This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/AolLmsrxu_YfkN2P3XPeHyIz2ks.roa File: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (raw, json) Hash identifier: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k= Subject key identifier: 02:89:4B:9A:CA:F1:BB:F6:1F:90:DD:8F:DD:73:DE:1F:22:33:DA:4B Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308 Certificate serial: 019B7F1488B76F7FFCFC996D654426341ECE Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/AolLmsrxu_YfkN2P3XPeHyIz2ks.roa Signing time: Fri 02 Jan 2026 14:20:10 +0000 ROA not before: Fri 02 Jan 2026 14:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 91.138.0.0/18 maxlen: 24 185.90.108.0/22 maxlen: 22 2a05:dcc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:88:b7:6f:7f:fc:fc:99:6d:65:44:26:34:1e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308 Validity Not Before: Jan 2 14:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02894b9acaf1bbf61f90dd8fdd73de1f2233da4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:de:8d:fe:06:0a:39:f3:78:e7:ad:85:3a: e4:b3:43:c7:eb:38:2b:90:32:0a:df:0a:35:8b:d2: 05:8f:89:8c:68:d6:a8:63:4f:96:04:c8:be:63:55: 94:4b:ce:48:27:32:65:ff:86:12:d0:16:77:22:c0: d5:c9:c3:81:40:dc:2b:5d:70:34:01:1e:4d:df:1c: eb:a4:0f:40:3f:df:5e:08:e8:25:8e:cd:7d:f8:79: ff:fe:ff:30:82:31:d4:8c:d4:d5:4d:b3:3b:7b:dc: 7e:33:f6:82:4f:f4:95:cf:e6:1a:d0:bb:93:89:4d: 1e:a5:4f:45:65:95:21:02:72:4c:2d:ac:14:e1:f2: 62:41:90:bd:b4:00:37:22:1b:bd:3e:46:40:5c:c6: 6e:c4:7d:75:b1:18:46:2a:21:f3:a5:aa:c4:e4:80: c8:7a:b8:23:ee:a6:b1:eb:d0:54:7d:72:c8:f5:be: f2:38:af:00:84:52:20:16:fe:a3:d8:49:fa:ef:7e: 36:3e:40:51:c2:93:70:30:29:27:0a:7f:10:c6:74: 57:ad:4c:f5:84:9b:46:f3:4f:be:0e:14:e8:8e:d0: b3:04:0a:a1:4a:ab:c0:20:98:47:f5:53:1f:c3:03: 72:38:8b:80:21:5b:d9:b3:7f:fb:d5:61:3e:ba:ad: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:89:4B:9A:CA:F1:BB:F6:1F:90:DD:8F:DD:73:DE:1F:22:33:DA:4B X509v3 Authority Key Identifier: keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/AolLmsrxu_YfkN2P3XPeHyIz2ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.138.0.0/18 185.90.108.0/22 IPv6: 2a05:dcc0::/29 Signature Algorithm: sha256WithRSAEncryption 3d:4f:21:8e:e7:19:03:4f:ba:4a:75:4f:9b:98:79:3c:2e:58: d2:55:c8:48:6a:a4:8f:f9:ec:70:53:36:7d:41:e8:da:4a:f6: 9a:eb:20:aa:0a:5f:e4:57:17:a9:37:c2:e3:ec:d9:06:be:1d: f7:80:3d:b7:5f:57:8c:df:cb:b5:fe:45:79:02:32:49:94:e1: b1:1e:6b:9b:97:dd:1a:5d:3c:33:6f:d6:f1:32:2d:3f:a4:f2: 1a:bd:a9:f7:81:9a:a2:de:ce:a2:87:1b:e8:9e:2f:24:f0:62: d1:85:df:af:31:f3:48:0d:f3:34:08:b6:62:d2:5c:f0:5d:cf: fd:d7:57:6a:a6:ee:d8:17:1d:c2:9c:56:94:38:a7:57:cc:48: f0:cc:15:71:ac:6a:30:b9:c7:6a:58:e7:89:73:b5:fc:62:7c: bc:30:eb:2b:51:ee:60:9b:5d:34:cd:f6:c3:ac:dc:5b:cc:2d: aa:b0:60:03:10:80:66:1e:bc:4b:d2:1e:67:cf:72:08:16:e9: 34:b3:fd:7f:84:25:bf:8f:04:56:27:7d:e1:a8:25:ea:14:3d: 04:a4:7e:73:12:e7:a2:b7:04:7f:20:b4:8b:85:58:0a:3b:da: 95:28:b3:32:3c:a5:e1:49:a6:c5:a8:fc:a5:4a:0c:18:da:73: 93:14:b9:63 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FIi3b3/8/JltZUQmNB7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx MTAzMDgwHhcNMjYwMTAyMTQyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjg5NGI5YWNhZjFiYmY2MWY5MGRkOGZkZDczZGUxZjIyMzNkYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljrejf4GCjnzeOethTrks0PH6zgr kDIK3wo1i9IFj4mMaNaoY0+WBMi+Y1WUS85IJzJl/4YS0BZ3IsDVycOBQNwrXXA0 AR5N3xzrpA9AP99eCOgljs19+Hn//v8wgjHUjNTVTbM7e9x+M/aCT/SVz+Ya0LuT iU0epU9FZZUhAnJMLawU4fJiQZC9tAA3Ihu9PkZAXMZuxH11sRhGKiHzparE5IDI ergj7qax69BUfXLI9b7yOK8AhFIgFv6j2En67342PkBRwpNwMCknCn8QxnRXrUz1 hJtG80++DhTojtCzBAqhSqvAIJhH9VMfwwNyOIuAIVvZs3/71WE+uq17NwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAKJS5rK8bv2H5Ddj91z3h8iM9pLMB8GA1UdIwQY MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt YWRhZGQ2Mjk1ODIyLzEvQW9sTG1zcnh1X1lma04yUDNYUGVIeUl6MmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGW4oAAwQC uVpsMA0EAgACMAcDBQMqBdzAMA0GCSqGSIb3DQEBCwUAA4IBAQA9TyGO5xkDT7pK dU+bmHk8LljSVchIaqSP+exwUzZ9QejaSvaa6yCqCl/kVxepN8Lj7NkGvh33gD23 X1eM38u1/kV5AjJJlOGxHmubl90aXTwzb9bxMi0/pPIavan3gZqi3s6ihxvoni8k 8GLRhd+vMfNIDfM0CLZi0lzwXc/911dqpu7YFx3CnFaUOKdXzEjwzBVxrGowucdq WOeJc7X8Yny8MOsrUe5gm100zfbDrNxbzC2qsGADEIBmHrxL0h5nz3IIFuk0s/1/ hCW/jwRWJ33hqCXqFD0EpH5zEueitwR/ILSLhVgKO9qVKLMyPKXhSabFqPylSgwY 2nOTFLlj -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:24 2026 by rpki-client