This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/GlWizv2ImorDlJ5qdqf22l6axV0.roa File: GlWizv2ImorDlJ5qdqf22l6axV0.roa (raw, json) Hash identifier: FPuxge79aWSqPlsBlXbn55Kr6pHUqkAHkE0a0KRPnXI= Subject key identifier: 1A:55:A2:CE:FD:88:9A:8A:C3:94:9E:6A:76:A7:F6:DA:5E:9A:C5:5D Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Certificate serial: 019B77595766E08008A30C6C4F064135C814 Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/GlWizv2ImorDlJ5qdqf22l6axV0.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57533 IP address blocks: 91.231.97.0/24 maxlen: 24 2001:67c:568::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:57:66:e0:80:08:a3:0c:6c:4f:06:41:35:c8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a55a2cefd889a8ac3949e6a76a7f6da5e9ac55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:bb:3b:8c:e3:21:ad:f9:85:fe:4c:90:89: 17:59:eb:81:b0:64:a0:03:5d:34:e5:b3:40:38:18: 80:ae:17:96:51:ea:cd:cf:89:3f:d5:1b:ea:07:b4: ac:fb:51:45:32:cc:90:84:8c:6b:2b:6c:69:28:46: 20:cd:62:9d:46:1c:94:0a:85:be:39:00:a9:b3:8b: cd:40:e6:35:b1:dc:70:8f:0c:69:d3:3f:df:41:d6: 5d:e1:c5:26:0d:ca:3d:a8:ee:50:da:0e:69:92:b3: 21:a0:dc:b5:ea:e4:f1:df:b4:18:9f:4a:00:bf:43: a5:e7:f8:1f:01:4f:60:5d:d1:7c:87:f9:d8:9c:9f: 85:dc:4d:4d:86:b3:8e:af:09:13:de:0e:88:34:9a: 9c:8d:d6:bb:07:14:00:01:83:89:27:b3:6f:f5:b2: 95:f6:91:a4:d3:d5:c6:70:f5:dc:21:5a:2a:fd:0c: 05:b7:23:39:7a:88:24:50:f6:5f:bc:78:eb:75:f4: 4a:3c:f7:ab:6c:83:f6:33:6e:09:17:39:4d:ca:a7: 33:ab:12:31:2f:08:c5:d0:b5:72:e0:e5:0a:44:d3: da:e9:4a:e4:77:cd:f0:12:48:03:63:8b:c0:5d:00: af:4a:b9:0a:fa:94:11:88:e4:fc:b9:e8:45:df:3b: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:55:A2:CE:FD:88:9A:8A:C3:94:9E:6A:76:A7:F6:DA:5E:9A:C5:5D X509v3 Authority Key Identifier: keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/GlWizv2ImorDlJ5qdqf22l6axV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.97.0/24 IPv6: 2001:67c:568::/48 Signature Algorithm: sha256WithRSAEncryption 15:ca:d7:d9:0f:ee:a0:ce:9a:57:41:3d:90:0c:d0:8f:ef:b7: 00:14:5f:68:3a:39:0d:d7:9e:d0:b1:c0:21:c3:15:01:90:19: bc:11:ac:df:04:da:d4:4a:7c:a6:db:41:b4:5b:41:7a:f6:8a: 07:19:84:ce:60:d3:36:e0:94:00:4a:71:42:a4:cc:97:a3:65: 07:74:26:6f:b0:15:be:84:7c:6f:bf:67:2d:bd:2a:5f:89:a1: 40:7f:19:47:7b:be:df:79:9c:73:33:ca:a4:6c:00:b1:32:18: b3:78:c0:a5:fa:79:69:11:58:c2:15:b4:f3:f5:05:18:00:52: e7:e0:9a:b0:c3:de:7d:e3:d9:a9:e1:97:04:9d:bb:9e:a6:8f: 9c:20:79:f5:d2:1f:85:36:75:57:5b:07:ff:dd:5b:72:2e:1b: 79:4c:0b:31:09:fc:61:6e:14:2b:52:8f:65:b3:95:c4:9b:ac: 85:7d:68:d8:53:ed:41:79:45:34:7e:bf:f5:86:13:83:2f:a0: 76:d4:1a:f1:1e:9c:0b:57:52:1a:ac:4e:4e:f2:66:47:76:89: 97:8a:ed:05:22:4b:9d:22:e0:ad:a5:3d:5b:0c:03:20:56:80: 9d:0d:60:3c:f1:98:09:c9:ba:4c:7e:4f:30:98:60:91:62:99: 30:f3:eb:09 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WVdm4IAIowxsTwZBNcgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw YmVhMzEwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTU1YTJjZWZkODg5YThhYzM5NDllNmE3NmE3ZjZkYTVlOWFjNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30q7O4zjIa35hf5MkIkXWeuBsGSg A1005bNAOBiArheWUerNz4k/1RvqB7Ss+1FFMsyQhIxrK2xpKEYgzWKdRhyUCoW+ OQCps4vNQOY1sdxwjwxp0z/fQdZd4cUmDco9qO5Q2g5pkrMhoNy16uTx37QYn0oA v0Ol5/gfAU9gXdF8h/nYnJ+F3E1NhrOOrwkT3g6INJqcjda7BxQAAYOJJ7Nv9bKV 9pGk09XGcPXcIVoq/QwFtyM5eogkUPZfvHjrdfRKPPerbIP2M24JFzlNyqczqxIx LwjF0LVy4OUKRNPa6Urkd83wEkgDY4vAXQCvSrkK+pQRiOT8uehF3zsxzQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBpVos79iJqKw5Seanan9tpemsVdMB8GA1UdIwQY MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt OGU2NTI5NDBhMDlkLzEvR2xXaXp2Mkltb3JEbEo1cWRxZjIybDZheFYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+dhMA8E AgACMAkDBwAgAQZ8BWgwDQYJKoZIhvcNAQELBQADggEBABXK19kP7qDOmldBPZAM 0I/vtwAUX2g6OQ3XntCxwCHDFQGQGbwRrN8E2tRKfKbbQbRbQXr2igcZhM5g0zbg lABKcUKkzJejZQd0Jm+wFb6EfG+/Zy29Kl+JoUB/GUd7vt95nHMzyqRsALEyGLN4 wKX6eWkRWMIVtPP1BRgAUufgmrDD3n3j2anhlwSdu56mj5wgefXSH4U2dVdbB//d W3IuG3lMCzEJ/GFuFCtSj2WzlcSbrIV9aNhT7UF5RTR+v/WGE4MvoHbUGvEenAtX UhqsTk7yZkd2iZeK7QUiS50i4K2lPVsMAyBWgJ0NYDzxmAnJukx+TzCYYJFimTDz 6wk= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:32 2026 by rpki-client