This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/alihfSS4B3Geqm6PYUEy-KuQvzA.roa File: alihfSS4B3Geqm6PYUEy-KuQvzA.roa (raw, json) Hash identifier: 6oJ3+PB5OhDrqr0b3FhYTDtyIwAlvpoiat+OBP6GIHA= Subject key identifier: 6A:58:A1:7D:24:B8:07:71:9E:AA:6E:8F:61:41:32:F8:AB:90:BF:30 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B921F3E9EEF1208A03DA5D93A03E45A9D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/alihfSS4B3Geqm6PYUEy-KuQvzA.roa Signing time: Tue 06 Jan 2026 07:04:39 +0000 ROA not before: Tue 06 Jan 2026 07:04:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209978 IP address blocks: 89.106.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:1f:3e:9e:ef:12:08:a0:3d:a5:d9:3a:03:e4:5a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 6 07:04:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a58a17d24b807719eaa6e8f614132f8ab90bf30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:53:7a:02:3c:03:73:94:c2:f5:4f:96:93: 4b:e7:ba:2e:66:aa:d5:81:01:b5:05:1c:c4:42:9e: d9:2e:22:17:50:b6:29:29:53:34:fe:40:06:bf:a7: 36:6b:01:49:49:80:1b:47:e1:e6:ae:ad:3b:cf:f0: 14:ee:9d:17:a1:77:8b:c8:d6:65:11:e9:62:9f:e6: 3a:7e:82:f8:2f:fa:fc:43:d4:df:7d:80:85:79:1a: db:da:aa:f9:a0:00:d5:b5:d7:fe:70:55:44:93:6c: 94:15:12:84:a8:eb:4f:33:fc:00:2f:10:c1:b7:9d: 9e:17:21:1e:43:42:92:83:bc:17:2e:f8:67:4f:5b: 5b:33:54:87:c1:9c:ed:9f:a5:b0:b6:df:cb:69:16: 93:7a:e4:18:2e:9b:b2:16:02:bd:41:b7:b5:43:40: a1:9b:29:da:3a:f5:7d:41:f4:35:cc:be:a0:fb:c5: 08:35:be:75:ba:16:63:bd:42:a3:e4:9d:62:8e:ad: b4:a1:93:1f:ac:c8:70:b0:5f:77:a3:cb:b3:5f:b9: 9e:bc:05:d8:90:25:41:48:a1:d6:d1:40:76:d7:8a: b1:d3:5a:0f:3b:e5:c3:e7:ea:13:59:5c:18:b4:03: 2a:a7:49:6e:48:7b:5a:ff:c5:8a:01:4c:aa:a6:5b: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:58:A1:7D:24:B8:07:71:9E:AA:6E:8F:61:41:32:F8:AB:90:BF:30 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/alihfSS4B3Geqm6PYUEy-KuQvzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.65.0/24 Signature Algorithm: sha256WithRSAEncryption 35:7f:0f:c9:2d:26:f3:c6:8e:a2:ed:12:48:9c:6f:19:84:eb: f8:67:9f:7b:b4:ed:ad:f9:7b:c9:d2:5b:d9:65:38:6f:73:13: f1:5f:f7:15:9d:fc:d2:06:b2:7e:c0:34:b3:45:42:50:ac:5e: 82:26:8e:7c:8f:a8:a9:03:16:af:44:ee:87:fa:30:f5:40:53: 31:62:46:b8:48:05:46:30:85:d4:78:96:de:d2:b7:8b:9a:9a: e8:09:cf:92:b7:86:c7:9e:49:bd:fb:95:27:19:9c:dc:2b:ac: 87:13:07:c1:56:b8:76:82:17:60:86:b8:9b:cc:87:a5:71:d8: 88:1b:28:f7:69:0e:5a:f8:64:c8:55:e0:a7:83:30:2b:25:37: ca:fa:46:96:9b:0a:43:f9:63:e4:f9:e1:c5:14:fc:d3:09:e9: 82:ad:27:b3:98:50:bd:97:62:55:0c:83:8d:d6:14:62:11:63: e6:fd:3c:b5:b8:4b:bc:79:4f:a5:16:cb:06:e0:f3:d9:e5:e4: 1d:d9:e5:db:58:a7:3d:50:0d:63:aa:94:53:9c:45:dc:68:53: 9f:a8:23:fd:9a:92:66:d0:51:25:6f:4b:fa:2d:06:62:5d:7c: e0:79:16:4f:f5:20:16:d1:35:b8:a8:63:de:ce:7b:34:a7:ea: 58:3e:81:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuSHz6e7xIIoD2l2ToD5FqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTA2MDcwNDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTU4YTE3ZDI0YjgwNzcxOWVhYTZlOGY2MTQxMzJmOGFiOTBiZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxdTegI8A3OUwvVPlpNL57ouZqrV gQG1BRzEQp7ZLiIXULYpKVM0/kAGv6c2awFJSYAbR+Hmrq07z/AU7p0XoXeLyNZl Eelin+Y6foL4L/r8Q9TffYCFeRrb2qr5oADVtdf+cFVEk2yUFRKEqOtPM/wALxDB t52eFyEeQ0KSg7wXLvhnT1tbM1SHwZztn6Wwtt/LaRaTeuQYLpuyFgK9Qbe1Q0Ch mynaOvV9QfQ1zL6g+8UINb51uhZjvUKj5J1ijq20oZMfrMhwsF93o8uzX7mevAXY kCVBSKHW0UB214qx01oPO+XD5+oTWVwYtAMqp0luSHta/8WKAUyqplvUvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpYoX0kuAdxnqpuj2FBMvirkL8wMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYWxpaGZTUzRCM0dlcW02UFlVRXktS3VRdnpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWpBMA0G CSqGSIb3DQEBCwUAA4IBAQA1fw/JLSbzxo6i7RJInG8ZhOv4Z597tO2t+XvJ0lvZ ZThvcxPxX/cVnfzSBrJ+wDSzRUJQrF6CJo58j6ipAxavRO6H+jD1QFMxYka4SAVG MIXUeJbe0reLmproCc+St4bHnkm9+5UnGZzcK6yHEwfBVrh2ghdghribzIelcdiI Gyj3aQ5a+GTIVeCngzArJTfK+kaWmwpD+WPk+eHFFPzTCemCrSezmFC9l2JVDION 1hRiEWPm/Ty1uEu8eU+lFssG4PPZ5eQd2eXbWKc9UA1jqpRTnEXcaFOfqCP9mpJm 0FElb0v6LQZiXXzgeRZP9SAW0TW4qGPezns0p+pYPoE8 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:34 2026 by rpki-client