f1:c1:80:26:6d:a4:dd:99: ec:94:1e:9b:37:53:cb:39:b2:60:f8:14:c4:6a:fe: b8:34:e5:89:6d:ae:06:4c:67:0e:8f:1d:12:c6:d5: 23:36:87:73:c7:1c:60:2c:f9:e6:14:15:85:11:77: b1:ca:08:81:0d:d0:d8:3c:61:76:95:d4:2d:17:92: 08:c2:36:9a:ca:ca:4d:93:42:2c:df:35:cd:ce:14: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5E:93:47:99:6A:09:ED:1E:17:6B:31:7D:B3:84:87:6C:55:D9:8B X509v3 Authority Key Identifier: keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.0.0/23 Signature Algorithm: sha256WithRSAEncryption 12:8c:aa:64:ee:bb:be:72:5b:f3:97:d8:50:09:5a:ed:69:87: 49:d9:d5:da:70:66:8d:02:0d:d2:11:9a:3f:de:65:f9:a6:d0: 64:c9:2e:7c:01:4f:ef:6e:a3:2c:bd:80:7b:a3:27:09:4d:c6: 48:91:58:ae:08:61:07:07:a0:5e:03:6f:a5:bd:cc:47:8d:7c: 2a:6d:d2:b4:39:66:e0:94:93:9d:47:b1:ce:59:ee:33:17:b1: 34:21:a9:9f:a9:04:9b:f1:93:ee:d5:28:2a:6d:85:19:9e:43: ce:41:19:6c:e4:ce:73:93:69:53:4e:60:b8:1f:0b:c9:b8:b5: 86:66:11:99:1b:96:63:2a:82:b0:9c:ef:05:f6:31:8e:ac:4e: f1:a1:be:92:62:e6:eb:16:d5:89:68:01:45:63:64:fb:73:f3: e4:ed:0c:45:7f:e7:3c:ea:0c:1d:cc:46:63:f9:5e:ef:d5:c5: d9:6a:69:7e:08:47:ad:7b:0c:78:dd:90:51:3f:f6:d9:e7:29: 7e:09:86:50:02:aa:ba:26:92:ba:c4:e0:fb:c2:c7:75:55:d8: 07:22:3e:f4:66:16:aa:fa:c4:6b:80:0a:48:7d:13:5d:66:1e: ad:72:f5:16:38:88:ba:4d:6d:3f:87:54:b9:0a:02:b5:83:cd: 65:5d:80:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfjM1N00aU5Go9Ah9l3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZGNiZGYwNjMyYTEwMTYxM2E4ZjZjOTQ0OWIyOWVkNDVj MWE4NzIwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjVlOTM0Nzk5NmEwOWVkMWUxNzZiMzE3ZGIzODQ4NzZjNTVkOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7WgbgUYtzLFR3kzU+1yQd//rCHG rw89zcv5XYRgT5yXmvCsuM5dZeicw6vN3OJiPVXUkmQw4+orhU5ltV1MTptPoJLg M+4A6T4FpkvgpIqXll8oUptqaB2LFQ9JRhoQm9KrrNw64y9gMDYZ8VNZZyiRVaDp rSDtiB/hG2yuKBnOJ0e1y5taSYb8GsZaKTwMrFeolq6m+QxvKc4uNdD0uvmTqPwz 39joWnAq8cGAJm2k3ZnslB6bN1PLObJg+BTEav64NOWJba4GTGcOjx0SxtUjNodz xxxgLPnmFBWFEXexygiBDdDYPGF2ldQtF5IIwjaayspNk0Is3zXNzhSLBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJek0eZagntHhdrMX2zhIdsVdmLMB8GA1UdIwQY MBaAFJncvfBjKhAWE6j2yUSbKe1FwahyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWR5OThHTXFFQllUcVBiSlJKc3A3VVhCcUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80ZjNkMWItODM2MS00MTFlLWExNDgt ODg1OGE1NTlmMjUxLzEvZ2w2VFI1bHFDZTBlRjJzeGZiT0VoMnhWMllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80ZjNkMWItODM2MS00MTFlLWExNDgtODg1OGE1NTlmMjUx LzEvbWR5OThHTXFFQllUcVBiSlJKc3A3VVhCcUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufgAMA0G CSqGSIb3DQEBCwUAA4IBAQASjKpk7ru+clvzl9hQCVrtaYdJ2dXacGaNAg3SEZo/ 3mX5ptBkyS58AU/vbqMsvYB7oycJTcZIkViuCGEHB6BeA2+lvcxHjXwqbdK0OWbg lJOdR7HOWe4zF7E0IamfqQSb8ZPu1SgqbYUZnkPOQRls5M5zk2lTTmC4HwvJuLWG ZhGZG5ZjKoKwnO8F9jGOrE7xob6SYubrFtWJaAFFY2T7c/Pk7QxFf+c86gwdzEZj +V7v1cXZaml+CEetewx43ZBRP/bZ5yl+CYZQAqq6JpK6xOD7wsd1VdgHIj70Zhaq +sRrgApIfRNdZh6tcvUWOIi6TW0/h1S5CgK1g81lXYCD -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:56 2026 by rpki-client