This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa File: aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa (raw, json) Hash identifier: nBnleL6X+T/X/zfiX5N8ZkgEWSbhPXx+iLrLHdXNMnw= Subject key identifier: 68:BF:92:1A:20:1F:7E:FA:82:65:0E:68:F1:46:F2:8B:76:31:BD:EB Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063 Certificate serial: 019B79ECB9AD62AC54952AB37CF2CAFD27DB Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35055 IP address blocks: 45.14.240.0/22 maxlen: 24 185.64.120.0/22 maxlen: 24 185.190.64.0/22 maxlen: 24 2a03:1460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b9:ad:62:ac:54:95:2a:b3:7c:f2:ca:fd:27:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68bf921a201f7efa82650e68f146f28b7631bdeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:f7:16:35:03:44:b2:64:f7:30:d4:40:6a: 68:98:04:17:02:20:33:34:18:15:57:25:28:fc:b3: da:5d:2a:30:cd:c7:eb:1d:38:1d:7f:b0:e4:8c:bb: 53:a2:3b:5f:b6:85:d1:f6:c2:8c:e0:6b:71:79:8c: 14:a7:6d:18:f4:35:50:5e:19:15:73:73:93:83:4d: 93:75:cd:f8:50:7a:ae:ef:20:96:ef:ec:e6:3d:26: b3:2a:9c:d9:c4:f4:3c:71:d3:13:7c:7c:9b:8d:84: f2:94:5b:98:c4:9f:8f:35:31:fb:fc:cc:d5:04:21: 45:d6:0b:3a:94:2a:42:81:d8:46:5f:d2:c2:7d:a6: df:e8:ef:1e:23:0c:3f:bf:42:94:70:77:c7:fb:03: de:6d:c0:d1:0e:d8:f1:4e:18:bc:79:98:e7:e3:c1: 3a:e6:46:59:bf:86:42:99:1a:0a:7f:eb:90:df:a4: b1:40:5f:68:07:83:e1:2d:62:48:37:39:07:7f:7c: 60:fe:75:c4:33:0c:8e:65:97:fc:9b:25:bf:53:c6: 03:57:a9:d3:2f:86:20:14:cb:10:fc:34:c1:d8:d7: a8:30:9d:ad:01:47:00:7a:9f:90:da:28:59:33:d8: 88:4e:d6:08:d3:0f:73:89:80:b2:32:c1:3a:3a:9c: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BF:92:1A:20:1F:7E:FA:82:65:0E:68:F1:46:F2:8B:76:31:BD:EB X509v3 Authority Key Identifier: keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.240.0/22 185.64.120.0/22 185.190.64.0/22 IPv6: 2a03:1460::/32 Signature Algorithm: sha256WithRSAEncryption 18:b6:32:c3:c7:17:76:53:88:70:44:3b:e5:dd:fc:dd:0a:3b: 83:63:33:38:bb:24:e1:41:72:d4:65:62:6f:06:db:bd:b7:cc: 81:a5:4d:9a:24:e6:40:07:e3:21:51:ba:a2:3f:62:b2:75:d1: b2:f0:db:01:32:8e:13:ff:47:2d:37:8d:f3:b4:f8:72:85:5d: c8:30:c6:65:f6:af:0e:27:17:35:f1:02:b1:bf:c2:f1:bf:c8: 47:46:b1:22:74:55:b2:fd:bb:fe:26:8d:3b:73:13:80:bb:e1: f0:6c:c0:47:02:93:7a:21:c7:52:65:59:b7:22:65:a1:79:a3: c7:1b:ed:0f:12:3f:e4:37:74:a8:55:6f:9d:46:c5:8f:8b:75: e7:f8:83:56:d4:46:85:1c:9f:87:dc:00:e5:5d:1e:0b:3c:a7: 37:b2:98:f3:32:b3:75:96:50:50:93:de:d4:71:40:3a:36:d9: 46:16:dc:a4:11:b4:fd:e0:7f:5a:b7:78:48:76:84:58:f3:c7: df:f2:b4:46:8d:03:c8:98:37:ae:72:30:5b:19:ae:35:1c:e6: 10:90:97:22:e1:e3:2a:0f:17:e8:4d:e7:83:ab:83:97:47:ab: b5:9a:6b:50:7f:e1:f2:c4:07:c9:bf:98:d3:b4:49:08:92:cb: 1b:44:a9:76 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57LmtYqxUlSqzfPLK/SfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MWE4ZjY2N2EzZGRkYmQ0YTM1MjMxOGQ4ZjA2MDZjNDZl OWYwNjMwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGJmOTIxYTIwMWY3ZWZhODI2NTBlNjhmMTQ2ZjI4Yjc2MzFiZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWH3FjUDRLJk9zDUQGpomAQXAiAz NBgVVyUo/LPaXSowzcfrHTgdf7DkjLtTojtftoXR9sKM4GtxeYwUp20Y9DVQXhkV c3OTg02Tdc34UHqu7yCW7+zmPSazKpzZxPQ8cdMTfHybjYTylFuYxJ+PNTH7/MzV BCFF1gs6lCpCgdhGX9LCfabf6O8eIww/v0KUcHfH+wPebcDRDtjxThi8eZjn48E6 5kZZv4ZCmRoKf+uQ36SxQF9oB4PhLWJINzkHf3xg/nXEMwyOZZf8myW/U8YDV6nT L4YgFMsQ/DTB2NeoMJ2tAUcAep+Q2ihZM9iITtYI0w9ziYCyMsE6OpzOawIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGi/khogH376gmUOaPFG8ot2Mb3rMB8GA1UdIwQY MBaAFKYaj2Z6Pd29SjUjGNjwYGxG6fBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQt YjU2YmIwNjQ3ODY4LzEvYUwtU0dpQWZmdnFDWlE1bzhVYnlpM1l4dmVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQtYjU2YmIwNjQ3ODY4 LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQ7wAwQC uUB4AwQCub5AMA0EAgACMAcDBQAqAxRgMA0GCSqGSIb3DQEBCwUAA4IBAQAYtjLD xxd2U4hwRDvl3fzdCjuDYzM4uyThQXLUZWJvBtu9t8yBpU2aJOZAB+MhUbqiP2Ky ddGy8NsBMo4T/0ctN43ztPhyhV3IMMZl9q8OJxc18QKxv8Lxv8hHRrEidFWy/bv+ Jo07cxOAu+HwbMBHApN6IcdSZVm3ImWheaPHG+0PEj/kN3SoVW+dRsWPi3Xn+INW 1EaFHJ+H3ADlXR4LPKc3spjzMrN1llBQk97UcUA6NtlGFtykEbT94H9at3hIdoRY 88ff8rRGjQPImDeucjBbGa41HOYQkJci4eMqDxfoTeeDq4OXR6u1mmtQf+HyxAfJ v5jTtEkIkssbRKl2 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:14 2026 by rpki-client