This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa File: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (raw, json) Hash identifier: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0= Subject key identifier: 00:B8:FC:27:0F:EF:2C:F7:EE:C6:11:A4:AC:D6:5E:D9:99:87:1D:FE Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019B7A5AFFAF5BB0B848BCEE6F0D2967F062 Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57235 IP address blocks: 81.31.224.0/22 maxlen: 24 81.31.228.0/23 maxlen: 24 81.31.230.0/24 maxlen: 24 81.31.233.0/24 maxlen: 24 81.31.236.0/22 maxlen: 24 81.31.236.0/24 maxlen: 24 81.31.238.0/24 maxlen: 24 81.31.240.0/23 maxlen: 24 81.31.248.0/22 maxlen: 24 81.31.250.0/24 maxlen: 24 81.31.251.0/24 maxlen: 24 2a05:a6c0::/56 maxlen: 64 2a05:a6c7:ffff:ff00::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ff:af:5b:b0:b8:48:bc:ee:6f:0d:29:67:f0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00b8fc270fef2cf7eec611a4acd65ed999871dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:0e:fc:56:ec:c7:fe:b2:32:9d:5d:20:7f:77: 47:c0:64:2b:47:b6:be:bd:19:7e:9d:f2:34:c5:a0: 22:b0:bd:7d:ae:a9:63:d8:7b:54:cd:0f:da:ee:cf: 50:ed:70:74:38:d2:58:67:c6:7b:87:b3:db:e5:1f: 6d:64:0f:cf:76:10:33:62:0d:7f:5f:94:4b:8c:6a: 2e:ac:de:d2:35:8e:17:a3:84:19:76:16:a4:96:76: 0c:0e:ab:ba:5a:48:ce:1e:80:ce:15:20:74:d3:31: 68:ad:f9:c1:f8:63:93:d4:0e:fa:67:ea:6b:6d:11: 50:62:b4:b4:58:04:81:27:dc:e4:91:80:d3:3e:ad: ad:6e:24:ee:c4:aa:c3:49:59:07:d9:42:93:ad:f6: d0:74:74:a2:57:da:b0:1b:02:ce:e7:5a:82:97:3f: 5b:1f:1f:a0:ff:1c:a6:a8:e7:65:41:4e:92:7d:88: e2:ea:de:06:70:58:36:47:a8:ab:6c:1a:4e:85:11: d4:ae:06:ee:62:d1:24:f9:d0:10:52:46:3d:71:9e: a2:c8:9f:c4:b6:fa:d2:30:8e:14:64:1f:d9:57:bc: 87:80:1a:03:f1:68:ec:71:7f:8e:3a:3b:2e:7f:fe: 96:9a:87:af:9a:c7:83:50:1e:f2:df:fb:09:95:34: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:FC:27:0F:EF:2C:F7:EE:C6:11:A4:AC:D6:5E:D9:99:87:1D:FE X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.224.0-81.31.230.255 81.31.233.0/24 81.31.236.0-81.31.241.255 81.31.248.0/22 IPv6: 2a05:a6c0::/56 2a05:a6c7:ffff:ff00::/56 Signature Algorithm: sha256WithRSAEncryption b0:59:86:25:68:05:c2:57:7f:a2:ce:7f:0a:20:5f:1c:42:da: f3:ee:18:fa:45:24:b8:4e:dc:9a:2d:dd:a0:74:dd:81:d0:fe: e6:b9:c3:8e:ca:30:e0:e4:b8:43:7a:24:27:04:be:36:94:a8: 69:a0:d6:12:71:c0:e3:6c:04:fd:56:f4:71:18:1a:83:e4:7b: 92:5e:56:3e:a2:cb:58:2d:cc:d0:a4:18:90:d6:5f:87:cd:9c: d6:e1:2e:f7:4e:af:88:7f:5f:0f:d8:e2:c9:10:bc:5b:85:e5: 6c:2f:ec:e2:e1:e6:b3:23:b1:2c:cf:cd:a4:0d:ce:b9:02:31: 36:87:d0:ec:2f:72:6c:58:26:9a:1c:00:0f:f1:7b:95:a2:24: 1b:3d:73:0e:27:d9:8c:e6:ea:92:64:50:dd:fb:91:d8:10:63: c5:f4:c8:3e:c2:00:19:66:b3:43:60:23:a2:13:01:f4:e9:35: b2:75:8e:c5:59:f1:f5:21:c7:10:43:41:ac:d6:bc:9c:82:fc: 5e:35:98:60:3f:8b:69:62:11:1a:54:b2:74:26:46:35:62:01: 19:f6:33:0a:8b:28:ee:8c:eb:0d:a9:cd:1f:63:4a:4c:82:f6: ee:28:7d:56:ad:24:84:ec:da:e1:8f:00:79:b6:4f:2e:ee:14: 17:e2:91:70 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt6Wv+vW7C4SLzubw0pZ/BiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGI4ZmMyNzBmZWYyY2Y3ZWVjNjExYTRhY2Q2NWVkOTk5ODcxZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+g78VuzH/rIynV0gf3dHwGQrR7a+ vRl+nfI0xaAisL19rqlj2HtUzQ/a7s9Q7XB0ONJYZ8Z7h7Pb5R9tZA/PdhAzYg1/ X5RLjGourN7SNY4Xo4QZdhaklnYMDqu6WkjOHoDOFSB00zForfnB+GOT1A76Z+pr bRFQYrS0WASBJ9zkkYDTPq2tbiTuxKrDSVkH2UKTrfbQdHSiV9qwGwLO51qClz9b Hx+g/xymqOdlQU6SfYji6t4GcFg2R6irbBpOhRHUrgbuYtEk+dAQUkY9cZ6iyJ/E tvrSMI4UZB/ZV7yHgBoD8WjscX+OOjsuf/6WmoevmseDUB7y3/sJlTQdlQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFAC4/CcP7yz37sYRpKzWXtmZhx3+MB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvQUxqOEp3X3ZMUGZ1eGhHa3JOWmUyWm1ISGY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAuBAIAATAoMAwDBAVRH+AD BABRH+YDBABRH+kwDAMEAlEf7AMEAVEf8AMEAlEf+DAaBAIAAjAUAwgAKgWmwAAA AAMIACoFpsf///8wDQYJKoZIhvcNAQELBQADggEBALBZhiVoBcJXf6LOfwogXxxC 2vPuGPpFJLhO3Jot3aB03YHQ/ua5w47KMODkuEN6JCcEvjaUqGmg1hJxwONsBP1W 9HEYGoPke5JeVj6iy1gtzNCkGJDWX4fNnNbhLvdOr4h/Xw/Y4skQvFuF5Wwv7OLh 5rMjsSzPzaQNzrkCMTaH0OwvcmxYJpocAA/xe5WiJBs9cw4n2Yzm6pJkUN37kdgQ Y8X0yD7CABlms0NgI6ITAfTpNbJ1jsVZ8fUhxxBDQazWvJyC/F41mGA/i2liERpU snQmRjViARn2MwqLKO6M6w2pzR9jSkyC9u4ofVatJITs2uGPAHm2Ty7uFBfikXA= -----END CERTIFICATE-----Generated at Thu Jan 8 16:20:28 2026 by rpki-client