This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/ALvjuEagqkX_bxCENg8XKd0AAsU.roa File: ALvjuEagqkX_bxCENg8XKd0AAsU.roa (raw, json) Hash identifier: IQ71j6lnnVzLcsftePg8wMiGMFkrq5Obvc/qjDtIg9o= Subject key identifier: 00:BB:E3:B8:46:A0:AA:45:FF:6F:10:84:36:0F:17:29:DD:00:02:C5 Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886 Certificate serial: 019B78343C0017BFBD136A0385CF65251433 Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/ALvjuEagqkX_bxCENg8XKd0AAsU.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215424 IP address blocks: 45.14.76.0/22 maxlen: 24 195.95.153.0/24 maxlen: 24 2a03:5e60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3c:00:17:bf:bd:13:6a:03:85:cf:65:25:14:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00bbe3b846a0aa45ff6f1084360f1729dd0002c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:2d:af:a2:2a:16:d0:bc:49:c9:1a:f9:40: e6:8c:05:d5:cc:12:aa:79:fb:e3:34:2e:03:d1:cb: d2:42:fb:5c:a4:69:a9:1b:f1:66:ca:80:81:45:d7: 9d:31:be:66:6d:94:47:5e:0e:7a:3f:b0:9f:2d:7b: dd:c6:54:83:73:76:e1:e1:c4:fa:7a:cd:e7:d4:7a: cd:24:cd:f5:b8:96:85:40:97:c7:29:02:3a:3a:ed: f4:61:70:ad:8d:8b:aa:67:78:6d:d1:ce:91:75:9b: 0e:f0:df:c1:52:d4:93:21:fc:65:3f:a1:dd:32:fb: 47:b6:77:72:21:44:0f:7d:4b:27:71:c9:14:fc:f1: 09:c5:2e:e5:b4:33:f6:6e:15:28:02:9a:34:f0:80: cb:bf:55:0d:e0:97:2f:d0:5b:eb:98:09:27:9a:54: 3c:24:cd:51:b8:07:5e:e2:56:39:b4:68:01:94:4c: d2:48:14:3c:83:c3:ed:7e:2e:fa:8d:bf:e8:fa:cb: 08:ed:5e:80:95:cb:9c:22:d0:0e:bd:4a:f8:c8:51: 06:52:b3:46:32:f9:b6:89:f7:7f:11:7e:ed:c0:f1: 7a:1a:79:a3:05:db:8d:e9:aa:2a:3f:5e:f8:a5:63: a6:9a:65:84:50:47:63:91:7c:ba:15:5c:51:81:c2: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:E3:B8:46:A0:AA:45:FF:6F:10:84:36:0F:17:29:DD:00:02:C5 X509v3 Authority Key Identifier: keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/ALvjuEagqkX_bxCENg8XKd0AAsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.76.0/22 195.95.153.0/24 IPv6: 2a03:5e60::/32 Signature Algorithm: sha256WithRSAEncryption 20:91:7c:e5:26:d5:10:80:e7:84:1b:63:0d:aa:aa:24:01:2b: f7:cd:3c:7e:95:e4:d1:e4:b7:7f:c3:5a:b0:68:12:06:2d:98: 47:ba:f1:a5:0d:d9:4d:c8:99:dc:16:f0:b0:92:14:52:a4:e4: d4:6f:81:1d:51:4e:7a:6b:79:65:02:c9:90:6b:ec:f1:3d:3e: cf:cc:4c:27:c9:82:be:0e:5e:f4:a1:7b:5b:cc:63:d0:f6:66: 42:e9:d7:f6:5d:c2:9c:ae:cf:97:ba:9e:d1:dc:c2:d7:84:06: 90:5b:97:b5:a2:b7:18:78:2a:19:c2:91:3f:18:25:bc:73:d6: 15:79:8b:fa:76:74:42:2e:71:b0:36:de:3b:03:b8:65:c3:1f: 4c:6a:76:9d:e1:b6:1e:7d:f7:57:63:c4:e5:91:2f:a0:97:cb: 65:f7:a8:6a:54:e9:6f:12:48:ab:3b:c0:db:1b:54:1a:94:6b: 14:75:e5:d0:f3:da:16:34:2b:b2:2e:ca:27:e8:ad:96:29:05: 27:e4:18:03:97:d8:ac:c5:1d:79:6b:8e:c7:64:79:82:c5:a6: af:28:8c:63:ae:f3:8d:c5:96:eb:35:f5:c5:52:19:e7:40:95: 3e:29:b8:54:59:62:df:32:5c:35:c9:8f:89:d7:24:b3:c8:84: cf:28:c6:6c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NDwAF7+9E2oDhc9lJRQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZDMyZTc1Mjk0MTg3ZDQ2ZThlYWUwZjhmZTcyYjVmZDdh YmY4ODYwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGJiZTNiODQ2YTBhYTQ1ZmY2ZjEwODQzNjBmMTcyOWRkMDAwMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJctr6IqFtC8Scka+UDmjAXVzBKq efvjNC4D0cvSQvtcpGmpG/FmyoCBRdedMb5mbZRHXg56P7CfLXvdxlSDc3bh4cT6 es3n1HrNJM31uJaFQJfHKQI6Ou30YXCtjYuqZ3ht0c6RdZsO8N/BUtSTIfxlP6Hd MvtHtndyIUQPfUsncckU/PEJxS7ltDP2bhUoApo08IDLv1UN4Jcv0FvrmAknmlQ8 JM1RuAde4lY5tGgBlEzSSBQ8g8Ptfi76jb/o+ssI7V6AlcucItAOvUr4yFEGUrNG Mvm2ifd/EX7twPF6GnmjBduN6aoqP174pWOmmmWEUEdjkXy6FVxRgcLO5wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAC747hGoKpF/28QhDYPFyndAALFMB8GA1UdIwQY MBaAFPfTLnUpQYfUbo6uD4/nK1/Xq/iGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAt ZDFhNDU5OWNiMGU1LzEvQUx2anVFYWdxa1hfYnhDRU5nOFhLZDBBQXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAtZDFhNDU5OWNiMGU1 LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQ5MAwQA w1+ZMA0EAgACMAcDBQAqA15gMA0GCSqGSIb3DQEBCwUAA4IBAQAgkXzlJtUQgOeE G2MNqqokASv3zTx+leTR5Ld/w1qwaBIGLZhHuvGlDdlNyJncFvCwkhRSpOTUb4Ed UU56a3llAsmQa+zxPT7PzEwnyYK+Dl70oXtbzGPQ9mZC6df2XcKcrs+Xup7R3MLX hAaQW5e1orcYeCoZwpE/GCW8c9YVeYv6dnRCLnGwNt47A7hlwx9Manad4bYeffdX Y8TlkS+gl8tl96hqVOlvEkirO8DbG1QalGsUdeXQ89oWNCuyLson6K2WKQUn5BgD l9isxR15a47HZHmCxaavKIxjrvONxZbrNfXFUhnnQJU+KbhUWWLfMlw1yY+J1ySz yITPKMZs -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:17 2026 by rpki-client