This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa File: AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa (raw, json) Hash identifier: fdkV0rGstUR1Pzncs3bfmTmh9JkFZ1wdI7Ez0Xn02hM= Subject key identifier: 00:BE:66:C7:2F:02:B1:83:5C:A9:61:2D:80:B8:C2:6E:67:A5:AB:04 Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc Certificate serial: 019B7B365AD80DFFBCBB604DE0D3EF877B87 Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13209 IP address blocks: 91.217.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5a:d8:0d:ff:bc:bb:60:4d:e0:d3:ef:87:7b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00be66c72f02b1835ca9612d80b8c26e67a5ab04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:ca:4d:d4:3e:51:46:a6:43:c3:e0:aa:cb: 8d:39:82:78:21:f6:13:60:a8:59:ec:65:36:c3:09: 6e:45:68:ef:78:01:e2:b1:c2:86:98:7a:e6:ef:8e: 0d:11:e3:60:2b:53:35:39:c5:d7:f8:00:7d:f8:c9: 04:fa:31:55:35:fa:5a:ed:21:fd:ab:86:bd:42:45: 59:3c:dc:aa:1e:48:9e:e2:48:9e:f6:6b:d6:16:9b: 22:bf:28:78:34:06:d5:9e:8d:a9:a6:93:a5:a6:6f: c1:e6:78:e6:77:da:b9:70:53:db:d3:f4:c8:8c:0c: 3d:19:80:56:5e:2a:4a:7a:19:8b:50:09:a2:91:6e: 93:ba:78:77:61:a9:4a:0d:03:11:11:ff:71:49:37: 1d:dd:10:a8:f1:79:43:d2:a9:f0:e2:95:e7:d1:71: b9:6d:23:6d:e1:0c:50:30:53:3b:d3:e6:de:dd:7c: a4:91:bf:aa:21:90:33:ec:9b:57:6b:98:85:8f:a5: 94:72:e8:ec:e9:a1:34:ec:e8:c4:56:80:c0:53:6b: 89:1f:f6:6e:df:40:46:e3:67:73:df:f5:9c:65:32: 8d:96:77:d8:9b:cf:60:64:7a:8b:92:e8:04:d7:b1: d8:50:f6:93:ff:a8:f6:04:b0:2b:55:1b:7a:57:de: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:66:C7:2F:02:B1:83:5C:A9:61:2D:80:B8:C2:6E:67:A5:AB:04 X509v3 Authority Key Identifier: keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.82.0/23 Signature Algorithm: sha256WithRSAEncryption 51:af:05:61:0b:b7:df:56:13:49:25:03:6b:eb:6a:8a:77:33: 72:37:bd:04:65:a7:57:36:4e:e0:ca:74:1a:3d:f2:fd:e1:c7: 3d:ba:41:4a:b6:94:dd:0b:45:12:97:04:4f:3d:2f:2e:66:59: ab:d0:1b:9a:db:21:df:e9:2f:14:e4:7b:38:37:16:ce:a0:eb: 7f:9e:27:7b:d2:6e:d4:6c:b5:bc:73:81:72:b2:cf:80:cc:31: 3b:0e:3c:12:0d:1b:0d:24:d2:e0:d8:fc:21:8c:6c:7a:98:ca: c8:ca:73:03:22:db:21:64:d9:1d:9e:09:db:1b:79:ba:83:b0: 8d:bd:77:d1:55:ab:fb:64:bc:06:81:07:b6:21:03:fd:a2:31: a6:8a:a2:b8:36:8b:fd:4f:71:a2:27:fa:7f:f2:69:b3:2d:9f: 38:6b:d0:bc:b0:4b:33:d2:7e:b4:a0:c4:e6:ac:bf:7c:31:8e: 53:d8:62:18:37:0c:bb:02:4d:ae:85:aa:78:7d:e6:e5:75:bc: ed:8d:b9:0a:1f:72:d6:1f:58:34:82:45:ae:9a:cb:26:1b:9c: 51:10:1e:6d:d8:e5:b5:7f:2a:d0:01:35:40:22:e7:2b:27:93: c8:55:00:e0:14:b8:a1:5c:57:e5:c1:1a:ae:a9:c7:a9:02:c9: f2:ae:62:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlrYDf+8u2BN4NPvh3uHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDJmOGUwZGVhMTM4N2RhZjkwMzVkMmNkZjRlYjhjOTNh ZDg5Y2MwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGJlNjZjNzJmMDJiMTgzNWNhOTYxMmQ4MGI4YzI2ZTY3YTVhYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAvKTdQ+UUamQ8PgqsuNOYJ4IfYT YKhZ7GU2wwluRWjveAHiscKGmHrm744NEeNgK1M1OcXX+AB9+MkE+jFVNfpa7SH9 q4a9QkVZPNyqHkie4kie9mvWFpsivyh4NAbVno2pppOlpm/B5njmd9q5cFPb0/TI jAw9GYBWXipKehmLUAmikW6Tunh3YalKDQMREf9xSTcd3RCo8XlD0qnw4pXn0XG5 bSNt4QxQMFM70+be3Xykkb+qIZAz7JtXa5iFj6WUcujs6aE07OjEVoDAU2uJH/Zu 30BG42dz3/WcZTKNlnfYm89gZHqLkugE17HYUPaT/6j2BLArVRt6V952TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAC+ZscvArGDXKlhLYC4wm5npasEMB8GA1UdIwQY MBaAFA3S+ODeoTh9r5A10s3064yTrYnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAt YWE4NDg1Y2YzMDY4LzEvQUw1bXh5OENzWU5jcVdFdGdMakNibWVscXdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAtYWE4NDg1Y2YzMDY4 LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW9lSMA0G CSqGSIb3DQEBCwUAA4IBAQBRrwVhC7ffVhNJJQNr62qKdzNyN70EZadXNk7gynQa PfL94cc9ukFKtpTdC0USlwRPPS8uZlmr0Bua2yHf6S8U5Hs4NxbOoOt/nid70m7U bLW8c4Fyss+AzDE7DjwSDRsNJNLg2PwhjGx6mMrIynMDItshZNkdngnbG3m6g7CN vXfRVav7ZLwGgQe2IQP9ojGmiqK4Nov9T3GiJ/p/8mmzLZ84a9C8sEsz0n60oMTm rL98MY5T2GIYNwy7Ak2uhap4febldbztjbkKH3LWH1g0gkWumssmG5xREB5t2OW1 fyrQATVAIucrJ5PIVQDgFLihXFflwRquqcepAsnyrmIu -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:54 2026 by rpki-client