This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/alFC4352ujfylmeJv44dIFDrX8I.roa File: alFC4352ujfylmeJv44dIFDrX8I.roa (raw, json) Hash identifier: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY= Subject key identifier: 6A:51:42:E3:7E:76:BA:37:F2:96:67:89:BF:8E:1D:20:50:EB:5F:C2 Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Certificate serial: 019B797F379546C4C4B235E7D087039C2005 Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/alFC4352ujfylmeJv44dIFDrX8I.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212223 IP address blocks: 37.72.110.0/24 maxlen: 24 185.217.63.0/24 maxlen: 24 2a05:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:37:95:46:c4:c4:b2:35:e7:d0:87:03:9c:20:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a5142e37e76ba37f2966789bf8e1d2050eb5fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:47:05:04:fd:f7:7b:24:ec:02:b9:27:b9:71: b9:3c:8d:a0:2d:04:bb:ab:42:16:37:43:10:0d:b3: ef:a2:3f:58:cb:07:87:c1:57:c1:d9:5c:4b:c9:72: 97:7c:e2:00:d0:24:89:d0:a7:8b:66:57:29:0e:c6: 60:f4:ba:15:f2:d0:89:b4:9b:08:7f:65:e0:6c:88: 48:ff:75:3a:1a:eb:9c:ff:f1:db:48:1e:f9:28:ab: 8c:82:24:6b:b0:0d:14:aa:19:2b:ee:8b:96:b7:cf: 99:23:12:c5:bf:b7:89:57:69:9b:82:fb:f5:6b:4d: 8f:77:1a:95:31:4f:4c:37:f7:e3:95:9b:ab:e4:91: 61:5e:da:fe:df:cd:11:b2:29:22:78:a5:2a:07:cc: 57:71:a5:48:38:2c:b6:0c:05:1d:59:be:36:40:02: ef:f5:17:e6:7b:3d:dc:17:f1:79:6d:cd:0b:07:1a: 7e:37:d2:7b:c8:4a:69:db:f5:ee:80:7e:72:ea:f2: 01:d1:6a:56:f4:24:5d:34:ee:26:32:93:36:ba:a8: 98:01:de:36:27:96:fa:91:f4:63:8b:1d:d0:be:19: 38:40:0b:d1:b9:c2:e6:d5:1c:60:43:de:f9:70:b1: 0b:05:1c:27:48:06:60:c1:92:19:fc:ef:81:9b:70: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:51:42:E3:7E:76:BA:37:F2:96:67:89:BF:8E:1D:20:50:EB:5F:C2 X509v3 Authority Key Identifier: keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/alFC4352ujfylmeJv44dIFDrX8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.110.0/24 185.217.63.0/24 IPv6: 2a05:7040::/32 Signature Algorithm: sha256WithRSAEncryption c9:d1:65:f3:d2:e3:f1:27:59:29:7a:9b:84:2b:83:c2:b6:ac: 87:23:98:e9:b5:9e:14:60:ce:3b:04:1a:69:1d:21:71:65:cf: 25:37:9c:00:9a:b0:9a:b2:54:42:72:60:6e:b1:c1:df:75:57: 42:51:d7:27:94:5e:df:fd:c1:99:ae:3b:cd:fb:6c:dc:09:e7: a2:28:be:0e:80:95:c0:a5:71:35:35:2c:75:d9:48:41:d2:9b: 73:71:2d:6d:d0:e1:bb:80:43:22:de:d3:86:1d:a6:d5:c5:10: 26:75:79:b8:b3:df:02:87:ce:e8:92:a0:36:87:00:78:9b:a9: fb:c0:0d:fe:e2:70:ab:ce:98:ab:60:55:aa:d3:d2:9b:ba:ef: 2b:5b:e4:f7:da:dc:35:b6:3d:59:fd:81:8b:ff:dd:51:8d:67: b5:67:0b:ff:32:bb:c4:44:80:01:cc:8a:e0:77:e2:4a:dc:46: ff:60:5d:91:45:a9:c6:39:d1:3e:82:b8:e7:89:0a:e3:3d:9a: 79:7b:aa:b3:f0:f1:d8:9d:55:44:e5:1b:9e:0e:93:d2:99:50: 41:39:df:00:69:70:0e:4b:b1:4d:c0:ba:d5:87:65:ab:41:88: d9:d0:ac:d3:81:cb:b7:a3:43:3b:69:ec:cf:de:52:c5:7a:01: 85:96:cd:56 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fzeVRsTEsjXn0IcDnCAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0 OWJhY2UwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTUxNDJlMzdlNzZiYTM3ZjI5NjY3ODliZjhlMWQyMDUwZWI1ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EcFBP33eyTsArknuXG5PI2gLQS7 q0IWN0MQDbPvoj9YyweHwVfB2VxLyXKXfOIA0CSJ0KeLZlcpDsZg9LoV8tCJtJsI f2XgbIhI/3U6Guuc//HbSB75KKuMgiRrsA0Uqhkr7ouWt8+ZIxLFv7eJV2mbgvv1 a02PdxqVMU9MN/fjlZur5JFhXtr+380RsikieKUqB8xXcaVIOCy2DAUdWb42QALv 9Rfmez3cF/F5bc0LBxp+N9J7yEpp2/XugH5y6vIB0WpW9CRdNO4mMpM2uqiYAd42 J5b6kfRjix3Qvhk4QAvRucLm1RxgQ975cLELBRwnSAZgwZIZ/O+Bm3CZtwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGpRQuN+dro38pZnib+OHSBQ61/CMB8GA1UdIwQY MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt NzBiNGUwYjNmYzllLzEvYWxGQzQzNTJ1amZ5bG1lSnY0NGRJRkRyWDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJUhuAwQA udk/MA0EAgACMAcDBQAqBXBAMA0GCSqGSIb3DQEBCwUAA4IBAQDJ0WXz0uPxJ1kp epuEK4PCtqyHI5jptZ4UYM47BBppHSFxZc8lN5wAmrCaslRCcmBuscHfdVdCUdcn lF7f/cGZrjvN+2zcCeeiKL4OgJXApXE1NSx12UhB0ptzcS1t0OG7gEMi3tOGHabV xRAmdXm4s98Ch87okqA2hwB4m6n7wA3+4nCrzpirYFWq09Kbuu8rW+T32tw1tj1Z /YGL/91RjWe1Zwv/MrvERIABzIrgd+JK3Eb/YF2RRanGOdE+grjniQrjPZp5e6qz 8PHYnVVE5RueDpPSmVBBOd8AaXAOS7FNwLrVh2WrQYjZ0KzTgcu3o0M7aezP3lLF egGFls1W -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:46 2026 by rpki-client