This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ALmp9QVk21GznNgt6Dz8ZcrWqhg.roa File: ALmp9QVk21GznNgt6Dz8ZcrWqhg.roa (raw, json) Hash identifier: O+KLwwhLgCZOa9Dra8cvY4Q3raXGnTT+rDZassQxMZs= Subject key identifier: 00:B9:A9:F5:05:64:DB:51:B3:9C:D8:2D:E8:3C:FC:65:CA:D6:AA:18 Certificate issuer: /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3 Certificate serial: 019B7C7FD3665D3838C1FCCAF04F8CC53FF1 Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ALmp9QVk21GznNgt6Dz8ZcrWqhg.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42511 IP address blocks: 83.143.156.0/22 maxlen: 24 109.95.72.0/21 maxlen: 24 194.143.150.0/23 maxlen: 23 194.143.150.0/24 maxlen: 24 194.143.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d3:66:5d:38:38:c1:fc:ca:f0:4f:8c:c5:3f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00b9a9f50564db51b39cd82de83cfc65cad6aa18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:6a:2f:88:0a:88:5b:92:c4:6e:bf:77:2f: 63:e5:6f:01:43:f8:f3:92:d0:0a:66:7b:b4:48:56: 06:58:64:23:70:31:7e:8e:31:ea:1a:6c:40:d7:7b: 50:5f:e6:00:51:5a:bd:3b:a4:1d:6f:23:40:07:f1: 7d:c7:84:aa:64:9f:3f:df:70:ae:ee:c2:70:2b:f5: 44:32:ae:ff:7d:b6:1a:4e:5a:25:11:53:45:eb:18: 81:c9:a1:7f:04:17:61:52:88:96:4c:32:c0:c3:bd: 5d:eb:49:8d:30:99:3d:74:18:dd:05:6e:9f:7c:9a: 48:08:2c:9d:a1:fa:61:b1:3a:95:5b:39:2d:b0:e5: 38:9d:5b:d5:2c:60:23:97:d3:97:61:7f:f1:e9:9d: 26:89:12:37:a3:de:0a:ea:90:e3:e8:83:bc:da:a7: af:ff:44:96:8a:d9:3a:d9:60:d9:0a:35:8b:f3:f1: 8b:c8:dc:e6:2d:49:87:da:0b:50:53:e7:f0:66:c9: 59:27:51:a7:3a:e1:ff:21:77:d1:f1:fb:35:4a:85: 5f:0a:f9:47:90:e8:c6:4b:82:50:97:b9:4c:b4:3e: 48:6d:03:e8:f8:97:64:03:26:9e:9e:50:75:23:d8: 2d:76:ae:c4:ed:47:f2:0e:37:e1:3e:70:1b:7f:97: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B9:A9:F5:05:64:DB:51:B3:9C:D8:2D:E8:3C:FC:65:CA:D6:AA:18 X509v3 Authority Key Identifier: keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ALmp9QVk21GznNgt6Dz8ZcrWqhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.156.0/22 109.95.72.0/21 194.143.150.0/23 Signature Algorithm: sha256WithRSAEncryption 71:c8:87:91:47:5a:93:48:25:e0:93:77:32:b0:63:3d:68:fb: 67:94:a9:bd:2b:02:59:0d:19:34:78:55:7a:97:bc:67:d5:f7: 54:69:38:2b:5e:ac:7d:73:5b:8b:da:44:5d:9c:c2:c5:28:13: 2d:7a:09:c9:06:a7:1c:73:7c:84:12:7f:ce:1f:67:49:67:56: a9:74:a4:20:1a:94:42:91:12:14:13:0c:df:16:60:97:30:8f: d6:27:c2:9f:80:ce:e4:77:a5:f7:ec:f4:46:c2:6a:b9:c0:d0: 56:ea:e3:ce:12:1d:8f:51:47:c8:e8:f5:76:e8:1b:d5:cd:b0: 84:99:5c:6c:e9:93:4d:4f:86:11:fc:4b:4f:93:2e:84:10:94: 63:15:f6:3d:98:7b:b6:d9:6d:9f:1c:ca:e6:68:78:8f:3d:dc: 49:03:fa:a4:63:2f:38:51:8c:2d:e5:a9:f2:62:f5:e2:53:5f: fa:c2:f3:e2:13:ae:ba:43:4b:ce:46:26:91:17:d1:a8:4a:1d: 6d:78:f9:ae:12:71:5c:01:83:b1:6d:f2:73:2b:97:3b:2c:27: 7e:fc:6a:1b:85:ac:9a:0b:e4:f1:0a:a1:b1:01:f1:d6:eb:e5: ba:50:48:2f:34:b2:50:3f:36:03:ba:6f:32:65:72:fc:af:53: f0:15:73:6d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f9NmXTg4wfzK8E+MxT/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDhhMWY0YzM4NWYzYTdiNjI5ODRkNTNlODE2NjVhOTk1 NDEwZjMwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGI5YTlmNTA1NjRkYjUxYjM5Y2Q4MmRlODNjZmM2NWNhZDZhYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7RqL4gKiFuSxG6/dy9j5W8BQ/jz ktAKZnu0SFYGWGQjcDF+jjHqGmxA13tQX+YAUVq9O6QdbyNAB/F9x4SqZJ8/33Cu 7sJwK/VEMq7/fbYaTlolEVNF6xiByaF/BBdhUoiWTDLAw71d60mNMJk9dBjdBW6f fJpICCydofphsTqVWzktsOU4nVvVLGAjl9OXYX/x6Z0miRI3o94K6pDj6IO82qev /0SWitk62WDZCjWL8/GLyNzmLUmH2gtQU+fwZslZJ1GnOuH/IXfR8fs1SoVfCvlH kOjGS4JQl7lMtD5IbQPo+JdkAyaenlB1I9gtdq7E7UfyDjfhPnAbf5ewcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAC5qfUFZNtRs5zYLeg8/GXK1qoYMB8GA1UdIwQY MBaAFG0IofTDhfOntimE1T6BZlqZVBDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpaDlNT0Y4NmUyS1lUVlBvRm1XcGxVRVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMDc0NjctNTZhMS00OGM1LWFkZDEt NDNhODUyNmQ4MmJiLzEvQUxtcDlRVmsyMUd6bk5ndDZEejhaY3JXcWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xMDc0NjctNTZhMS00OGM1LWFkZDEtNDNhODUyNmQ4MmJi LzEvYlFpaDlNT0Y4NmUyS1lUVlBvRm1XcGxVRVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCU4+cAwQD bV9IAwQBwo+WMA0GCSqGSIb3DQEBCwUAA4IBAQBxyIeRR1qTSCXgk3cysGM9aPtn lKm9KwJZDRk0eFV6l7xn1fdUaTgrXqx9c1uL2kRdnMLFKBMtegnJBqccc3yEEn/O H2dJZ1apdKQgGpRCkRIUEwzfFmCXMI/WJ8KfgM7kd6X37PRGwmq5wNBW6uPOEh2P UUfI6PV26BvVzbCEmVxs6ZNNT4YR/EtPky6EEJRjFfY9mHu22W2fHMrmaHiPPdxJ A/qkYy84UYwt5anyYvXiU1/6wvPiE666Q0vORiaRF9GoSh1tePmuEnFcAYOxbfJz K5c7LCd+/GobhayaC+TxCqGxAfHW6+W6UEgvNLJQPzYDum8yZXL8r1PwFXNt -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:29 2026 by rpki-client