This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/AlMjmcR8h2duCbNC95EnaGY9_3A.roa File: AlMjmcR8h2duCbNC95EnaGY9_3A.roa (raw, json) Hash identifier: ptbGb9EdDKFPOd43q/T+LHJ7YQ4htAGE8y7UU6PJeXQ= Subject key identifier: 02:53:23:99:C4:7C:87:67:6E:09:B3:42:F7:91:27:68:66:3D:FF:70 Certificate issuer: /CN=544905eaad4cea6c3f2d650c08fae3d445186752 Certificate serial: 019B79ED587994793208E026F6F9F0ED5E70 Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/AlMjmcR8h2duCbNC95EnaGY9_3A.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210941 IP address blocks: 2001:67c:810::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:58:79:94:79:32:08:e0:26:f6:f9:f0:ed:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02532399c47c87676e09b342f7912768663dff70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:a6:15:a7:83:1a:19:1c:0d:0f:52:41:55: b3:08:e8:58:5a:09:86:a8:42:17:76:b3:41:12:59: cb:1c:b9:55:1e:44:53:cc:63:b3:f1:2f:7f:2e:2f: 82:f1:dc:a4:18:be:78:6f:df:f8:cf:ea:f2:cc:cc: 39:d8:33:5e:19:16:68:ef:e4:de:76:7e:23:c5:a7: 06:ef:9b:6f:4b:15:1a:43:e1:9a:d4:a4:c0:8c:bc: 73:6a:91:40:42:e8:ba:3c:dc:70:dd:9d:40:87:71: 82:4c:c3:1a:71:a4:e4:df:f6:13:3e:00:b0:7d:fa: a1:51:65:73:35:19:16:21:b9:39:c6:f3:10:07:d4: 57:62:f4:65:2e:a5:6d:16:d7:e8:65:75:4a:8b:99: ce:f4:42:0e:25:ca:30:64:10:7e:a3:0b:17:27:c2: c4:7b:49:47:e0:ea:2c:3c:b2:1b:6d:6e:d7:9e:e5: 70:05:ed:44:6d:d1:e8:25:29:17:c7:41:5f:57:9e: 5e:02:b5:27:b0:18:3b:98:0d:32:45:a8:ef:ee:a7: bd:f4:a9:a0:b0:0f:21:aa:6d:06:e9:0d:ef:90:75: 92:e2:e7:8d:04:88:f6:d4:61:30:f8:f1:a2:89:69: f6:9c:9c:e0:3b:6c:39:88:aa:c6:0e:ef:30:f0:75: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:53:23:99:C4:7C:87:67:6E:09:B3:42:F7:91:27:68:66:3D:FF:70 X509v3 Authority Key Identifier: keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/AlMjmcR8h2duCbNC95EnaGY9_3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:810::/48 Signature Algorithm: sha256WithRSAEncryption ac:69:72:5e:62:48:a5:99:b5:59:95:de:4f:05:5f:ab:b6:c4: c5:c7:54:e9:ce:19:06:a3:48:f3:21:3a:87:bb:93:cb:ec:42: 0d:08:fe:79:ba:18:c6:85:5b:f9:70:31:0e:40:2f:14:d7:46: a6:70:aa:71:68:f0:57:5a:5f:3f:f4:66:73:cf:f7:f9:2d:0f: d5:cb:d7:4d:ba:c3:50:64:27:ba:9d:af:dc:01:df:ca:22:34: 46:79:af:b8:9e:21:e9:e2:07:e0:74:b9:a5:05:96:26:a8:9b: 43:7f:21:1c:50:f8:f2:0c:51:15:e9:10:d7:fe:5b:6b:4c:2f: c8:2a:1d:eb:8f:fb:05:a5:af:9c:0f:10:db:ea:32:e0:c5:cc: 7f:65:c1:0a:64:08:0d:6e:19:5d:7c:6b:97:b8:6b:de:42:5c: 89:c2:7c:5b:eb:30:c4:c7:54:64:02:ef:5c:43:aa:80:45:e5: a2:fe:63:ad:5e:da:d7:61:c5:c6:d3:dc:29:20:ac:c1:bb:58: bd:f8:7c:ab:32:27:37:a1:08:b4:e2:21:43:f7:67:ba:37:45: fd:df:fc:32:8a:26:72:c2:c1:c6:c2:f8:c1:10:09:b6:47:bb: 34:e6:ca:95:c8:05:7d:7b:1c:9f:e5:c0:72:fe:04:61:cb:39: 29:ea:a2:9e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57Vh5lHkyCOAm9vnw7V5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDkwNWVhYWQ0Y2VhNmMzZjJkNjUwYzA4ZmFlM2Q0NDUx ODY3NTIwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjUzMjM5OWM0N2M4NzY3NmUwOWIzNDJmNzkxMjc2ODY2M2RmZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliCmFaeDGhkcDQ9SQVWzCOhYWgmG qEIXdrNBElnLHLlVHkRTzGOz8S9/Li+C8dykGL54b9/4z+ryzMw52DNeGRZo7+Te dn4jxacG75tvSxUaQ+Ga1KTAjLxzapFAQui6PNxw3Z1Ah3GCTMMacaTk3/YTPgCw ffqhUWVzNRkWIbk5xvMQB9RXYvRlLqVtFtfoZXVKi5nO9EIOJcowZBB+owsXJ8LE e0lH4OosPLIbbW7XnuVwBe1EbdHoJSkXx0FfV55eArUnsBg7mA0yRajv7qe99Kmg sA8hqm0G6Q3vkHWS4ueNBIj21GEw+PGiiWn2nJzgO2w5iKrGDu8w8HVJ/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAJTI5nEfIdnbgmzQveRJ2hmPf9wMB8GA1UdIwQY MBaAFFRJBeqtTOpsPy1lDAj649RFGGdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OWNjZmEtYzk2Zi00ZDEyLWIxOGYt NWIzYTQxMTI1YmVhLzEvQWxNam1jUjhoMmR1Q2JOQzk1RW5hR1k5XzNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85OWNjZmEtYzk2Zi00ZDEyLWIxOGYtNWIzYTQxMTI1YmVh LzEvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAgQ MA0GCSqGSIb3DQEBCwUAA4IBAQCsaXJeYkilmbVZld5PBV+rtsTFx1TpzhkGo0jz ITqHu5PL7EINCP55uhjGhVv5cDEOQC8U10amcKpxaPBXWl8/9GZzz/f5LQ/Vy9dN usNQZCe6na/cAd/KIjRGea+4niHp4gfgdLmlBZYmqJtDfyEcUPjyDFEV6RDX/ltr TC/IKh3rj/sFpa+cDxDb6jLgxcx/ZcEKZAgNbhldfGuXuGveQlyJwnxb6zDEx1Rk Au9cQ6qAReWi/mOtXtrXYcXG09wpIKzBu1i9+HyrMic3oQi04iFD92e6N0X93/wy iiZywsHGwvjBEAm2R7s05sqVyAV9exyf5cBy/gRhyzkp6qKe -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:14 2026 by rpki-client