This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/als8bOZv4fKBOCQtVsZ9-tvIHNM.roa File: als8bOZv4fKBOCQtVsZ9-tvIHNM.roa (raw, json) Hash identifier: Nm1Cu1BIVmttqtDjEB5m5E1PnL0WvKuShJjAPmq2bJs= Subject key identifier: 6A:5B:3C:6C:E6:6F:E1:F2:81:38:24:2D:56:C6:7D:FA:DB:C8:1C:D3 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80947AF7E1D8D44C607D94750DEBC3 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/als8bOZv4fKBOCQtVsZ9-tvIHNM.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35505 IP address blocks: 193.187.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:94:7a:f7:e1:d8:d4:4c:60:7d:94:75:0d:eb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a5b3c6ce66fe1f28138242d56c67dfadbc81cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:1b:9b:01:22:a8:25:b9:47:ca:5f:47:89: 31:ef:ff:1b:47:6c:68:6c:86:38:4b:76:57:24:87: bc:0d:9c:66:06:03:ef:73:91:98:09:ec:7a:84:b9: a5:60:92:2f:7d:59:19:21:f8:4b:df:a2:d4:1f:d9: 36:ba:e3:4b:05:6b:15:69:4f:c9:29:ae:d7:44:2f: c8:35:15:48:46:ae:cb:b5:11:f7:2c:42:d5:59:de: d1:84:dd:d3:98:e3:db:e3:2d:fe:d4:e0:a9:be:9f: 7f:c1:13:29:75:24:a8:a6:d8:5e:10:64:6d:3c:d5: ea:f9:0c:4d:85:97:7c:36:ef:27:fa:ff:52:30:ff: 42:29:4e:7a:14:85:2c:83:0e:f2:3e:50:d2:0f:fd: 0a:aa:ba:c4:ff:77:08:81:50:79:fc:24:aa:de:19: a1:35:56:ac:76:bb:12:6f:93:00:b2:31:85:18:a7: 71:f2:81:49:06:c7:e2:e6:a0:f2:b1:df:92:a3:1e: ad:5b:ba:f7:33:b5:b8:0e:3c:dc:fb:d4:30:cb:6a: a5:cc:cb:57:a5:e9:ef:1d:52:75:28:81:9c:7a:1c: 40:57:5c:ce:d3:57:74:f6:7b:9a:50:17:f6:17:7f: 4a:5d:b0:12:06:ef:f4:db:ab:03:31:13:01:bf:f8: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5B:3C:6C:E6:6F:E1:F2:81:38:24:2D:56:C6:7D:FA:DB:C8:1C:D3 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/als8bOZv4fKBOCQtVsZ9-tvIHNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.149.0/24 Signature Algorithm: sha256WithRSAEncryption a1:75:b7:55:34:23:28:b4:99:03:61:17:57:be:41:54:56:d1: 38:71:81:0f:0a:ac:2d:d0:ed:41:b9:6d:11:25:6c:03:f8:f6: 88:b5:18:5c:12:42:f2:26:b2:51:32:41:bd:16:39:9a:64:3d: 58:6c:c9:1b:fc:8a:b3:67:e5:a4:5f:55:1c:a5:55:34:7e:f5: 76:90:62:24:66:dc:5a:93:7b:ef:af:53:5a:75:65:97:b2:8f: 1d:e4:22:10:30:cb:64:b2:68:f5:03:51:16:8f:70:17:5f:67: cf:41:97:a3:18:f8:dc:b3:63:40:31:5f:33:87:e5:c2:80:a0: d0:4e:ed:ec:7a:59:2e:b2:77:ab:1a:65:66:9c:1a:a5:5c:dd: d5:6a:f9:2d:d0:16:3e:7c:26:c5:53:f6:86:a8:bc:34:90:9d: ae:06:88:af:73:4e:70:48:ef:a8:46:bf:ed:78:64:43:5f:da: 85:f6:ae:cd:ec:2f:5d:7b:7d:04:06:d9:b1:42:99:32:37:cb: c8:21:ba:6d:ef:a9:78:81:b8:cc:17:30:b2:8b:1a:83:36:0f: 75:23:cc:46:2f:6a:b8:96:8f:cf:78:b4:26:a3:ee:0c:5c:ed: 5f:a4:64:ad:cd:51:a6:f4:32:78:78:29:ed:8e:e2:66:4e:cc: 77:7e:b2:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJR69+HY1ExgfZR1DevDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTViM2M2Y2U2NmZlMWYyODEzODI0MmQ1NmM2N2RmYWRiYzgxY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTgbmwEiqCW5R8pfR4kx7/8bR2xo bIY4S3ZXJIe8DZxmBgPvc5GYCex6hLmlYJIvfVkZIfhL36LUH9k2uuNLBWsVaU/J Ka7XRC/INRVIRq7LtRH3LELVWd7RhN3TmOPb4y3+1OCpvp9/wRMpdSSoptheEGRt PNXq+QxNhZd8Nu8n+v9SMP9CKU56FIUsgw7yPlDSD/0KqrrE/3cIgVB5/CSq3hmh NVasdrsSb5MAsjGFGKdx8oFJBsfi5qDysd+Sox6tW7r3M7W4Djzc+9Qwy2qlzMtX penvHVJ1KIGcehxAV1zO01d09nuaUBf2F39KXbASBu/026sDMRMBv/iorwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpbPGzmb+HygTgkLVbGffrbyBzTMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvYWxzOGJPWnY0ZktCT0NRdFZzWjktdHZJSE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbuVMA0G CSqGSIb3DQEBCwUAA4IBAQChdbdVNCMotJkDYRdXvkFUVtE4cYEPCqwt0O1BuW0R JWwD+PaItRhcEkLyJrJRMkG9FjmaZD1YbMkb/IqzZ+WkX1UcpVU0fvV2kGIkZtxa k3vvr1NadWWXso8d5CIQMMtksmj1A1EWj3AXX2fPQZejGPjcs2NAMV8zh+XCgKDQ Tu3selkusnerGmVmnBqlXN3Vavkt0BY+fCbFU/aGqLw0kJ2uBoivc05wSO+oRr/t eGRDX9qF9q7N7C9de30EBtmxQpkyN8vIIbpt76l4gbjMFzCyixqDNg91I8xGL2q4 lo/PeLQmo+4MXO1fpGStzVGm9DJ4eCntjuJmTsx3frKD -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:24 2026 by rpki-client