This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/c-GLIaCyWkyX2aA-pwPTDr1bNf0.roa File: c-GLIaCyWkyX2aA-pwPTDr1bNf0.roa (raw, json) Hash identifier: UagLfE9hN+xaUoMXVdUaFa1cMGwaeJhl0WBTshzJNLg= Subject key identifier: 73:E1:8B:21:A0:B2:5A:4C:97:D9:A0:3E:A7:03:D3:0E:BD:5B:35:FD Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903 Certificate serial: 019B7B356B9D6A385EDE4395E76E6C17C9DE Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/c-GLIaCyWkyX2aA-pwPTDr1bNf0.roa Signing time: Thu 01 Jan 2026 20:17:37 +0000 ROA not before: Thu 01 Jan 2026 20:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47682 IP address blocks: 91.197.182.0/24 maxlen: 24 91.205.8.0/22 maxlen: 22 2001:67c:18c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6b:9d:6a:38:5e:de:43:95:e7:6e:6c:17:c9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903 Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73e18b21a0b25a4c97d9a03ea703d30ebd5b35fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:91:e2:f0:9d:6d:01:a6:b8:9e:07:f7:d3: 7a:16:69:2e:5a:3f:1d:bf:18:8f:9b:dc:99:ff:c7: aa:cf:b6:5e:51:37:0e:e2:c3:14:03:2e:65:1e:02: b1:a4:72:f2:92:5d:b0:12:32:eb:c0:28:19:7f:2e: 28:06:69:c3:25:28:9c:3d:be:eb:a7:8d:3c:d7:6f: 2d:78:f2:50:28:19:b3:52:b1:34:36:d2:ad:92:f4: 15:5c:39:91:79:49:37:97:b8:51:9e:d0:12:de:b6: fe:3a:ae:c9:dc:b8:47:9d:ca:6a:00:12:3c:b0:9b: 8f:95:8d:16:c6:8d:49:b6:7c:5b:64:a0:10:f4:03: b9:65:ae:d5:48:5d:84:73:a7:61:f4:91:ea:23:11: d3:c1:c4:4a:f0:4d:c1:ea:4f:f2:5c:07:50:30:aa: 79:a1:90:69:89:f4:84:0d:76:83:96:69:39:cf:20: 49:ef:43:83:c9:fb:11:4b:fb:a8:2e:35:0c:b7:14: 09:0a:59:56:75:6d:6b:bc:21:4c:09:fd:82:9c:d1: bf:e7:a3:bc:1d:0d:2b:ec:4d:d0:18:48:75:a2:1b: a2:a6:31:0d:28:da:fb:e5:71:1c:36:6c:ab:80:6b: 2d:19:7a:f4:6c:9d:68:41:60:26:b4:24:ec:8b:ef: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E1:8B:21:A0:B2:5A:4C:97:D9:A0:3E:A7:03:D3:0E:BD:5B:35:FD X509v3 Authority Key Identifier: keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/c-GLIaCyWkyX2aA-pwPTDr1bNf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.182.0/24 91.205.8.0/22 IPv6: 2001:67c:18c::/48 Signature Algorithm: sha256WithRSAEncryption b2:bb:60:59:b4:6e:5b:91:e7:06:73:b4:4b:c5:84:79:cf:6f: 08:e7:97:10:48:0a:16:56:59:31:1d:03:5f:40:fa:c4:4a:ea: 7f:b4:63:45:15:06:8a:66:0b:56:e9:6c:33:c5:86:8a:e8:4b: ef:56:52:ff:6d:bb:55:0c:ec:1b:99:d4:fe:bd:97:fe:49:5e: 9b:e8:4d:71:fd:55:df:49:b9:e5:78:d5:dc:32:8d:25:6b:26: 90:b6:d4:ad:4b:c3:66:5b:17:b6:9f:57:67:6d:b7:4a:80:6b: 2a:fa:ed:dd:83:1b:5b:f1:07:89:a9:ea:d0:dd:c4:82:1b:9d: aa:03:e0:e9:5d:33:f6:02:f5:54:4e:37:03:4a:93:db:be:8c: 04:df:43:8b:33:4f:7d:91:d3:48:b5:3b:bd:c5:d8:a4:67:00: ae:c6:1e:ef:8b:30:e1:6a:43:8f:c2:b6:3e:6e:18:19:9d:5b: bf:f7:2e:73:52:ab:1d:0e:d3:36:f5:45:f8:c0:a9:d9:17:5e: c6:b6:e2:2d:ef:64:d4:0e:b0:3e:07:43:f3:ed:70:dc:22:3c: 33:99:db:f0:26:64:1d:ba:e1:0a:ad:51:90:0f:99:9d:5f:af: 9c:63:f9:2f:54:57:df:20:26:d4:a4:90:08:78:24:c7:b9:e6: 5d:4e:4f:03 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7NWudajhe3kOV525sF8neMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYTc3NDI3YzAzNzA5YjMzOWE5NWIwYWQ5YTRhYzlkMmM5 MmM5MDMwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2UxOGIyMWEwYjI1YTRjOTdkOWEwM2VhNzAzZDMwZWJkNWIzNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdGR4vCdbQGmuJ4H99N6FmkuWj8d vxiPm9yZ/8eqz7ZeUTcO4sMUAy5lHgKxpHLykl2wEjLrwCgZfy4oBmnDJSicPb7r p408128tePJQKBmzUrE0NtKtkvQVXDmReUk3l7hRntAS3rb+Oq7J3LhHncpqABI8 sJuPlY0Wxo1JtnxbZKAQ9AO5Za7VSF2Ec6dh9JHqIxHTwcRK8E3B6k/yXAdQMKp5 oZBpifSEDXaDlmk5zyBJ70ODyfsRS/uoLjUMtxQJCllWdW1rvCFMCf2CnNG/56O8 HQ0r7E3QGEh1ohuipjENKNr75XEcNmyrgGstGXr0bJ1oQWAmtCTsi+8mlwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFHPhiyGgslpMl9mgPqcD0w69WzX9MB8GA1UdIwQY MBaAFDKndCfANwmzOalbCtmkrJ0skskDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmIt N2Q0MGI3YzhmYjAxLzEvYy1HTElhQ3lXa3lYMmFBLXB3UFREcjFiTmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmItN2Q0MGI3YzhmYjAx LzEvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW8W2AwQC W80IMA8EAgACMAkDBwAgAQZ8AYwwDQYJKoZIhvcNAQELBQADggEBALK7YFm0bluR 5wZztEvFhHnPbwjnlxBIChZWWTEdA19A+sRK6n+0Y0UVBopmC1bpbDPFhoroS+9W Uv9tu1UM7BuZ1P69l/5JXpvoTXH9Vd9JueV41dwyjSVrJpC21K1Lw2ZbF7afV2dt t0qAayr67d2DG1vxB4mp6tDdxIIbnaoD4OldM/YC9VRONwNKk9u+jATfQ4szT32R 00i1O73F2KRnAK7GHu+LMOFqQ4/Ctj5uGBmdW7/3LnNSqx0O0zb1RfjAqdkXXsa2 4i3vZNQOsD4HQ/PtcNwiPDOZ2/AmZB264QqtUZAPmZ1fr5xj+S9UV98gJtSkkAh4 JMe55l1OTwM= -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:58 2026 by rpki-client