This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/Al7UlQjrzC_B0KidPO1VngOHAZs.roa File: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (raw, json) Hash identifier: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo= Subject key identifier: 02:5E:D4:95:08:EB:CC:2F:C1:D0:A8:9D:3C:ED:55:9E:03:87:01:9B Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Certificate serial: 019B7910D63B5DC88A628B5BCF7D5EE5AB94 Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/Al7UlQjrzC_B0KidPO1VngOHAZs.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205079 IP address blocks: 2001:678:10ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d6:3b:5d:c8:8a:62:8b:5b:cf:7d:5e:e5:ab:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=025ed49508ebcc2fc1d0a89d3ced559e0387019b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:19:05:e7:79:52:fc:00:08:d6:ab:17:40:1a: 8d:c4:fa:0f:00:46:4d:b2:42:83:5a:63:4c:78:fe: a5:63:05:cd:f8:0b:4a:50:c9:14:b3:5d:8c:6d:20: d0:53:b7:b0:ae:f3:86:f6:3d:f9:ad:03:f0:65:36: a4:a0:61:84:0f:f0:fc:4a:46:51:ef:cb:6e:6c:72: 94:36:a7:8a:5b:fe:8a:16:8f:30:19:7e:d0:82:b7: 5d:99:2d:29:52:99:3b:c5:be:9f:f8:68:52:b9:cb: bb:02:1d:aa:96:0d:18:f4:a0:66:76:3b:ff:9a:01: 03:c0:bf:fe:d4:14:a0:7a:e1:da:31:aa:6f:81:b3: a3:8e:88:cb:b2:54:b3:2a:13:95:ea:97:1b:1f:5b: 31:8c:dd:45:2e:8f:83:31:59:13:88:61:71:8e:b7: ad:e4:c6:e5:e1:61:48:65:9a:69:44:36:f7:e9:b1: a3:06:3e:6c:46:65:ee:5b:e8:88:65:4b:df:63:82: 62:d2:55:bf:af:59:42:25:0e:aa:04:b0:9e:3a:ee: 0e:00:56:33:6a:66:f5:56:ea:68:d8:9f:2f:ba:1f: e1:74:78:de:12:19:87:5d:7e:0a:20:2e:14:f1:b8: cb:6a:5a:6c:42:fd:d2:77:0f:52:a6:a0:32:1d:4c: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5E:D4:95:08:EB:CC:2F:C1:D0:A8:9D:3C:ED:55:9E:03:87:01:9B X509v3 Authority Key Identifier: keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/Al7UlQjrzC_B0KidPO1VngOHAZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:10ec::/48 Signature Algorithm: sha256WithRSAEncryption d0:66:78:08:56:4d:c9:5d:c4:dc:68:1c:27:50:df:c9:54:a3: ea:31:c4:85:08:d3:ff:72:48:b6:22:13:cd:5b:55:c6:21:02: 93:ef:2c:c7:34:16:aa:d9:eb:13:5d:89:b7:6e:8e:e4:fc:5a: 1d:49:46:3d:80:73:d7:c3:7e:39:47:4d:37:3e:ba:67:b7:8e: 8a:4a:82:44:08:51:f9:58:64:b6:9b:28:65:36:8d:74:55:49: 12:17:46:fc:75:e2:19:a2:cb:5f:07:53:25:ef:9c:60:5e:0c: a2:cb:13:e3:77:ab:cb:5d:01:d8:d0:52:13:96:26:f9:8c:27: c3:29:b3:bc:d3:24:cf:28:aa:ea:6c:e1:db:de:49:13:5a:6f: 39:50:22:9c:02:df:e7:5e:b8:04:d5:20:d0:dc:78:94:f9:28: b0:32:8f:18:9c:3a:e4:38:69:1e:32:d9:4a:34:60:d5:c6:9b: a5:7e:d2:a5:55:94:cd:76:65:e0:f9:ad:0b:aa:c0:e9:da:27: 1a:38:ec:bf:50:11:9a:e6:f8:1c:b7:5f:fc:db:af:8f:c2:12: f9:0b:e6:98:83:dc:26:2c:19:4a:a8:4d:6f:59:2b:0d:25:48: b5:8c:38:ac:1a:96:83:9d:f9:fd:9c:4c:26:da:48:7c:a5:59: bb:79:73:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ENY7XciKYotbz31e5auUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm OWY3NjcwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjVlZDQ5NTA4ZWJjYzJmYzFkMGE4OWQzY2VkNTU5ZTAzODcwMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RkF53lS/AAI1qsXQBqNxPoPAEZN skKDWmNMeP6lYwXN+AtKUMkUs12MbSDQU7ewrvOG9j35rQPwZTakoGGED/D8SkZR 78tubHKUNqeKW/6KFo8wGX7QgrddmS0pUpk7xb6f+GhSucu7Ah2qlg0Y9KBmdjv/ mgEDwL/+1BSgeuHaMapvgbOjjojLslSzKhOV6pcbH1sxjN1FLo+DMVkTiGFxjret 5Mbl4WFIZZppRDb36bGjBj5sRmXuW+iIZUvfY4Ji0lW/r1lCJQ6qBLCeOu4OAFYz amb1Vupo2J8vuh/hdHjeEhmHXX4KIC4U8bjLalpsQv3Sdw9SpqAyHUzPzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAJe1JUI68wvwdConTztVZ4DhwGbMB8GA1UdIwQY MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt ZDIxMDgzOGE0NmU2LzEvQWw3VWxRanJ6Q19CMEtpZFBPMVZuZ09IQVpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2 LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBDs MA0GCSqGSIb3DQEBCwUAA4IBAQDQZngIVk3JXcTcaBwnUN/JVKPqMcSFCNP/cki2 IhPNW1XGIQKT7yzHNBaq2esTXYm3bo7k/FodSUY9gHPXw345R003Prpnt46KSoJE CFH5WGS2myhlNo10VUkSF0b8deIZostfB1Ml75xgXgyiyxPjd6vLXQHY0FITlib5 jCfDKbO80yTPKKrqbOHb3kkTWm85UCKcAt/nXrgE1SDQ3HiU+SiwMo8YnDrkOGke MtlKNGDVxpulftKlVZTNdmXg+a0LqsDp2icaOOy/UBGa5vgct1/826+PwhL5C+aY g9wmLBlKqE1vWSsNJUi1jDisGpaDnfn9nEwm2kh8pVm7eXNG -----END CERTIFICATE-----Generated at Mon Feb 2 08:04:05 2026 by rpki-client