This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Gl6gL_AyYVSPYDsFF_ISFG44hls.roa File: Gl6gL_AyYVSPYDsFF_ISFG44hls.roa (raw, json) Hash identifier: oDlFfcWnlrWJUdAtcMXp8OUionfYx8aX2VZxCqNHhMc= Subject key identifier: 1A:5E:A0:2F:F0:32:61:54:8F:60:3B:05:17:F2:12:14:6E:38:86:5B Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B3379A8F008FC7EDB15DC1573AA9FD6FB Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Gl6gL_AyYVSPYDsFF_ISFG44hls.roa Signing time: Thu 18 Dec 2025 21:59:29 +0000 ROA not before: Thu 18 Dec 2025 21:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 91.234.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:79:a8:f0:08:fc:7e:db:15:dc:15:73:aa:9f:d6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Dec 18 21:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a5ea02ff03261548f603b0517f212146e38865b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:1b:04:3c:bd:bb:8f:78:e8:7f:f9:28:04: ce:b6:e2:aa:95:15:2e:d3:05:0b:fb:e1:da:2d:11: cc:6a:51:7e:da:d2:b0:49:f7:3a:b9:a7:fd:c4:49: 89:38:56:e9:a3:90:8b:47:f3:5c:28:98:3a:14:c4: 2a:9a:2d:04:d8:28:eb:7e:fc:e1:87:e8:0f:60:b5: f0:29:51:ab:05:b6:65:c5:a3:ac:d3:f6:80:2f:85: 02:84:a4:7f:77:1c:ae:e4:f0:46:a9:f2:1d:42:5d: 4e:c2:3c:2d:14:5f:31:ed:98:c7:80:70:4b:45:04: 77:c5:0c:f7:5c:19:78:cd:e2:fc:0d:f1:f6:73:97: ca:e4:04:ef:56:6d:94:04:47:df:30:07:d9:ac:2b: 19:04:9b:38:6c:e5:4f:d9:ca:f7:88:bc:44:d8:c2: 39:c4:db:c1:96:62:56:85:3c:27:6b:21:37:23:c9: 59:69:4a:ae:10:6a:4d:d1:69:95:18:00:8b:20:f4: a8:a7:85:cd:01:eb:4e:aa:8c:d4:09:7e:17:00:83: 9d:3f:ce:f8:ff:75:0a:a7:3e:e7:80:cc:9e:ec:81: 04:1d:32:da:c1:24:a5:5f:d3:6b:35:9f:82:74:db: 1c:d3:31:51:33:4b:01:2d:c7:1b:9e:9d:6e:18:ab: 56:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:A0:2F:F0:32:61:54:8F:60:3B:05:17:F2:12:14:6E:38:86:5B X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Gl6gL_AyYVSPYDsFF_ISFG44hls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.22.0/24 Signature Algorithm: sha256WithRSAEncryption 56:59:33:84:ef:8c:97:b7:ac:7e:aa:e7:af:0f:08:f0:24:8d: 1e:61:ac:83:bf:ff:67:05:b6:5e:ec:f5:52:74:37:59:f6:d5: ef:f0:65:bb:a9:b1:c0:9e:f6:04:83:8f:06:80:c8:7d:cf:d1: 29:c2:76:1a:6b:9d:e4:d4:6e:4f:0e:bb:01:58:75:db:16:5e: df:cb:19:7f:a1:69:72:53:38:33:da:52:40:64:cd:55:89:14: f1:a6:b7:7c:11:e3:52:7d:9a:f0:da:f2:31:ed:10:ed:82:2d: 02:5b:c5:62:4b:bd:f5:0c:32:c0:d5:74:dd:d2:96:44:75:88: a8:93:68:73:65:c9:18:1f:92:b1:09:10:2d:5c:16:cc:29:38: c5:99:45:af:35:32:73:55:62:87:79:ab:76:92:5a:01:c2:93: b5:39:d2:81:3b:b4:c1:9e:80:e9:ae:04:46:66:05:24:5d:af: 98:4b:e0:2c:bd:4b:56:44:f0:39:ad:55:a5:d5:08:1b:79:73: 88:49:d1:d2:5a:6f:ef:d0:90:4b:5a:b2:1b:45:b6:37:ea:0b: ce:46:3e:1c:05:50:9f:0e:43:17:cf:79:a6:fc:ca:f7:1c:80: 76:fc:71:d0:89:d5:cf:fe:37:b5:86:0e:d5:3c:0e:52:a3:20: 9c:c3:04:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZszeajwCPx+2xXcFXOqn9b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUxMjE4MjE1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTVlYTAyZmYwMzI2MTU0OGY2MDNiMDUxN2YyMTIxNDZlMzg4NjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl0bBDy9u4946H/5KATOtuKqlRUu 0wUL++HaLRHMalF+2tKwSfc6uaf9xEmJOFbpo5CLR/NcKJg6FMQqmi0E2Cjrfvzh h+gPYLXwKVGrBbZlxaOs0/aAL4UChKR/dxyu5PBGqfIdQl1OwjwtFF8x7ZjHgHBL RQR3xQz3XBl4zeL8DfH2c5fK5ATvVm2UBEffMAfZrCsZBJs4bOVP2cr3iLxE2MI5 xNvBlmJWhTwnayE3I8lZaUquEGpN0WmVGACLIPSop4XNAetOqozUCX4XAIOdP874 /3UKpz7ngMye7IEEHTLawSSlX9NrNZ+CdNsc0zFRM0sBLccbnp1uGKtWgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpeoC/wMmFUj2A7BRfyEhRuOIZbMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvR2w2Z0xfQXlZVlNQWURzRkZfSVNGRzQ0aGxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+oWMA0G CSqGSIb3DQEBCwUAA4IBAQBWWTOE74yXt6x+quevDwjwJI0eYayDv/9nBbZe7PVS dDdZ9tXv8GW7qbHAnvYEg48GgMh9z9EpwnYaa53k1G5PDrsBWHXbFl7fyxl/oWly Uzgz2lJAZM1ViRTxprd8EeNSfZrw2vIx7RDtgi0CW8ViS731DDLA1XTd0pZEdYio k2hzZckYH5KxCRAtXBbMKTjFmUWvNTJzVWKHeat2kloBwpO1OdKBO7TBnoDprgRG ZgUkXa+YS+AsvUtWRPA5rVWl1QgbeXOISdHSWm/v0JBLWrIbRbY36gvORj4cBVCf DkMXz3mm/Mr3HIB2/HHQidXP/je1hg7VPA5SoyCcwwRp -----END CERTIFICATE-----Generated at Sat Dec 20 04:20:19 2025 by rpki-client