This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/GLNDYXAUnDzKSzn1_YuLfC8bH5w.roa File: GLNDYXAUnDzKSzn1_YuLfC8bH5w.roa (raw, json) Hash identifier: BzzkzH+5YXbHtZ+h0iTwqK2cTDVEy9WeBJ/Car4rJzc= Subject key identifier: 18:B3:43:61:70:14:9C:3C:CA:4B:39:F5:FD:8B:8B:7C:2F:1B:1F:9C Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Certificate serial: 019B7C7FBC9876D04C64F605DA9F77E4197B Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/GLNDYXAUnDzKSzn1_YuLfC8bH5w.roa Signing time: Fri 02 Jan 2026 02:18:24 +0000 ROA not before: Fri 02 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43122 IP address blocks: 194.110.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bc:98:76:d0:4c:64:f6:05:da:9f:77:e4:19:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18b3436170149c3cca4b39f5fd8b8b7c2f1b1f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:3c:1d:f2:dc:c3:d9:d9:38:6a:91:85:78: 2b:b9:a7:a5:cd:29:92:1a:e3:a9:1b:2b:5b:ce:0c: c2:d2:70:0e:2d:8e:dc:b1:d6:93:44:2d:8e:fd:14: 26:70:1c:e7:36:71:80:78:ca:45:39:55:29:c0:96: 76:2b:25:b8:63:a1:58:c7:00:c4:2f:89:b0:5c:55: 6b:cb:3a:b0:de:68:99:23:c3:a7:59:2b:22:c7:dd: 7f:1a:29:47:dd:59:79:0a:4d:bd:7d:09:6d:58:b5: db:97:8e:cf:f2:33:2e:ef:b0:6c:6e:57:64:9c:63: 83:88:59:b8:55:eb:cc:46:d3:66:d7:a3:88:62:5d: bf:df:f1:29:2d:37:cd:20:ab:10:00:5d:d3:da:bb: a1:16:5b:ba:5c:4a:38:24:28:66:df:e0:cc:ac:53: 45:e1:17:81:34:bd:e9:e4:01:9b:9b:bc:67:dc:b6: 6d:dd:7f:27:7a:d6:79:77:7c:b1:60:42:01:9f:9d: 8a:b8:30:90:1e:ce:79:a5:73:61:18:e1:3b:1c:db: da:96:df:d9:8b:87:8e:fc:e5:ff:5b:cf:ec:16:9f: 9c:52:83:7f:76:a9:3e:b6:96:e8:02:5b:9e:5f:a7: f0:5e:57:f3:3e:55:7e:1f:9d:7d:2d:2d:48:e6:1f: 25:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:43:61:70:14:9C:3C:CA:4B:39:F5:FD:8B:8B:7C:2F:1B:1F:9C X509v3 Authority Key Identifier: keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/GLNDYXAUnDzKSzn1_YuLfC8bH5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.128.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:75:f5:ee:74:a5:ab:c9:8d:3b:2a:39:ca:f7:28:64:80:13: 4d:c7:74:a0:b4:37:00:b6:06:1e:55:c3:f5:17:3c:a7:8f:d8: c6:cd:2f:73:2e:83:5c:4e:09:fe:2f:d5:ec:eb:01:0b:37:d3: 22:b9:e3:8b:6c:ce:7a:95:0c:cc:07:c7:66:05:51:0f:f2:1a: d4:9c:12:44:f3:43:05:da:3b:ed:6c:71:40:74:b4:da:c0:02: 2e:77:fc:04:57:43:f4:fb:8e:ab:ad:ef:be:cd:07:4a:40:73: 06:4c:b6:d6:97:4d:9e:2b:15:55:42:4f:01:87:2c:32:d5:0c: 9a:12:e9:80:ca:56:16:58:e1:20:7a:00:60:aa:af:e7:64:c3: 14:97:30:df:76:65:77:6c:97:b2:df:7d:59:a1:bb:d0:9f:85: ac:b9:fe:7a:5f:26:fc:41:4f:9e:c3:3c:ad:a4:48:e1:e5:ff: 40:8a:00:9d:31:b2:da:6d:f0:e9:3f:0a:70:57:d3:0e:3c:f3: 68:7d:2b:d4:14:84:95:f8:f9:ee:d2:70:c5:4c:d1:d3:39:77: f6:2a:ce:7e:d5:c2:22:e6:ca:82:e2:9e:39:76:55:e1:9d:3a: 03:65:20:e0:ce:5c:eb:79:1a:a8:8e:b5:25:1a:9f:8d:a8:d5: d7:16:63:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7yYdtBMZPYF2p935Bl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjI3ODFjYTE0MzZkOTZkNjc3NWJhMjBjNWNmMmM3NWRm ZDEzZTkwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGIzNDM2MTcwMTQ5YzNjY2E0YjM5ZjVmZDhiOGI3YzJmMWIxZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviM8HfLcw9nZOGqRhXgruaelzSmS GuOpGytbzgzC0nAOLY7csdaTRC2O/RQmcBznNnGAeMpFOVUpwJZ2KyW4Y6FYxwDE L4mwXFVryzqw3miZI8OnWSsix91/GilH3Vl5Ck29fQltWLXbl47P8jMu77Bsbldk nGODiFm4VevMRtNm16OIYl2/3/EpLTfNIKsQAF3T2ruhFlu6XEo4JChm3+DMrFNF 4ReBNL3p5AGbm7xn3LZt3X8netZ5d3yxYEIBn52KuDCQHs55pXNhGOE7HNvalt/Z i4eO/OX/W8/sFp+cUoN/dqk+tpboAlueX6fwXlfzPlV+H519LS1I5h8lPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBizQ2FwFJw8yks59f2Li3wvGx+cMB8GA1UdIwQY MBaAFE1ieByhQ22W1ndbogxc8sdd/RPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUt OGUwYmRmZjIzN2Y4LzEvR0xORFlYQVVuRHpLU3puMV9ZdUxmQzhiSDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUtOGUwYmRmZjIzN2Y4 LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6AMA0G CSqGSIb3DQEBCwUAA4IBAQBqdfXudKWryY07KjnK9yhkgBNNx3SgtDcAtgYeVcP1 Fzynj9jGzS9zLoNcTgn+L9Xs6wELN9MiueOLbM56lQzMB8dmBVEP8hrUnBJE80MF 2jvtbHFAdLTawAIud/wEV0P0+46rre++zQdKQHMGTLbWl02eKxVVQk8Bhywy1Qya EumAylYWWOEgegBgqq/nZMMUlzDfdmV3bJey331ZobvQn4Wsuf56Xyb8QU+ewzyt pEjh5f9AigCdMbLabfDpPwpwV9MOPPNofSvUFISV+Pnu0nDFTNHTOXf2Ks5+1cIi 5sqC4p45dlXhnToDZSDgzlzreRqojrUlGp+NqNXXFmNl -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:54 2026 by rpki-client