This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/l-al53GTn2U3_oux5KceKXfKkVM.roa File: l-al53GTn2U3_oux5KceKXfKkVM.roa (raw, json) Hash identifier: VwmHIGN92Mm8C6FgCJrZ5LFSIkTya2qnm7OsmBE8eyE= Subject key identifier: 97:E6:A5:E7:71:93:9F:65:37:FE:8B:B1:E4:A7:1E:29:77:CA:91:53 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019B7FF25E388A66D5FD44F3F9AD48CB0EBD Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/l-al53GTn2U3_oux5KceKXfKkVM.roa Signing time: Fri 02 Jan 2026 18:22:28 +0000 ROA not before: Fri 02 Jan 2026 18:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 91.102.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5e:38:8a:66:d5:fd:44:f3:f9:ad:48:cb:0e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Jan 2 18:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97e6a5e771939f6537fe8bb1e4a71e2977ca9153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:73:03:ec:e6:ab:be:2f:e5:50:0e:00:04: fb:85:28:ad:f8:15:8d:2b:8c:9d:45:ce:ac:74:d2: b6:a1:91:a6:fd:8b:db:aa:c1:57:c3:3d:6d:70:33: 82:9b:18:40:f7:a9:ff:67:88:a4:1f:d1:1e:69:46: 5a:66:48:61:8a:32:fc:9b:96:18:99:cb:59:95:45: 7d:8f:8d:ae:9f:c2:79:a8:e2:18:c6:1a:a5:05:4e: 11:01:b6:44:a9:ac:b8:6a:55:d4:23:5c:a0:a1:e8: 01:6b:38:18:b4:fd:be:38:ca:1d:02:10:20:35:d7: 22:ba:25:6c:7e:2c:38:d4:c7:f7:0c:66:28:f9:53: 46:29:20:42:e9:1c:01:82:14:84:7f:5d:44:da:bf: 8a:7f:d9:2a:fc:be:92:5c:cb:ff:a1:7a:ab:62:88: 43:78:6b:ff:38:72:46:36:7c:83:68:92:58:ce:3b: ce:ad:c9:36:ab:65:c4:96:50:05:2d:a7:cb:f8:ab: ed:dd:44:5e:1a:ca:a5:b5:c6:f7:c4:87:99:44:e0: 88:33:92:2b:4d:6c:c9:11:f9:90:8f:71:20:7e:23: 93:88:36:d9:df:15:10:b5:8a:5b:76:7f:9c:42:3e: ca:15:86:19:89:e4:0f:a3:7c:89:c8:6a:7a:96:1c: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E6:A5:E7:71:93:9F:65:37:FE:8B:B1:E4:A7:1E:29:77:CA:91:53 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/l-al53GTn2U3_oux5KceKXfKkVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.162.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:fb:8f:85:db:69:4d:00:41:1d:55:52:18:32:cb:45:f1:78: 32:c3:59:4e:b0:31:55:5b:40:94:53:b2:3e:69:38:6b:1d:78: 75:41:ef:10:1b:0e:8c:cf:01:f4:44:78:4f:73:47:35:e0:b4: e1:f7:5f:25:54:81:13:26:92:a1:50:9f:c8:12:b9:12:29:2a: 55:39:ef:d4:da:d4:b6:e2:16:1a:ec:54:0e:5f:1c:57:f7:d2: 8f:7e:3f:a6:01:84:fb:22:80:fd:05:d1:d8:c5:d1:87:7f:95: af:90:f0:e2:df:5e:6d:61:c0:c9:27:e4:48:90:25:55:43:42: 1c:f9:9f:a2:78:03:16:9d:93:08:64:da:ac:a6:7e:91:e2:6c: 28:01:ed:25:e1:b3:b5:5b:78:75:8b:f3:4e:f4:4c:57:33:13: c0:28:3b:58:61:64:67:48:e7:50:38:2d:d8:b1:f4:cb:53:ab: 61:93:0f:21:2e:29:77:71:6e:43:44:b0:a1:7d:10:14:32:1d: 39:7e:15:81:7c:26:42:28:12:33:42:09:3a:73:93:97:61:5b: 0b:51:2f:b4:83:8c:6e:27:bb:94:ce:06:8a:41:4b:b6:a0:66: a3:16:6d:09:31:d4:8b:46:3f:c6:1c:a1:75:41:68:f0:91:e8: 06:fb:9b:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8l44imbV/UTz+a1Iyw69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMTAyMTgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2U2YTVlNzcxOTM5ZjY1MzdmZThiYjFlNGE3MWUyOTc3Y2E5MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux5zA+zmq74v5VAOAAT7hSit+BWN K4ydRc6sdNK2oZGm/YvbqsFXwz1tcDOCmxhA96n/Z4ikH9EeaUZaZkhhijL8m5YY mctZlUV9j42un8J5qOIYxhqlBU4RAbZEqay4alXUI1ygoegBazgYtP2+OModAhAg NdciuiVsfiw41Mf3DGYo+VNGKSBC6RwBghSEf11E2r+Kf9kq/L6SXMv/oXqrYohD eGv/OHJGNnyDaJJYzjvOrck2q2XEllAFLafL+Kvt3UReGsqltcb3xIeZROCIM5Ir TWzJEfmQj3EgfiOTiDbZ3xUQtYpbdn+cQj7KFYYZieQPo3yJyGp6lhzpVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfmpedxk59lN/6LseSnHil3ypFTMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvbC1hbDUzR1RuMlUzX291eDVLY2VLWGZLa1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2aiMA0G CSqGSIb3DQEBCwUAA4IBAQBr+4+F22lNAEEdVVIYMstF8Xgyw1lOsDFVW0CUU7I+ aThrHXh1Qe8QGw6MzwH0RHhPc0c14LTh918lVIETJpKhUJ/IErkSKSpVOe/U2tS2 4hYa7FQOXxxX99KPfj+mAYT7IoD9BdHYxdGHf5WvkPDi315tYcDJJ+RIkCVVQ0Ic +Z+ieAMWnZMIZNqspn6R4mwoAe0l4bO1W3h1i/NO9ExXMxPAKDtYYWRnSOdQOC3Y sfTLU6thkw8hLil3cW5DRLChfRAUMh05fhWBfCZCKBIzQgk6c5OXYVsLUS+0g4xu J7uUzgaKQUu2oGajFm0JMdSLRj/GHKF1QWjwkegG+5to -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:17 2026 by rpki-client