This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/GllxanRi9edQc4SoJ1p-sRQjjuU.roa File: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (raw, json) Hash identifier: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI= Subject key identifier: 1A:59:71:6A:74:62:F5:E7:50:73:84:A8:27:5A:7E:B1:14:23:8E:E5 Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0 Certificate serial: 019B78A30627E2D69A2C7786E6ABA56EAE80 Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/GllxanRi9edQc4SoJ1p-sRQjjuU.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212961 IP address blocks: 31.216.132.0/22 maxlen: 22 194.180.144.0/22 maxlen: 22 194.180.146.0/24 maxlen: 24 194.180.147.0/24 maxlen: 24 194.180.148.0/23 maxlen: 23 2a0c:abc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:06:27:e2:d6:9a:2c:77:86:e6:ab:a5:6e:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0 Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a59716a7462f5e7507384a8275a7eb114238ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:89:88:2c:17:81:e9:15:bd:37:ce:15:9f: 4e:77:af:99:86:ad:4a:a5:44:61:02:1e:1c:51:b0: b6:ca:24:2c:a8:6a:31:92:5a:da:b0:5d:67:1a:b3: d4:24:dd:01:e4:5c:cd:43:e2:ad:db:73:6f:f7:ab: a5:9c:57:37:d7:dd:6c:6f:b5:03:e8:4b:c3:52:6e: 31:3a:a9:56:01:a5:91:05:96:93:75:02:37:17:4d: a3:b0:3b:62:ec:24:44:1b:00:e1:34:11:d3:6e:93: 8f:65:59:5d:10:4b:97:e6:7a:c6:9c:15:4f:ef:d2: 6a:3c:17:6a:b7:c6:68:c2:e9:60:58:04:55:59:5f: f2:14:2c:6d:58:0e:40:be:41:89:f8:a9:f2:9f:94: c5:24:51:43:83:04:f7:7c:e0:5b:e0:74:8f:71:33: 7d:69:00:02:e0:0c:f6:0e:a5:16:01:67:ae:cd:00: f7:31:28:5e:82:df:2d:34:61:20:1e:64:14:4f:12: d9:78:1c:01:3a:e1:60:73:74:3d:6c:23:63:d3:6c: 1b:ce:cf:dc:dc:76:cf:db:c5:f8:9e:8f:ad:ef:c0: e6:de:25:2a:83:3c:3f:8f:c6:e8:84:24:1e:e8:10: dd:f0:a2:92:d9:f1:7f:c2:97:d9:40:b4:ba:65:e1: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:71:6A:74:62:F5:E7:50:73:84:A8:27:5A:7E:B1:14:23:8E:E5 X509v3 Authority Key Identifier: keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/GllxanRi9edQc4SoJ1p-sRQjjuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.132.0/22 194.180.144.0-194.180.149.255 IPv6: 2a0c:abc0::/29 Signature Algorithm: sha256WithRSAEncryption 01:1e:6f:61:f5:ab:53:72:c4:a8:1a:e3:9a:16:fb:28:b7:f7: 98:7e:0b:69:d0:dc:ec:c3:90:09:ab:42:9a:d9:03:8b:d7:02: b1:32:2e:66:a4:f6:e1:ac:1c:a3:10:df:81:96:79:2e:7d:be: 2b:70:47:96:f4:9a:14:a2:e8:40:ff:ba:d0:00:c2:12:66:86: 31:f6:90:b8:e2:fa:5f:ab:a9:f5:93:56:0d:7e:e6:e8:f5:2d: 70:44:90:3d:64:58:f4:d8:93:64:1e:74:54:94:88:c5:13:28: 27:bf:ec:b7:94:2f:bc:65:fe:a0:75:d1:fe:c6:e3:cf:5b:27: 3b:a1:01:7f:29:7d:3f:6d:1e:17:47:0b:83:a5:95:2a:e1:65: d0:3d:35:6c:16:12:40:b1:a3:de:61:ab:83:fc:37:db:83:49: 36:b3:b0:d7:8a:76:b4:e4:5c:54:8c:2e:e5:09:1b:cb:d3:88: f4:07:01:fc:32:c5:f1:e8:0f:7d:c3:1e:69:bb:10:a9:58:87: 3e:12:15:29:20:df:b6:f6:14:78:d5:b9:82:67:9f:5d:10:5a: eb:3b:8a:ab:50:f0:98:a1:c5:25:15:d5:d9:7c:c1:b7:ef:d8: 90:34:ac:fa:08:7d:f6:56:7e:3f:f2:fb:25:98:0e:20:a4:cb: 66:0a:9a:ff -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt4owYn4taaLHeG5qulbq6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MWU2Nzk5YmM1Y2EyODVhMzc2MzcyZjBiNjM0NWRmZmM4 N2I4YzAwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTU5NzE2YTc0NjJmNWU3NTA3Mzg0YTgyNzVhN2ViMTE0MjM4ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pqJiCwXgekVvTfOFZ9Od6+Zhq1K pURhAh4cUbC2yiQsqGoxklrasF1nGrPUJN0B5FzNQ+Kt23Nv96ulnFc3191sb7UD 6EvDUm4xOqlWAaWRBZaTdQI3F02jsDti7CREGwDhNBHTbpOPZVldEEuX5nrGnBVP 79JqPBdqt8ZowulgWARVWV/yFCxtWA5AvkGJ+Knyn5TFJFFDgwT3fOBb4HSPcTN9 aQAC4Az2DqUWAWeuzQD3MShegt8tNGEgHmQUTxLZeBwBOuFgc3Q9bCNj02wbzs/c 3HbP28X4no+t78Dm3iUqgzw/j8bohCQe6BDd8KKS2fF/wpfZQLS6ZeEH7QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFBpZcWp0YvXnUHOEqCdafrEUI47lMB8GA1UdIwQY MBaAFNUeZ5m8XKKFo3Y3LwtjRd/8h7jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEt OWNhMjUxYzA1NDhiLzEvR2xseGFuUmk5ZWRRYzRTb0oxcC1zUlFqanVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEtOWNhMjUxYzA1NDhi LzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCH9iEMAwD BATCtJADBAHCtJQwDQQCAAIwBwMFAyoMq8AwDQYJKoZIhvcNAQELBQADggEBAAEe b2H1q1NyxKga45oW+yi395h+C2nQ3OzDkAmrQprZA4vXArEyLmak9uGsHKMQ34GW eS59vitwR5b0mhSi6ED/utAAwhJmhjH2kLji+l+rqfWTVg1+5uj1LXBEkD1kWPTY k2QedFSUiMUTKCe/7LeUL7xl/qB10f7G489bJzuhAX8pfT9tHhdHC4OllSrhZdA9 NWwWEkCxo95hq4P8N9uDSTazsNeKdrTkXFSMLuUJG8vTiPQHAfwyxfHoD33DHmm7 EKlYhz4SFSkg37b2FHjVuYJnn10QWus7iqtQ8JihxSUV1dl8wbfv2JA0rPoIffZW fj/y+yWYDiCky2YKmv8= -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:16 2026 by rpki-client