This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/alIVB3DRNeac3-KBgtiTOAlVqYg.roa File: alIVB3DRNeac3-KBgtiTOAlVqYg.roa (raw, json) Hash identifier: 5rWQXWfQK4PnnDUyWE3w/iefHP9zcHf0QTSdTcrqmsE= Subject key identifier: 6A:52:15:07:70:D1:35:E6:9C:DF:E2:81:82:D8:93:38:09:55:A9:88 Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa Certificate serial: 019B7E380BBB953660B00DD6416FADD94A27 Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/alIVB3DRNeac3-KBgtiTOAlVqYg.roa Signing time: Fri 02 Jan 2026 10:19:20 +0000 ROA not before: Fri 02 Jan 2026 10:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59780 IP address blocks: 85.115.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0b:bb:95:36:60:b0:0d:d6:41:6f:ad:d9:4a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a52150770d135e69cdfe28182d893380955a988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:8f:21:51:32:1c:17:ff:d1:38:63:23:82: 57:5d:ab:15:e5:ef:af:b5:a7:9c:9f:13:63:5d:b0: cc:90:c1:a2:f8:37:3b:97:1d:7b:d9:4c:93:67:6f: bf:0e:25:d0:7b:49:5a:15:92:40:73:df:c9:85:24: 14:86:a7:98:50:98:c1:1f:7f:14:39:a2:e4:3b:41: ee:8a:14:00:85:e4:9d:42:14:51:e1:cd:bb:d5:95: 42:b1:50:96:7d:a4:4b:16:bb:9b:59:5e:eb:c3:54: fa:62:ec:17:9d:a9:42:38:4a:b9:e3:ab:c7:7f:84: c2:b3:99:69:fd:51:25:51:4b:d0:6d:92:7c:4c:38: 4b:72:ff:f1:2f:98:94:55:88:20:9c:2e:40:7d:c7: b5:68:61:b1:bf:52:a5:d9:2f:78:4e:a6:10:ba:46: 56:51:e9:fb:92:e2:7c:b6:2b:16:4d:7c:0a:0e:b3: dc:d6:4a:7a:63:b1:e6:d1:a2:08:9b:6f:0f:86:bd: dd:4a:c2:aa:02:d0:c2:55:b8:3c:3d:f4:53:27:31: b0:0c:52:40:bc:e2:8d:ff:74:c5:1d:49:4e:18:86: 80:8a:77:d5:55:27:58:d7:20:fe:60:42:cc:c7:ec: d0:89:79:27:74:93:7b:9b:91:4f:9e:ab:4c:2f:08: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:52:15:07:70:D1:35:E6:9C:DF:E2:81:82:D8:93:38:09:55:A9:88 X509v3 Authority Key Identifier: keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/alIVB3DRNeac3-KBgtiTOAlVqYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.216.0/22 Signature Algorithm: sha256WithRSAEncryption 72:f2:24:df:a4:2d:0b:33:f3:0e:08:f1:b7:4f:99:c1:c9:04: c3:ef:c5:9c:82:97:23:eb:56:03:21:14:60:3a:d2:5a:79:99: bd:9c:90:98:17:bf:ef:6e:45:38:6e:0a:3e:d0:38:57:52:4d: e5:7b:91:e2:b2:f9:6f:e1:47:57:7d:22:b4:8a:27:43:64:ad: 70:d6:45:c1:a3:03:16:00:dc:6b:88:77:58:dc:6e:61:3b:45: 23:3b:2e:9c:33:67:08:2c:d1:5d:98:04:07:15:6e:54:06:81: d2:ee:b7:06:09:c2:86:44:ef:78:82:e9:0d:c3:c8:e0:5b:5d: 2d:c9:f7:05:41:a0:ce:97:d6:80:b6:f0:d0:ec:a6:c4:e0:15: 06:d3:5f:20:9e:6f:8d:34:21:15:0c:c0:72:83:fe:6e:e1:61: df:36:0c:d7:1d:bb:31:d4:8e:ce:a0:32:ce:f5:0c:8f:d2:14: 46:44:0f:3e:e2:99:61:cf:46:24:d4:7d:03:0f:f6:54:95:af: b7:7a:a6:f4:a3:03:48:31:29:a5:e6:a1:b0:2e:8b:48:b8:30: 13:8d:2a:9a:58:c9:48:dc:0d:af:35:4b:a6:5d:8c:5f:42:8c: fc:a0:59:c7:a4:2b:bc:f7:0d:3c:43:ce:52:d3:00:f1:e6:4e: b9:49:ed:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OAu7lTZgsA3WQW+t2UonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NGFhZGVmNzA5YmUzN2I5Y2NkNDJjYzJiOGM3MzJjMzk3 MTUwZmEwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTUyMTUwNzcwZDEzNWU2OWNkZmUyODE4MmQ4OTMzODA5NTVhOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SSPIVEyHBf/0ThjI4JXXasV5e+v taecnxNjXbDMkMGi+Dc7lx172UyTZ2+/DiXQe0laFZJAc9/JhSQUhqeYUJjBH38U OaLkO0HuihQAheSdQhRR4c271ZVCsVCWfaRLFrubWV7rw1T6YuwXnalCOEq546vH f4TCs5lp/VElUUvQbZJ8TDhLcv/xL5iUVYggnC5Afce1aGGxv1Kl2S94TqYQukZW Uen7kuJ8tisWTXwKDrPc1kp6Y7Hm0aIIm28Phr3dSsKqAtDCVbg8PfRTJzGwDFJA vOKN/3TFHUlOGIaAinfVVSdY1yD+YELMx+zQiXkndJN7m5FPnqtMLwiMiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpSFQdw0TXmnN/igYLYkzgJVamIMB8GA1UdIwQY MBaAFJlKre9wm+N7nM1CzCuMcyw5cVD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQt YWYzZTdkNDI5NjhkLzEvYWxJVkIzRFJOZWFjMy1LQmd0aVRPQWxWcVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQtYWYzZTdkNDI5Njhk LzEvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXPYMA0G CSqGSIb3DQEBCwUAA4IBAQBy8iTfpC0LM/MOCPG3T5nByQTD78Wcgpcj61YDIRRg OtJaeZm9nJCYF7/vbkU4bgo+0DhXUk3le5Hisvlv4UdXfSK0iidDZK1w1kXBowMW ANxriHdY3G5hO0UjOy6cM2cILNFdmAQHFW5UBoHS7rcGCcKGRO94gukNw8jgW10t yfcFQaDOl9aAtvDQ7KbE4BUG018gnm+NNCEVDMByg/5u4WHfNgzXHbsx1I7OoDLO 9QyP0hRGRA8+4plhz0Yk1H0DD/ZUla+3eqb0owNIMSml5qGwLotIuDATjSqaWMlI 3A2vNUumXYxfQoz8oFnHpCu89w08Q85S0wDx5k65Se2u -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:52 2026 by rpki-client