This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ala-3w7jXBx1Y6f2e_qq-HBChTo.roa File: ala-3w7jXBx1Y6f2e_qq-HBChTo.roa (raw, json) Hash identifier: JIf9VJc6GvAkZ5p/ya8p2yQh9PHmYhCztgviL6iUJrc= Subject key identifier: 6A:56:BE:DF:0E:E3:5C:1C:75:63:A7:F6:7B:FA:AA:F8:70:42:85:3A Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597A9E19E6CB5D9641B04AC977331F Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ala-3w7jXBx1Y6f2e_qq-HBChTo.roa Signing time: Thu 01 Jan 2026 02:18:31 +0000 ROA not before: Thu 01 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207717 IP address blocks: 45.132.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:7a:9e:19:e6:cb:5d:96:41:b0:4a:c9:77:33:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a56bedf0ee35c1c7563a7f67bfaaaf87042853a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:f5:9d:ee:b3:ac:9d:2c:2f:2d:48:62:a7: 2b:b5:4f:5c:06:fd:82:f1:b9:08:c6:a7:ab:e4:8d: 3e:aa:97:ef:d7:dd:9e:be:fc:4e:a4:70:89:c6:35: 30:fb:e3:26:2b:03:14:8f:e4:e9:83:2b:0d:1e:15: 02:35:d7:88:cc:c8:10:48:b8:e5:42:40:b1:64:14: df:1f:76:d9:ed:ba:3e:42:f6:59:69:e0:ca:1c:f8: 4c:64:9a:09:7c:98:5b:d3:7c:24:5a:a8:21:a0:3b: b0:d2:b0:28:3e:4d:a6:20:a8:af:67:82:6e:06:e1: 48:bb:8c:84:d2:50:32:30:75:42:3e:37:c7:e7:10: 6b:d8:ea:c6:2f:7a:95:b6:25:98:36:bd:dc:b0:6e: bc:95:ee:98:64:e2:7a:0b:15:2a:87:20:c1:09:96: b7:be:d9:a1:d2:ea:fb:b1:a9:b2:bf:f4:0b:1d:56: b3:36:f3:da:35:67:3d:f9:f4:6a:a0:ab:a7:ac:5a: 90:c5:05:7e:5b:34:25:41:37:68:64:61:e6:20:c6: 0c:22:4a:4d:0b:1c:e0:68:64:48:06:09:dc:44:76: 96:0c:d6:91:1e:90:7c:29:da:b9:14:09:ac:48:35: 54:05:e0:f6:d5:1f:ed:df:5b:85:af:39:4c:7d:74: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:BE:DF:0E:E3:5C:1C:75:63:A7:F6:7B:FA:AA:F8:70:42:85:3A X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ala-3w7jXBx1Y6f2e_qq-HBChTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.150.0/24 Signature Algorithm: sha256WithRSAEncryption 53:4a:02:72:03:aa:ef:0f:d2:d4:05:36:2a:3f:89:59:b6:c0: e4:90:ba:0b:69:e6:b5:42:1c:3c:c4:03:ef:86:f9:f9:94:1f: 64:8d:63:c4:4c:73:31:48:8f:5a:67:b7:b1:54:ea:1e:84:24: 83:3a:b2:9c:a9:44:ed:64:15:a9:8d:55:fd:ca:bc:bb:ba:c0: cb:b1:1b:6a:a7:61:5b:03:b1:23:5b:53:ed:b3:b1:22:3f:c6: 5a:bd:f3:f8:61:df:87:cf:a2:3b:fe:09:66:69:ff:90:00:d7: 66:6b:f7:60:f0:d9:57:f9:26:d3:f2:53:dc:5a:84:5d:8a:a3: 06:28:81:89:47:f5:c4:a3:fb:96:cd:0a:68:3b:d6:89:ec:4d: 43:b3:91:dd:47:71:5a:ba:9c:70:7e:4c:93:ef:d3:b1:42:d3: e0:87:7e:50:17:48:18:82:46:62:b1:6d:3b:8e:a0:1d:ea:13: d8:76:9e:9e:0b:a6:8a:ee:1d:55:e0:09:c9:9e:40:84:cf:26: 51:9d:c3:f3:45:4d:d6:b2:e2:10:33:a2:cb:9b:5e:19:4b:d6: fc:5b:87:fe:86:f4:12:4e:b8:42:36:2b:c2:bf:be:02:12:5f: 14:ad:61:d5:2c:ed:62:5e:9d:d4:78:aa:35:17:1d:21:2c:92: 23:de:66:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXqeGebLXZZBsErJdzMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTU2YmVkZjBlZTM1YzFjNzU2M2E3ZjY3YmZhYWFmODcwNDI4NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTf1ne6zrJ0sLy1IYqcrtU9cBv2C 8bkIxqer5I0+qpfv192evvxOpHCJxjUw++MmKwMUj+TpgysNHhUCNdeIzMgQSLjl QkCxZBTfH3bZ7bo+QvZZaeDKHPhMZJoJfJhb03wkWqghoDuw0rAoPk2mIKivZ4Ju BuFIu4yE0lAyMHVCPjfH5xBr2OrGL3qVtiWYNr3csG68le6YZOJ6CxUqhyDBCZa3 vtmh0ur7samyv/QLHVazNvPaNWc9+fRqoKunrFqQxQV+WzQlQTdoZGHmIMYMIkpN CxzgaGRIBgncRHaWDNaRHpB8Kdq5FAmsSDVUBeD21R/t31uFrzlMfXQmXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpWvt8O41wcdWOn9nv6qvhwQoU6MB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvYWxhLTN3N2pYQngxWTZmMmVfcXEtSEJDaFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYSWMA0G CSqGSIb3DQEBCwUAA4IBAQBTSgJyA6rvD9LUBTYqP4lZtsDkkLoLaea1Qhw8xAPv hvn5lB9kjWPETHMxSI9aZ7exVOoehCSDOrKcqUTtZBWpjVX9yry7usDLsRtqp2Fb A7EjW1Pts7EiP8ZavfP4Yd+Hz6I7/glmaf+QANdma/dg8NlX+SbT8lPcWoRdiqMG KIGJR/XEo/uWzQpoO9aJ7E1Ds5HdR3FaupxwfkyT79OxQtPgh35QF0gYgkZisW07 jqAd6hPYdp6eC6aK7h1V4AnJnkCEzyZRncPzRU3WsuIQM6LLm14ZS9b8W4f+hvQS TrhCNivCv74CEl8UrWHVLO1iXp3UeKo1Fx0hLJIj3ma9 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:37 2026 by rpki-client