This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/aLE9Xir0DQLHULbNjLo9iWRYT6g.roa File: aLE9Xir0DQLHULbNjLo9iWRYT6g.roa (raw, json) Hash identifier: zs+F0F3OMU0sN5swTUcnHITKcwgAiJ03ypADrOpExWU= Subject key identifier: 68:B1:3D:5E:2A:F4:0D:02:C7:50:B6:CD:8C:BA:3D:89:64:58:4F:A8 Certificate issuer: /CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258 Certificate serial: 019B78A24C4F0FE048683705F95957E6B2F1 Authority key identifier: 17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/aLE9Xir0DQLHULbNjLo9iWRYT6g.roa Signing time: Thu 01 Jan 2026 08:17:40 +0000 ROA not before: Thu 01 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44662 IP address blocks: 91.235.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4c:4f:0f:e0:48:68:37:05:f9:59:57:e6:b2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258 Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68b13d5e2af40d02c750b6cd8cba3d8964584fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:2a:f8:c1:83:3c:c2:cb:3c:82:a1:6e:cd: 26:02:ca:ed:23:ef:4a:a8:7f:6d:e5:6d:29:ff:0b: c3:30:fa:9e:d7:bf:cc:94:c4:4e:94:27:95:03:bb: a0:30:9c:8c:bf:4e:bb:c1:12:82:10:e5:90:42:61: ec:60:6d:92:9a:5d:33:9e:74:d6:85:07:fc:99:b3: a3:51:72:70:ca:80:4b:16:bb:52:c8:6f:77:76:03: b6:97:65:52:8c:94:9e:60:87:64:73:93:8d:96:ea: 01:61:fa:32:1f:1f:ab:a9:b2:e9:60:a3:72:90:59: 7c:61:a6:15:e3:e1:15:f3:f3:28:54:e9:24:ba:9b: be:18:e4:ba:da:d4:97:d7:16:bb:6a:d9:0f:29:d2: dc:22:85:b9:18:f9:e3:dc:80:ea:cc:37:f5:3f:95: a1:40:c8:a9:7d:94:88:24:7e:6d:d3:36:40:bf:90: 62:be:1b:eb:fb:79:8a:30:0e:bf:91:9c:ce:e1:c5: a9:b6:5b:50:a4:84:a9:1e:28:fc:1e:1d:40:1b:77: 7c:dc:79:76:b5:f3:34:34:91:77:83:07:47:4c:a7: 17:75:e8:18:e9:0d:0b:36:0c:df:60:36:1e:fe:2d: c7:24:75:94:1b:d3:45:72:bd:d5:d1:3b:ab:4d:b6: f2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:3D:5E:2A:F4:0D:02:C7:50:B6:CD:8C:BA:3D:89:64:58:4F:A8 X509v3 Authority Key Identifier: keyid:17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/aLE9Xir0DQLHULbNjLo9iWRYT6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.233.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:61:a6:1d:f9:86:24:85:0b:c6:1c:fc:86:f9:39:a2:22:fd: 00:40:f3:88:24:49:b2:85:cd:e4:d7:5e:6c:ac:cb:db:37:29: 4f:66:71:c8:96:d1:8e:ab:71:2b:65:7b:db:31:f2:ef:d8:a9: e9:06:bc:97:79:ba:f2:8e:94:d9:ca:06:ce:4a:b7:52:40:71: a1:78:f2:fc:22:b7:29:6c:62:2d:d2:29:f5:51:9c:49:08:a7: 2c:6d:01:f0:92:46:8b:2c:0b:30:66:9f:8c:4e:a7:0c:39:fc: 5a:58:2b:43:4e:5c:84:9c:63:72:f2:6e:7b:26:af:7c:fe:57: f6:d7:45:fd:a6:fb:20:6b:b8:46:c4:8c:43:27:a1:d0:60:e0: 9d:5e:4d:b4:12:27:ef:65:72:7e:1e:56:1b:6c:58:49:56:a6: 8b:88:fb:78:78:db:f1:09:dd:00:b4:0e:7a:09:e5:19:1f:66: be:33:43:6a:f3:68:59:a0:63:ad:ef:e4:fc:0a:f1:79:02:65: 0b:43:16:7e:dd:9d:9c:93:4a:ae:2b:f2:a4:a2:12:7a:ef:a9: 2c:6c:7a:d4:f4:f0:b9:3a:56:e7:94:6e:82:c0:81:64:56:b0: 0f:2f:3f:a7:17:2e:a7:06:4f:d2:77:18:38:52:2a:30:60:b7: 1f:90:f2:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okxPD+BIaDcF+VlX5rLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZjU3NDMwYjEwNDhhOTIzYTg5ZDZjZmEyYTNjYjNiZmMy ZjEyNTgwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGIxM2Q1ZTJhZjQwZDAyYzc1MGI2Y2Q4Y2JhM2Q4OTY0NTg0ZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SAq+MGDPMLLPIKhbs0mAsrtI+9K qH9t5W0p/wvDMPqe17/MlMROlCeVA7ugMJyMv067wRKCEOWQQmHsYG2Sml0znnTW hQf8mbOjUXJwyoBLFrtSyG93dgO2l2VSjJSeYIdkc5ONluoBYfoyHx+rqbLpYKNy kFl8YaYV4+EV8/MoVOkkupu+GOS62tSX1xa7atkPKdLcIoW5GPnj3IDqzDf1P5Wh QMipfZSIJH5t0zZAv5Bivhvr+3mKMA6/kZzO4cWptltQpISpHij8Hh1AG3d83Hl2 tfM0NJF3gwdHTKcXdegY6Q0LNgzfYDYe/i3HJHWUG9NFcr3V0TurTbbyCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGixPV4q9A0Cx1C2zYy6PYlkWE+oMB8GA1UdIwQY MBaAFBf1dDCxBIqSOonWz6Kjyzv8LxJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRl9WME1MRUVpcEk2aWRiUG9xUExPX3d2RWxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xMjcyNjgtNmNmNS00Njk0LWFlMTEt ZTA5NDA4YWU0NjY2LzEvYUxFOVhpcjBEUUxIVUxiTmpMbzlpV1JZVDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xMjcyNjgtNmNmNS00Njk0LWFlMTEtZTA5NDA4YWU0NjY2 LzEvRl9WME1MRUVpcEk2aWRiUG9xUExPX3d2RWxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vpMA0G CSqGSIb3DQEBCwUAA4IBAQCOYaYd+YYkhQvGHPyG+TmiIv0AQPOIJEmyhc3k115s rMvbNylPZnHIltGOq3ErZXvbMfLv2KnpBryXebryjpTZygbOSrdSQHGhePL8Ircp bGIt0in1UZxJCKcsbQHwkkaLLAswZp+MTqcMOfxaWCtDTlyEnGNy8m57Jq98/lf2 10X9pvsga7hGxIxDJ6HQYOCdXk20EifvZXJ+HlYbbFhJVqaLiPt4eNvxCd0AtA56 CeUZH2a+M0Nq82hZoGOt7+T8CvF5AmULQxZ+3Z2ck0quK/KkohJ676ksbHrU9PC5 OlbnlG6CwIFkVrAPLz+nFy6nBk/Sdxg4UiowYLcfkPI6 -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:08 2026 by rpki-client