This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AL7YZsmkHRSZ_THMfsTB2QZ_EJg.roa File: AL7YZsmkHRSZ_THMfsTB2QZ_EJg.roa (raw, json) Hash identifier: VTewf5u+6Ggrqi0/Kh5lHW57InC7C56u1OsKm3uCHl4= Subject key identifier: 00:BE:D8:66:C9:A4:1D:14:99:FD:31:CC:7E:C4:C1:D9:06:7F:10:98 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B9D07D3D9487A9ADD11CA7971340AAB5B Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AL7YZsmkHRSZ_THMfsTB2QZ_EJg.roa Signing time: Thu 08 Jan 2026 09:54:54 +0000 ROA not before: Thu 08 Jan 2026 09:54:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 109.121.36.0/24 maxlen: 24 109.121.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:07:d3:d9:48:7a:9a:dd:11:ca:79:71:34:0a:ab:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 8 09:54:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00bed866c9a41d1499fd31cc7ec4c1d9067f1098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:e8:ec:ba:af:23:c2:9b:72:50:f6:94:cc: 57:44:d5:fd:4a:a1:ab:3f:b6:14:1e:03:e8:2a:7e: e2:0f:34:88:30:78:01:39:13:78:c3:d2:53:65:31: 7b:50:71:a0:a5:5e:b9:2b:f4:08:a0:81:25:d4:c2: fe:de:1f:aa:48:f1:da:04:4c:93:58:f5:a0:00:89: f0:ae:64:fb:54:34:14:3c:4f:fe:91:9c:5d:99:41: 0a:1e:61:ce:f1:29:89:9c:f0:6f:bf:84:c5:22:5c: d6:95:e8:74:ec:c4:f4:a4:96:5d:99:18:e3:6c:32: c1:62:62:d7:d4:b1:2c:37:d5:f5:f4:e3:ac:88:b7: d1:33:7a:e5:24:12:d1:5f:4e:7b:e6:f7:0d:66:9c: d4:d8:25:43:c9:e7:6e:a6:1b:e9:3c:0f:31:e9:d6: 60:6c:56:39:4d:f9:f7:a5:fa:8b:db:1e:04:59:0f: a0:14:56:d3:15:4f:bc:37:c1:b9:0f:52:9d:bc:b8: d9:00:85:c1:b2:a7:71:fd:88:d7:58:ab:e5:b7:b1: 3f:94:cf:26:c9:5c:79:6c:85:2d:b8:60:e1:d7:18: 27:e7:e9:57:98:8e:91:46:a1:8f:e8:0c:86:fa:70: c6:13:84:e7:45:14:3a:39:e6:7b:42:90:d1:a0:22: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:D8:66:C9:A4:1D:14:99:FD:31:CC:7E:C4:C1:D9:06:7F:10:98 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AL7YZsmkHRSZ_THMfsTB2QZ_EJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.36.0/24 109.121.38.0/24 Signature Algorithm: sha256WithRSAEncryption 12:b4:fe:23:49:81:41:da:e0:1c:8b:01:86:e5:e9:f7:b3:fd: ae:b8:cf:c3:5c:40:ab:6e:f7:15:ca:f3:9e:42:32:e4:cf:b9: 6f:d1:38:db:1d:fa:03:a0:51:0d:07:15:39:30:63:95:27:22: d9:05:fd:a4:43:bb:2b:be:21:c3:5f:d0:ea:c2:8b:55:b2:4e: 53:19:07:54:97:b8:32:e7:13:be:59:53:41:d5:a0:08:8d:51: c2:a0:20:f8:c7:35:93:20:f4:23:5b:c7:cf:22:61:f8:74:7d: 23:00:aa:74:96:d7:da:b0:c3:35:bb:ce:4b:1e:f6:99:fc:86: db:c3:41:e5:64:5f:da:8c:09:6c:2c:79:34:68:f2:49:30:60: 3c:95:74:90:3e:49:6e:dd:b8:63:cd:de:54:e4:1e:86:68:e7: 95:73:f7:e7:8c:6b:07:b4:77:f9:a6:c0:5c:d2:0d:9e:c1:bd: 71:15:25:f1:70:7b:0c:05:f3:70:d6:98:eb:c5:8b:c6:ce:0a: 48:70:a6:30:c0:b8:7f:04:bd:67:a3:5f:b1:75:38:e7:32:71: dd:88:b9:8c:56:02:4f:8d:2c:bc:44:15:6a:aa:73:ef:41:74: fb:c8:4a:17:1c:07:d5:26:e2:ac:1e:41:52:51:f2:86:aa:6f: 78:a3:28:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZudB9PZSHqa3RHKeXE0CqtbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTA4MDk1NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGJlZDg2NmM5YTQxZDE0OTlmZDMxY2M3ZWM0YzFkOTA2N2YxMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq/o7LqvI8KbclD2lMxXRNX9SqGr P7YUHgPoKn7iDzSIMHgBORN4w9JTZTF7UHGgpV65K/QIoIEl1ML+3h+qSPHaBEyT WPWgAInwrmT7VDQUPE/+kZxdmUEKHmHO8SmJnPBvv4TFIlzWleh07MT0pJZdmRjj bDLBYmLX1LEsN9X19OOsiLfRM3rlJBLRX0575vcNZpzU2CVDyeduphvpPA8x6dZg bFY5Tfn3pfqL2x4EWQ+gFFbTFU+8N8G5D1KdvLjZAIXBsqdx/YjXWKvlt7E/lM8m yVx5bIUtuGDh1xgn5+lXmI6RRqGP6AyG+nDGE4TnRRQ6OeZ7QpDRoCLq9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAC+2GbJpB0Umf0xzH7EwdkGfxCYMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvQUw3WVpzbWtIUlNaX1RITWZzVEIyUVpfRUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXkkAwQA bXkmMA0GCSqGSIb3DQEBCwUAA4IBAQAStP4jSYFB2uAciwGG5en3s/2uuM/DXECr bvcVyvOeQjLkz7lv0TjbHfoDoFENBxU5MGOVJyLZBf2kQ7srviHDX9DqwotVsk5T GQdUl7gy5xO+WVNB1aAIjVHCoCD4xzWTIPQjW8fPImH4dH0jAKp0ltfasMM1u85L HvaZ/Ibbw0HlZF/ajAlsLHk0aPJJMGA8lXSQPklu3bhjzd5U5B6GaOeVc/fnjGsH tHf5psBc0g2ewb1xFSXxcHsMBfNw1pjrxYvGzgpIcKYwwLh/BL1no1+xdTjnMnHd iLmMVgJPjSy8RBVqqnPvQXT7yEoXHAfVJuKsHkFSUfKGqm94oyha -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:36 2026 by rpki-client