This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aLiuNkELPVWARkkxMSEamxhaRc0.roa File: aLiuNkELPVWARkkxMSEamxhaRc0.roa (raw, json) Hash identifier: 9F0uso8gwgNQ/yBBmLF3VUVgpVnvmoqrTbV8HOJEknk= Subject key identifier: 68:B8:AE:36:41:0B:3D:55:80:46:49:31:31:21:1A:9B:18:5A:45:CD Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFB2684B3BA0CD33D96BCE18AD041 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aLiuNkELPVWARkkxMSEamxhaRc0.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8618 IP address blocks: 195.130.124.0/22 maxlen: 22 195.251.100.0/23 maxlen: 24 195.251.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fb:26:84:b3:ba:0c:d3:3d:96:bc:e1:8a:d0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68b8ae36410b3d558046493131211a9b185a45cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:8e:1b:4f:79:b5:cc:e9:09:fc:2c:b9:e7: 71:6c:42:2c:a0:15:8a:f2:85:33:b8:52:f7:ac:b7: cc:6f:51:f5:7f:d6:a1:78:21:d1:6c:37:e8:ce:02: 30:44:d9:59:bd:20:b2:36:02:c0:f7:c0:1a:08:89: 86:c5:43:df:92:67:07:47:8c:37:97:f5:03:4a:e4: 61:16:cc:7e:f3:26:fd:d9:5a:ad:57:00:8c:2e:93: 21:c2:8f:25:d7:16:d7:90:17:3c:38:e9:71:e2:4c: f0:17:2c:64:0d:51:e1:50:66:fd:12:f3:30:82:09: 3d:4f:25:77:c2:70:3d:9d:34:74:ab:99:a6:35:c6: dc:5a:e2:9b:0f:db:62:09:ac:06:52:ad:bc:6c:aa: ec:f2:c8:35:a1:a4:b1:8e:a6:82:f6:f4:03:ea:37: a6:24:46:46:28:20:b1:24:8b:bf:10:10:ec:f3:b3: 56:b3:76:60:24:d3:cb:f5:f9:87:8c:14:ef:83:c7: a4:89:02:ff:fd:93:49:f1:ee:55:04:0f:f9:e2:ed: 36:e5:ba:c5:05:37:e7:cd:92:5c:74:ea:ab:e7:f7: 33:14:89:8d:b0:d3:4b:56:93:00:95:ac:14:d7:03: 33:c9:d3:9e:6e:d7:ea:41:32:3b:b0:b1:79:81:14: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:AE:36:41:0B:3D:55:80:46:49:31:31:21:1A:9B:18:5A:45:CD X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/aLiuNkELPVWARkkxMSEamxhaRc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.130.124.0/22 195.251.100.0/23 195.251.110.0/23 Signature Algorithm: sha256WithRSAEncryption 17:12:75:18:d3:bd:34:cc:22:74:bd:dd:d2:5c:67:0e:11:dd: c0:0b:c6:47:76:13:05:61:d6:05:5c:df:da:69:9d:69:d8:f5: 89:90:33:6d:96:6d:e3:44:93:4d:0c:b2:5b:f9:d6:2a:f0:db: b9:db:91:da:1f:45:d7:68:f4:56:1c:1c:51:28:ee:e8:d7:43: 50:bf:e3:a6:78:3e:70:19:d6:2a:de:67:1e:7f:1a:af:7b:10: a0:2a:cc:cd:c6:ba:3a:a2:09:4d:1a:02:5f:49:a4:45:57:08: bd:ce:67:b7:d6:ce:1f:7b:e2:24:03:cd:e2:02:7c:33:be:36: a5:89:51:05:a0:30:f5:aa:42:50:cf:99:4f:88:6d:37:13:9a: e3:42:cb:94:9e:fe:1d:3a:22:6d:6b:3c:94:84:dc:a2:30:6e: b4:53:f7:d3:6c:bf:5f:3d:3e:6a:d3:d6:90:b6:78:25:ad:d2: a6:16:51:be:81:4d:ae:66:cd:01:de:b1:9a:73:1d:12:2f:f2: 91:69:82:07:66:82:9f:2b:97:8b:5c:3f:5b:bc:99:ea:26:b0: 1e:4a:9c:47:82:70:3f:39:53:35:61:6a:03:e6:60:78:ba:62: 73:49:40:9d:06:1d:2c:3a:fd:2e:1c:f6:59:ae:3d:65:e7:54: 80:d7:8b:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87PsmhLO6DNM9lrzhitBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGI4YWUzNjQxMGIzZDU1ODA0NjQ5MzEzMTIxMWE5YjE4NWE0NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw22OG095tczpCfwsuedxbEIsoBWK 8oUzuFL3rLfMb1H1f9aheCHRbDfozgIwRNlZvSCyNgLA98AaCImGxUPfkmcHR4w3 l/UDSuRhFsx+8yb92VqtVwCMLpMhwo8l1xbXkBc8OOlx4kzwFyxkDVHhUGb9EvMw ggk9TyV3wnA9nTR0q5mmNcbcWuKbD9tiCawGUq28bKrs8sg1oaSxjqaC9vQD6jem JEZGKCCxJIu/EBDs87NWs3ZgJNPL9fmHjBTvg8ekiQL//ZNJ8e5VBA/54u025brF BTfnzZJcdOqr5/czFImNsNNLVpMAlawU1wMzydOebtfqQTI7sLF5gRSYPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGi4rjZBCz1VgEZJMTEhGpsYWkXNMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvYUxpdU5rRUxQVldBUmtreE1TRWFteGhhUmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw4J8AwQB w/tkAwQBw/tuMA0GCSqGSIb3DQEBCwUAA4IBAQAXEnUY0700zCJ0vd3SXGcOEd3A C8ZHdhMFYdYFXN/aaZ1p2PWJkDNtlm3jRJNNDLJb+dYq8Nu525HaH0XXaPRWHBxR KO7o10NQv+OmeD5wGdYq3mcefxqvexCgKszNxro6oglNGgJfSaRFVwi9zme31s4f e+IkA83iAnwzvjaliVEFoDD1qkJQz5lPiG03E5rjQsuUnv4dOiJtazyUhNyiMG60 U/fTbL9fPT5q09aQtnglrdKmFlG+gU2uZs0B3rGacx0SL/KRaYIHZoKfK5eLXD9b vJnqJrAeSpxHgnA/OVM1YWoD5mB4umJzSUCdBh0sOv0uHPZZrj1l51SA14tW -----END CERTIFICATE-----Generated at Mon Feb 2 12:41:24 2026 by rpki-client