This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/GlbsZaUDyP9PmaKM_V4Z3PmoH5k.roa File: GlbsZaUDyP9PmaKM_V4Z3PmoH5k.roa (raw, json) Hash identifier: 7tuCtRTGuEdmjaBWin9LjbWNl+8wGiODWmpQ/DLurRE= Subject key identifier: 1A:56:EC:65:A5:03:C8:FF:4F:99:A2:8C:FD:5E:19:DC:F9:A8:1F:99 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808D8019186BFB8DA6E65A03BCC2F8 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/GlbsZaUDyP9PmaKM_V4Z3PmoH5k.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8d:80:19:18:6b:fb:8d:a6:e6:5a:03:bc:c2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a56ec65a503c8ff4f99a28cfd5e19dcf9a81f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:f7:4a:5a:4c:de:dc:12:dd:8d:e2:08:d7: e4:8f:49:bb:af:19:b8:32:ab:e2:bc:a1:e5:cf:4b: 92:65:df:eb:eb:94:23:ac:a4:37:e4:3d:7f:dc:94: 49:6f:e7:39:fe:cf:b2:d8:f3:08:36:40:99:66:d3: 5e:01:f7:8c:1d:59:54:3d:97:e4:d7:49:72:5c:7c: 84:84:76:f9:bd:54:40:27:0f:a3:2c:b8:d2:3e:cf: 7a:b3:6a:d4:15:b1:6a:f0:9d:ef:ed:bb:44:32:bd: 99:63:ef:f9:00:4f:19:22:da:eb:ef:07:aa:a7:16: 3b:12:37:74:71:2f:94:54:ea:f8:8d:56:85:54:87: 0b:90:44:3b:f9:28:6c:ae:64:50:e7:2f:da:61:16: 9e:2b:ca:fe:7f:f0:1a:0b:6c:05:62:21:f9:80:46: 12:c3:91:a4:5d:67:ae:f3:0a:af:03:19:12:55:dc: 9a:98:06:cc:1e:0f:10:c2:4b:78:cc:ee:fc:59:d6: 68:60:6f:db:fd:e4:32:19:79:f4:ae:d9:ab:07:61: 23:f8:3c:9a:c1:26:65:3c:52:80:88:2d:9d:18:cd: 18:1a:cb:2a:02:8f:6b:e9:7b:32:4e:8f:56:35:bd: 44:ff:72:f4:58:bf:0c:9e:f9:cd:fe:5d:f2:ea:43: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:56:EC:65:A5:03:C8:FF:4F:99:A2:8C:FD:5E:19:DC:F9:A8:1F:99 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/GlbsZaUDyP9PmaKM_V4Z3PmoH5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.14.0/23 Signature Algorithm: sha256WithRSAEncryption 76:b7:b8:95:11:d9:6a:3c:f3:3a:25:41:c1:4f:76:a7:13:d7: 78:90:8b:12:bb:c5:e2:82:d3:ab:d1:ed:73:52:48:f3:52:ac: ff:a6:20:17:45:3f:20:5c:0e:2f:fc:5d:30:d0:a7:6c:46:22: 47:66:25:76:c2:4b:cc:a2:42:8e:53:3a:fe:63:e2:e2:d3:bd: 56:b9:46:76:c9:ca:ea:16:01:0c:3e:13:05:36:73:81:7d:6c: 97:86:5e:b7:6d:a8:5d:44:21:a3:7f:f4:36:d5:d3:9b:5a:4f: c2:32:c2:7c:c2:d5:dc:23:bb:0b:0e:0f:d2:20:ce:3d:ff:10: cd:ba:47:64:02:25:50:e1:09:d1:0d:33:58:21:e9:c0:04:74: 9d:4c:6a:2f:83:1e:d5:ab:e1:9c:91:40:68:ee:af:19:f3:90: f1:d6:b7:ab:a6:90:66:fd:9c:fb:cb:9a:3c:53:59:85:be:cf: 38:55:95:9e:ed:d0:70:61:d5:78:7f:e2:99:85:71:f0:16:b0: c6:0c:a7:2f:0f:37:44:b6:b7:93:77:fc:92:df:2e:a2:a8:52: ac:62:43:5d:5f:c2:62:31:7d:64:18:a0:c6:f1:13:47:ac:4d: bc:a5:11:ca:ef:70:26:70:bc:2b:c8:6a:c0:c1:d9:ec:fa:9e: 07:7e:ee:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gI2AGRhr+42m5loDvML4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTU2ZWM2NWE1MDNjOGZmNGY5OWEyOGNmZDVlMTlkY2Y5YTgxZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0H3SlpM3twS3Y3iCNfkj0m7rxm4 MqvivKHlz0uSZd/r65QjrKQ35D1/3JRJb+c5/s+y2PMINkCZZtNeAfeMHVlUPZfk 10lyXHyEhHb5vVRAJw+jLLjSPs96s2rUFbFq8J3v7btEMr2ZY+/5AE8ZItrr7weq pxY7Ejd0cS+UVOr4jVaFVIcLkEQ7+ShsrmRQ5y/aYRaeK8r+f/AaC2wFYiH5gEYS w5GkXWeu8wqvAxkSVdyamAbMHg8Qwkt4zO78WdZoYG/b/eQyGXn0rtmrB2Ej+Dya wSZlPFKAiC2dGM0YGssqAo9r6XsyTo9WNb1E/3L0WL8MnvnN/l3y6kMz2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpW7GWlA8j/T5mijP1eGdz5qB+ZMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvR2xic1phVUR5UDlQbWFLTV9WNFozUG1vSDVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8gOMA0G CSqGSIb3DQEBCwUAA4IBAQB2t7iVEdlqPPM6JUHBT3anE9d4kIsSu8XigtOr0e1z UkjzUqz/piAXRT8gXA4v/F0w0KdsRiJHZiV2wkvMokKOUzr+Y+Li071WuUZ2ycrq FgEMPhMFNnOBfWyXhl63bahdRCGjf/Q21dObWk/CMsJ8wtXcI7sLDg/SIM49/xDN ukdkAiVQ4QnRDTNYIenABHSdTGovgx7Vq+GckUBo7q8Z85Dx1rerppBm/Zz7y5o8 U1mFvs84VZWe7dBwYdV4f+KZhXHwFrDGDKcvDzdEtreTd/yS3y6iqFKsYkNdX8Ji MX1kGKDG8RNHrE28pRHK73AmcLwryGrAwdns+p4Hfu7Y -----END CERTIFICATE-----Generated at Wed Jan 21 08:03:58 2026 by rpki-client