This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/AleCDdJblQdVI-S091EQULB75VY.roa File: AleCDdJblQdVI-S091EQULB75VY.roa (raw, json) Hash identifier: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w= Subject key identifier: 02:57:82:0D:D2:5B:95:07:55:23:E4:B4:F7:51:10:50:B0:7B:E5:56 Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5 Certificate serial: 019B79ECA5AA7C6CF135F1E70B27308A0959 Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/AleCDdJblQdVI-S091EQULB75VY.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39839 IP address blocks: 95.130.208.0/21 maxlen: 24 185.153.252.0/22 maxlen: 24 193.163.102.0/24 maxlen: 24 2a01:630::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a5:aa:7c:6c:f1:35:f1:e7:0b:27:30:8a:09:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0257820dd25b95075523e4b4f7511050b07be556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:f6:d5:c1:87:dd:2a:72:94:86:33:c5:64: 96:e4:7a:94:cd:64:9a:4a:a9:64:9c:5d:df:2e:6e: 23:4d:f5:98:a7:c7:63:81:2c:89:de:b6:4d:df:b2: 61:4a:08:c2:ab:f9:d4:f3:96:50:b3:58:eb:a8:1d: 0f:9c:58:ee:e7:a8:c9:d3:92:a7:1e:db:5f:84:ec: c0:dc:27:83:c7:21:94:87:91:c7:59:b2:49:88:97: 16:0e:10:48:97:4a:bc:76:95:86:f3:46:13:cb:e9: 09:5d:7f:d2:1b:55:e5:c4:10:2e:dc:5e:0f:ab:2b: 80:3f:94:b5:f5:01:55:e8:b0:40:c9:80:bc:a4:9a: 98:70:d6:a6:b8:8a:31:36:ba:15:f8:8b:ce:15:a9: 35:e8:41:b5:ac:95:68:89:f3:c5:47:61:61:fb:ea: c6:42:28:95:af:5d:80:f6:dd:66:52:1c:6d:2f:a7: b8:7f:a1:cb:bc:4b:66:3b:21:03:92:63:2c:ee:ae: 8f:81:21:cc:90:30:bd:94:bf:fa:ea:9d:92:58:ac: a3:04:22:8c:30:79:57:32:ff:65:83:08:4c:c1:0a: 88:36:73:11:a8:2e:0b:89:b8:3f:86:4c:3f:c5:b1: 2f:83:df:8b:e5:2a:ca:ca:9b:d0:35:21:5c:f8:0d: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:57:82:0D:D2:5B:95:07:55:23:E4:B4:F7:51:10:50:B0:7B:E5:56 X509v3 Authority Key Identifier: keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/AleCDdJblQdVI-S091EQULB75VY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.208.0/21 185.153.252.0/22 193.163.102.0/24 IPv6: 2a01:630::/32 Signature Algorithm: sha256WithRSAEncryption 1f:07:dc:01:4b:15:f8:4a:95:f8:38:19:3c:5f:76:82:9a:ea: 54:35:5d:e4:34:e1:5a:6a:cc:61:b6:f1:07:6e:e0:34:ee:5b: 68:4e:69:de:8b:1e:d0:7e:b8:26:ed:17:7a:62:d3:c1:b2:ad: 99:69:e1:3e:dc:ed:64:64:30:a6:c2:1c:c2:4a:90:70:e5:a9: a7:ec:26:07:98:31:4f:7f:96:fe:2c:5b:5f:27:6e:66:ab:e8: 4e:4d:3a:10:8b:43:aa:24:46:83:57:f7:0e:66:04:c5:a6:c9: e0:69:c4:1e:8d:bb:b1:f5:33:b4:d0:a4:70:06:f1:ac:ab:4f: ae:b0:1d:40:37:0e:af:e2:ce:3f:5b:7a:81:47:cd:94:57:ff: bd:dc:83:aa:58:01:47:58:9c:92:82:a0:50:1d:4d:22:d5:27: 55:2e:52:d8:dc:08:0c:cc:53:0a:9b:32:92:cf:56:d4:32:d4: 92:1b:13:2a:b2:36:64:f0:56:0d:5c:93:cd:4c:4b:f8:13:dc: b4:13:4a:1c:1f:f1:e9:11:72:7e:59:ba:90:96:94:0c:1a:22: 79:bd:13:cc:01:77:72:57:d0:0b:00:bc:cf:9b:af:1e:02:48: 5e:53:ce:ff:97:59:e9:7d:a6:43:ed:3b:64:2b:a6:53:02:3f: 89:0e:8f:e1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57KWqfGzxNfHnCycwiglZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNjg1Y2Y4OGE3ZmM0M2ZlMWM3ZmUzNGE2ZmYzZGRiYjQx NGYwYjUwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjU3ODIwZGQyNWI5NTA3NTUyM2U0YjRmNzUxMTA1MGIwN2JlNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gj21cGH3SpylIYzxWSW5HqUzWSa SqlknF3fLm4jTfWYp8djgSyJ3rZN37JhSgjCq/nU85ZQs1jrqB0PnFju56jJ05Kn HttfhOzA3CeDxyGUh5HHWbJJiJcWDhBIl0q8dpWG80YTy+kJXX/SG1XlxBAu3F4P qyuAP5S19QFV6LBAyYC8pJqYcNamuIoxNroV+IvOFak16EG1rJVoifPFR2Fh++rG QiiVr12A9t1mUhxtL6e4f6HLvEtmOyEDkmMs7q6PgSHMkDC9lL/66p2SWKyjBCKM MHlXMv9lgwhMwQqINnMRqC4Libg/hkw/xbEvg9+L5SrKypvQNSFc+A1U+wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAJXgg3SW5UHVSPktPdREFCwe+VWMB8GA1UdIwQY MBaAFDpoXPiKf8Q/4cf+NKb/Pdu0FPC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDct NTlkNmNhNjVjY2JjLzEvQWxlQ0RkSmJsUWRWSS1TMDkxRVFVTEI3NVZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDctNTlkNmNhNjVjY2Jj LzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDX4LQAwQC uZn8AwQAwaNmMA0EAgACMAcDBQAqAQYwMA0GCSqGSIb3DQEBCwUAA4IBAQAfB9wB SxX4SpX4OBk8X3aCmupUNV3kNOFaasxhtvEHbuA07ltoTmneix7Qfrgm7Rd6YtPB sq2ZaeE+3O1kZDCmwhzCSpBw5amn7CYHmDFPf5b+LFtfJ25mq+hOTToQi0OqJEaD V/cOZgTFpsngacQejbux9TO00KRwBvGsq0+usB1ANw6v4s4/W3qBR82UV/+93IOq WAFHWJySgqBQHU0i1SdVLlLY3AgMzFMKmzKSz1bUMtSSGxMqsjZk8FYNXJPNTEv4 E9y0E0ocH/HpEXJ+WbqQlpQMGiJ5vRPMAXdyV9ALALzPm68eAkheU87/l1npfaZD 7TtkK6ZTAj+JDo/h -----END CERTIFICATE-----Generated at Wed Jan 28 08:28:42 2026 by rpki-client