This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/AlPw5GJNGims1l1CfDNP4Og-CwM.roa File: AlPw5GJNGims1l1CfDNP4Og-CwM.roa (raw, json) Hash identifier: U29bmGqJ1P2X/WXfdTqdBiK8nGB0oQOPsVp+rtxjZwM= Subject key identifier: 02:53:F0:E4:62:4D:1A:29:AC:D6:5D:42:7C:33:4F:E0:E8:3E:0B:03 Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Certificate serial: 019BC696A136D453FE281EEBA29CFE4E674A Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/AlPw5GJNGims1l1CfDNP4Og-CwM.roa Signing time: Fri 16 Jan 2026 11:35:18 +0000 ROA not before: Fri 16 Jan 2026 11:35:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9204 IP address blocks: 89.36.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:96:a1:36:d4:53:fe:28:1e:eb:a2:9c:fe:4e:67:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Validity Not Before: Jan 16 11:35:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0253f0e4624d1a29acd65d427c334fe0e83e0b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:42:83:4d:a9:af:44:2e:be:5f:dd:4f:e7:b4: 39:ce:03:f9:0c:f0:15:f8:9a:1a:ee:06:fc:1a:a6: 34:f2:26:ba:eb:c7:40:72:c1:ac:8a:de:94:36:50: f1:48:5f:fc:84:40:7d:0f:a7:a1:19:f4:ff:83:e3: 8c:29:06:96:5a:9d:9b:40:10:c8:01:92:b5:69:7c: 91:e1:56:ae:d5:89:4d:46:54:3d:52:7e:a6:4d:ad: f5:1d:e2:c2:07:3f:c9:2a:fa:9b:25:d5:70:e9:d4: 31:b8:32:94:1d:44:ce:49:67:e9:55:70:01:ce:a2: d3:13:65:5d:68:05:9b:4d:7e:5d:5e:39:59:df:5f: 12:9e:fe:22:fc:70:de:c3:07:02:cf:22:8b:83:65: 9a:b4:7f:f2:a4:51:84:91:35:02:52:13:64:ad:6b: ec:93:b5:dd:25:0a:33:3a:28:f9:24:5c:57:a3:e4: 19:27:2f:e6:a5:23:cf:ec:df:a1:6a:10:cd:a1:a4: 21:bc:c6:8b:3e:16:17:f8:24:d7:fb:3f:5e:6b:e6: 55:a0:32:4a:f7:a2:56:90:9f:7d:4e:21:90:0e:bd: 72:98:f0:76:27:c5:0e:f2:43:38:e7:38:ac:3a:04: bd:17:98:22:3b:4d:6f:04:77:09:06:89:89:b7:32: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:53:F0:E4:62:4D:1A:29:AC:D6:5D:42:7C:33:4F:E0:E8:3E:0B:03 X509v3 Authority Key Identifier: keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/AlPw5GJNGims1l1CfDNP4Og-CwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.174.0/24 Signature Algorithm: sha256WithRSAEncryption 00:93:c2:b9:f0:d6:b8:7a:5e:f0:91:4a:6b:b6:1e:57:f0:91: 55:7c:b9:f7:57:f3:1d:a5:e5:0f:82:66:dc:2c:f9:ad:77:c3: 4a:3b:49:64:4a:99:16:0f:a4:c8:cd:a9:f8:f0:4d:76:84:e3: d4:6d:69:00:53:be:1e:80:5b:11:63:cc:6d:32:e3:94:f8:92: 99:d8:f4:76:f1:42:71:51:97:e1:6f:0c:d2:9d:bd:40:a2:d2: 4f:ce:66:d3:6f:1a:96:26:19:39:2a:cd:06:bc:20:13:9c:c2: 60:c3:a7:f1:70:57:49:69:e3:aa:eb:86:ba:17:35:5a:f7:5a: 3e:e2:9f:3b:1d:c9:b2:a2:36:94:c0:f6:09:a8:1c:97:45:77: e1:5f:39:a2:77:f7:61:cb:c8:57:c1:47:a6:b2:89:3b:98:06: 27:2f:c6:f0:4f:e8:b1:9b:71:c6:56:5d:81:fd:15:e3:f0:e7: f1:6e:97:7b:8a:ed:e5:31:f7:4d:11:de:55:53:ad:bb:eb:de: fc:4d:7b:11:23:36:88:60:c2:ca:ea:1f:0f:24:81:6d:bb:f2: 08:c2:53:16:b5:69:f5:64:37:5a:e3:06:0d:c4:f3:54:4a:68: 7d:45:d3:ba:3a:8c:90:70:19:8b:e6:80:88:93:de:4a:89:1c: 62:88:a4:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGlqE21FP+KB7ropz+TmdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5 ZDJmYjQwHhcNMjYwMTE2MTEzNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjUzZjBlNDYyNGQxYTI5YWNkNjVkNDI3YzMzNGZlMGU4M2UwYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UKDTamvRC6+X91P57Q5zgP5DPAV +Joa7gb8GqY08ia668dAcsGsit6UNlDxSF/8hEB9D6ehGfT/g+OMKQaWWp2bQBDI AZK1aXyR4Vau1YlNRlQ9Un6mTa31HeLCBz/JKvqbJdVw6dQxuDKUHUTOSWfpVXAB zqLTE2VdaAWbTX5dXjlZ318Snv4i/HDewwcCzyKLg2WatH/ypFGEkTUCUhNkrWvs k7XdJQozOij5JFxXo+QZJy/mpSPP7N+hahDNoaQhvMaLPhYX+CTX+z9ea+ZVoDJK 96JWkJ99TiGQDr1ymPB2J8UO8kM45zisOgS9F5giO01vBHcJBomJtzLyMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAJT8ORiTRoprNZdQnwzT+DoPgsDMB8GA1UdIwQY MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt MTkwM2VkYWZhOGJmLzEvQWxQdzVHSk5HaW1zMWwxQ2ZETlA0T2ctQ3dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSSuMA0G CSqGSIb3DQEBCwUAA4IBAQAAk8K58Na4el7wkUprth5X8JFVfLn3V/MdpeUPgmbc LPmtd8NKO0lkSpkWD6TIzan48E12hOPUbWkAU74egFsRY8xtMuOU+JKZ2PR28UJx UZfhbwzSnb1AotJPzmbTbxqWJhk5Ks0GvCATnMJgw6fxcFdJaeOq64a6FzVa91o+ 4p87HcmyojaUwPYJqByXRXfhXzmid/dhy8hXwUemsok7mAYnL8bwT+ixm3HGVl2B /RXj8Ofxbpd7iu3lMfdNEd5VU6276978TXsRIzaIYMLK6h8PJIFtu/IIwlMWtWn1 ZDda4wYNxPNUSmh9RdO6OoyQcBmL5oCIk95KiRxiiKTd -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:14 2026 by rpki-client