This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa File: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (raw, json) Hash identifier: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8= Subject key identifier: 18:B0:86:3C:B0:F6:84:2E:45:FC:F7:34:6B:A0:50:04:7A:9C:B9:0E Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B0A4F352C895AF3F565B94AAF4EE3 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200436 IP address blocks: 5.42.217.0/24 maxlen: 24 62.3.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0a:4f:35:2c:89:5a:f3:f5:65:b9:4a:af:4e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18b0863cb0f6842e45fcf7346ba050047a9cb90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:6b:76:9d:e6:f5:16:d9:5e:36:bf:3e:12: bd:f9:08:89:5b:2d:11:f8:a0:b5:98:b7:05:ac:5e: ef:0a:e5:0d:9c:5b:5c:85:d4:a3:a4:5f:a2:e4:cb: 98:ff:24:9b:9f:36:b4:57:d3:0e:cd:d7:f4:4e:00: aa:5a:80:cd:20:ea:45:e0:85:ef:a9:29:6f:37:84: 76:20:0e:01:de:3f:d2:08:4a:66:7c:9e:ee:3d:65: 9b:42:37:f0:87:71:ff:d6:2f:69:28:14:f1:49:74: ca:93:63:21:24:a5:93:9a:92:71:54:f1:44:5e:30: eb:9f:fc:71:ec:00:23:d0:b2:49:2b:1a:d7:31:fa: a0:a5:22:58:6b:65:f0:05:48:76:df:5e:5b:77:1f: 18:80:31:25:fd:98:5e:05:82:71:6a:ce:6b:25:95: f8:8d:b4:f7:c1:52:f6:db:66:2a:c6:b9:28:c7:39: c5:21:f5:ae:f2:d7:ec:f5:3f:42:00:ea:7c:b6:2e: b1:bd:1c:40:d9:34:af:52:b3:68:cc:26:d1:12:6a: 0d:70:f5:ae:ad:5d:f2:ca:6e:2a:05:89:0d:f8:06: b2:fe:fc:30:7a:f8:b7:5e:01:ed:8e:c1:03:74:74: 7f:44:46:2b:96:e3:75:c7:10:4a:cd:f4:ef:d3:56: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B0:86:3C:B0:F6:84:2E:45:FC:F7:34:6B:A0:50:04:7A:9C:B9:0E X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.217.0/24 62.3.14.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:bd:32:37:b0:b1:19:e1:bc:3f:ed:ca:3b:a9:76:47:13:a0: 93:7d:2e:91:d9:68:4d:17:7e:39:75:ac:f1:cc:0d:27:95:dc: 89:79:a9:9d:b1:fe:42:6d:cc:d4:0b:65:1e:6d:34:41:cb:1c: 5c:b5:f9:9f:ff:34:4a:ca:c7:d2:3d:a5:7e:96:e2:32:ad:5f: 93:0d:d5:82:f2:f9:af:c7:66:3a:6d:36:c1:d3:93:2c:90:86: 36:42:cb:b5:ca:bd:bc:15:1e:74:80:e3:31:c9:1e:85:97:95: 8f:4a:80:71:01:54:13:0b:6e:46:c1:f0:16:45:db:2b:84:73: 33:32:b0:bd:db:89:d8:6a:89:18:d9:2d:5f:1a:09:f9:99:95: fc:30:b9:64:11:b2:de:9d:62:0b:7f:ce:97:52:92:47:54:39: 05:b1:62:b6:a6:06:5e:5a:cd:f5:34:8c:cd:54:d9:c7:26:1a: 9f:cf:ab:9a:3a:20:70:23:c0:06:af:8e:d9:13:cf:aa:ff:40: 61:dc:4b:ce:96:0d:4a:79:17:c2:7f:7c:46:db:a1:1b:7c:7c: 8f:c7:37:b2:4d:9f:38:29:c8:bc:e4:cb:54:f0:71:dd:6a:bc: f7:bd:a8:b0:3f:f5:e3:9a:cc:2f:ce:63:39:b5:27:9a:5a:9e: e0:e0:8d:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WwpPNSyJWvP1ZblKr07jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGIwODYzY2IwZjY4NDJlNDVmY2Y3MzQ2YmEwNTAwNDdhOWNiOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg5rdp3m9RbZXja/PhK9+QiJWy0R +KC1mLcFrF7vCuUNnFtchdSjpF+i5MuY/ySbnza0V9MOzdf0TgCqWoDNIOpF4IXv qSlvN4R2IA4B3j/SCEpmfJ7uPWWbQjfwh3H/1i9pKBTxSXTKk2MhJKWTmpJxVPFE XjDrn/xx7AAj0LJJKxrXMfqgpSJYa2XwBUh2315bdx8YgDEl/ZheBYJxas5rJZX4 jbT3wVL222YqxrkoxznFIfWu8tfs9T9CAOp8ti6xvRxA2TSvUrNozCbREmoNcPWu rV3yym4qBYkN+Aay/vwwevi3XgHtjsEDdHR/REYrluN1xxBKzfTv01bJgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBiwhjyw9oQuRfz3NGugUAR6nLkOMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvR0xDR1BMRDJoQzVGX1BjMGE2QlFCSHFjdVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSrZAwQA PgMOMA0GCSqGSIb3DQEBCwUAA4IBAQAvvTI3sLEZ4bw/7co7qXZHE6CTfS6R2WhN F345dazxzA0nldyJeamdsf5CbczUC2UebTRByxxctfmf/zRKysfSPaV+luIyrV+T DdWC8vmvx2Y6bTbB05MskIY2Qsu1yr28FR50gOMxyR6Fl5WPSoBxAVQTC25GwfAW RdsrhHMzMrC924nYaokY2S1fGgn5mZX8MLlkEbLenWILf86XUpJHVDkFsWK2pgZe Ws31NIzNVNnHJhqfz6uaOiBwI8AGr47ZE8+q/0Bh3EvOlg1KeRfCf3xG26EbfHyP xzeyTZ84Kci85MtU8HHdarz3vaiwP/XjmswvzmM5tSeaWp7g4I0G -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:25 2026 by rpki-client