This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/gl2zyY1LCi0DYJO7ABF7h8SVLNg.roa File: gl2zyY1LCi0DYJO7ABF7h8SVLNg.roa (raw, json) Hash identifier: cSYGcvXit1htMDlFp2DQ/hDi5CwZLH49Y6/Dgmp0lX4= Subject key identifier: 82:5D:B3:C9:8D:4B:0A:2D:03:60:93:BB:00:11:7B:87:C4:95:2C:D8 Certificate issuer: /CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824 Certificate serial: 019B78A3633498707A2DED7102385614E9CE Authority key identifier: 18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/gl2zyY1LCi0DYJO7ABF7h8SVLNg.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202207 IP address blocks: 94.250.246.0/24 maxlen: 24 94.250.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:63:34:98:70:7a:2d:ed:71:02:38:56:14:e9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=825db3c98d4b0a2d036093bb00117b87c4952cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:e9:6d:db:70:8a:98:4d:9a:1d:fc:36:62: 6e:0c:27:cc:3c:c8:d3:d4:dc:df:09:3d:a9:6e:47: 09:9e:c4:24:9b:c0:3c:50:11:12:b1:67:3a:a7:56: 77:c2:82:b6:58:b4:17:11:dc:97:67:64:62:e5:2d: 3e:22:8a:f3:65:fa:e4:85:64:02:58:ab:03:d9:c7: 69:54:57:80:8b:75:6d:e4:1d:a8:8f:39:ed:53:e1: 8f:8b:78:4e:6c:7d:29:2c:40:27:4a:cf:0f:8c:4d: 26:0a:12:ec:61:bb:50:2b:72:ee:cf:53:9b:ef:60: 64:f0:b6:56:f7:08:2a:d7:d2:a3:a2:49:63:51:93: ff:7f:07:dc:f0:54:99:5d:62:6c:45:74:70:05:7f: 86:1e:1f:87:18:f7:46:8c:19:b8:ea:c8:04:d0:14: ae:94:bc:74:10:00:47:2e:4b:44:fe:84:8c:37:6e: 62:3c:95:cd:e7:88:b7:df:7b:18:f6:81:47:b9:0f: 40:e3:3b:1f:64:88:1f:88:dd:26:8f:c5:36:28:8a: 05:f9:56:42:b8:2c:ed:58:8f:b1:0e:e5:d9:01:58: 9f:a1:9c:0d:ed:7e:b0:c0:48:30:cc:87:4b:33:e2: 9e:4c:1a:a7:01:07:ca:d3:70:41:61:1c:9f:e8:35: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5D:B3:C9:8D:4B:0A:2D:03:60:93:BB:00:11:7B:87:C4:95:2C:D8 X509v3 Authority Key Identifier: keyid:18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/gl2zyY1LCi0DYJO7ABF7h8SVLNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.250.246.0/23 Signature Algorithm: sha256WithRSAEncryption 48:a4:9e:07:ac:bc:b3:34:30:c1:67:90:3d:21:ba:29:5c:d9: 52:07:cd:73:cd:7d:92:81:64:36:c4:31:7b:79:a3:c0:0a:b1: 5d:e6:6f:56:fd:9f:dd:1b:90:73:40:e0:a1:0b:fb:94:b6:ef: c3:d5:57:37:53:6a:f2:0c:a1:be:e4:e0:2e:2a:99:97:40:f0: 4a:59:6c:f3:9c:82:1f:64:5d:ec:c6:b6:08:c6:1a:99:14:51: f8:c0:fe:d4:4e:cc:06:c0:a2:f3:61:cb:f7:ed:e0:dd:51:7a: 47:2b:1b:41:ee:af:c0:3f:05:3a:52:25:87:58:d3:85:f9:3c: 16:63:1f:44:85:57:e1:75:a5:cc:4f:f4:10:90:da:b7:dc:01: 7e:3e:f1:0d:cf:86:f9:06:64:c4:57:be:16:47:52:7a:7d:49: 82:02:65:47:7d:51:94:be:01:a2:ea:4f:83:ca:31:82:4c:74: 80:13:51:58:af:4d:77:a6:39:33:78:7c:01:60:84:91:70:04: 63:cf:fd:48:74:68:23:94:e0:89:7e:d1:15:73:4d:84:29:3b: 0a:32:c5:ac:55:27:aa:21:17:54:b9:d9:78:bf:27:49:c9:ca: d7:87:32:13:b1:a2:d5:3a:ba:a8:99:9d:a5:2d:32:5a:59:de: 34:e9:6d:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2M0mHB6Le1xAjhWFOnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjAwM2ZiYTM3YjAwZDVmOWNlN2VjODRhM2UwNjY4YmNk MDI4MjQwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjVkYjNjOThkNGIwYTJkMDM2MDkzYmIwMDExN2I4N2M0OTUyY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc3pbdtwiphNmh38NmJuDCfMPMjT 1NzfCT2pbkcJnsQkm8A8UBESsWc6p1Z3woK2WLQXEdyXZ2Ri5S0+IorzZfrkhWQC WKsD2cdpVFeAi3Vt5B2ojzntU+GPi3hObH0pLEAnSs8PjE0mChLsYbtQK3Luz1Ob 72Bk8LZW9wgq19KjokljUZP/fwfc8FSZXWJsRXRwBX+GHh+HGPdGjBm46sgE0BSu lLx0EABHLktE/oSMN25iPJXN54i333sY9oFHuQ9A4zsfZIgfiN0mj8U2KIoF+VZC uCztWI+xDuXZAVifoZwN7X6wwEgwzIdLM+KeTBqnAQfK03BBYRyf6DWzewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJds8mNSwotA2CTuwARe4fElSzYMB8GA1UdIwQY MBaAFBjwA/ujewDV+c5+yEo+Bmi80CgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BBRC02TjdBTlg1em43SVNqNEdhTHpRS0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kMjBmZDItMDcyZS00NzUyLWFmYTQt MDMzNGVlMWVmM2ZmLzEvZ2wyenlZMUxDaTBEWUpPN0FCRjdoOFNWTE5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kMjBmZDItMDcyZS00NzUyLWFmYTQtMDMzNGVlMWVmM2Zm LzEvR1BBRC02TjdBTlg1em43SVNqNEdhTHpRS0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXvr2MA0G CSqGSIb3DQEBCwUAA4IBAQBIpJ4HrLyzNDDBZ5A9IbopXNlSB81zzX2SgWQ2xDF7 eaPACrFd5m9W/Z/dG5BzQOChC/uUtu/D1Vc3U2ryDKG+5OAuKpmXQPBKWWzznIIf ZF3sxrYIxhqZFFH4wP7UTswGwKLzYcv37eDdUXpHKxtB7q/APwU6UiWHWNOF+TwW Yx9EhVfhdaXMT/QQkNq33AF+PvENz4b5BmTEV74WR1J6fUmCAmVHfVGUvgGi6k+D yjGCTHSAE1FYr013pjkzeHwBYISRcARjz/1IdGgjlOCJftEVc02EKTsKMsWsVSeq IRdUudl4vydJycrXhzITsaLVOrqomZ2lLTJaWd406W1M -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:34 2026 by rpki-client