This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GlZXoinX3kUcLM9c6JPWvSO6Klw.roa
File: GlZXoinX3kUcLM9c6JPWvSO6Klw.roa (raw, json)
Hash identifier: W7zGKw7iOG02LzQGMez0BYoRLdL1J93o2DKxFOmNNh8=
Subject key identifier: 1A:56:57:A2:29:D7:DE:45:1C:2C:CF:5C:E8:93:D6:BD:23:BA:2A:5C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019B2C1BADE0E8BA71F3F8C320E5D2B1DCC1
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GlZXoinX3kUcLM9c6JPWvSO6Klw.roa
Signing time: Wed 17 Dec 2025 11:39:29 +0000
ROA not before: Wed 17 Dec 2025 11:39:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205454
IP address blocks: 82.118.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2c:1b:ad:e0:e8:ba:71:f3:f8:c3:20:e5:d2:b1:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Dec 17 11:39:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a5657a229d7de451c2ccf5ce893d6bd23ba2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:05:90:0a:40:fb:ab:81:a1:b4:d6:58:67:
fe:9b:30:2a:89:e7:66:bf:24:89:c4:c4:6c:a4:2b:
72:c3:29:27:b9:73:9e:13:db:08:65:18:82:92:f8:
6c:e3:38:e9:ef:77:fd:6b:4a:68:2d:66:1a:64:b8:
e4:0a:e4:c3:e5:a4:29:29:e4:8e:f7:cc:66:0c:e9:
b9:85:4a:81:3c:2c:66:2a:ab:0a:f8:82:87:79:98:
e3:25:11:7d:86:41:89:1f:e8:21:8e:6e:93:af:98:
c2:0e:44:18:a0:c7:1c:26:4b:27:dc:b1:00:d9:65:
5e:06:14:06:e3:46:56:ae:47:49:16:05:eb:d9:0b:
81:85:06:bc:c1:58:60:bb:3a:4a:51:b7:52:04:3a:
b4:0e:fb:80:5f:57:e6:16:4b:7d:37:3b:1f:46:4c:
7b:0f:62:dd:2b:0e:f3:9d:6b:d2:33:26:d8:04:f6:
49:d3:62:b7:60:b2:05:aa:23:9b:43:aa:77:c4:a8:
07:34:c2:c2:6b:5f:6e:ae:16:f9:c7:18:f9:38:d5:
d7:0f:84:77:6c:70:2d:71:0a:ab:14:92:5d:12:1c:
97:d5:23:00:f9:f4:5e:b9:da:7e:de:30:80:5c:21:
c4:99:58:08:4b:1a:c4:b6:e2:b4:ec:5f:39:80:6d:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:57:A2:29:D7:DE:45:1C:2C:CF:5C:E8:93:D6:BD:23:BA:2A:5C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GlZXoinX3kUcLM9c6JPWvSO6Klw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.237.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c4:a4:60:6c:2f:b9:af:a9:99:e0:6b:9c:84:2a:84:9f:68:
98:f5:bd:87:51:f8:70:7e:b5:3d:6e:62:5a:89:70:f6:4b:fd:
68:61:a7:cb:5d:f5:8c:d7:37:00:af:b0:84:71:5d:3b:7e:32:
1f:c5:2b:ac:d1:ac:fd:d4:29:8a:c4:ef:fb:1f:3b:87:42:60:
d3:ab:87:6c:74:e1:44:5f:86:32:f3:9a:dc:7e:aa:77:39:8c:
18:0a:c0:35:61:f7:d0:31:bd:f5:8a:cf:63:7b:a2:0d:c9:99:
94:19:9c:9e:f8:ad:a4:1a:ca:43:92:db:99:e5:ed:63:6c:9b:
a8:81:1d:32:4e:08:3a:95:05:44:3c:5d:69:a3:99:e4:d7:2a:
cf:58:94:7c:53:7e:08:de:39:73:e1:b1:f1:5f:ae:79:0a:46:
52:9e:3e:03:12:af:11:45:9b:e9:f3:d9:48:93:18:9b:45:d2:
02:0f:0b:54:a0:32:cf:00:79:bb:a3:96:28:11:69:dd:e4:b1:
0e:d8:44:75:54:de:e2:47:89:fe:5a:37:ae:6e:e3:ae:14:4f:
f4:f9:4f:69:0b:ea:34:6d:59:a3:d1:16:5c:9b:fd:ca:12:d4:
69:f6:9e:3f:df:6e:ab:63:2e:8d:7f:30:31:36:c7:f1:a4:ab:
dc:69:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:01:24 2025 by rpki-client