This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/ALJo2VNkRBohxnFTRb76HQlek4w.roa File: ALJo2VNkRBohxnFTRb76HQlek4w.roa (raw, json) Hash identifier: oL6ieDNpqz/DwLKJF9Y4lrQM4pX1GlcAf2nFecyaNSM= Subject key identifier: 00:B2:68:D9:53:64:44:1A:21:C6:71:53:45:BE:FA:1D:09:5E:93:8C Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff Certificate serial: 019B7EA7225AFA64196EC3FC3DB65442F2AA Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/ALJo2VNkRBohxnFTRb76HQlek4w.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 193.56.38.0/24 maxlen: 24 193.56.43.0/24 maxlen: 24 2a00:6fc0:c010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:22:5a:fa:64:19:6e:c3:fc:3d:b6:54:42:f2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00b268d95364441a21c6715345befa1d095e938c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:e4:a3:fa:1d:9e:c3:0f:5d:fe:b5:c2:5d: 54:25:6c:d5:83:61:77:fe:88:f5:8d:f1:62:8c:c2: fa:e9:16:8b:32:74:cf:6f:8c:ea:10:51:aa:17:7e: 5e:d7:a5:a6:49:9e:33:b7:04:86:47:27:db:db:75: 8f:95:b9:1e:8a:b6:3c:1d:a3:f6:61:a9:bb:0e:dd: ce:f5:3f:6d:02:eb:04:9b:26:cb:33:47:aa:00:31: eb:12:ec:41:fb:b4:d6:a5:b3:03:ba:f1:e4:d1:c9: 71:a3:19:e0:2f:5e:bb:9e:c3:2d:cf:52:cb:4d:78: 60:f8:91:37:45:31:04:1c:32:a8:09:5e:ce:e9:b9: c4:b9:2f:60:2d:ed:7c:33:e6:4a:42:6c:7f:7c:24: dc:52:34:f1:c1:49:c0:7b:a1:2e:c0:3a:67:72:ce: 99:74:4a:ae:a4:37:05:9f:76:48:fe:ed:38:b9:2c: 01:50:56:44:39:3c:cf:dc:ef:f1:4d:53:c8:65:1e: c6:b0:21:10:2f:74:c2:af:73:6d:5a:9f:02:7e:68: 72:fe:0c:5d:0a:75:53:ce:a9:49:26:34:b9:57:dd: 8d:d6:f2:df:18:58:c2:a3:6e:ae:e7:71:68:e2:21: c5:c4:17:6d:19:b9:19:16:6a:59:2b:18:79:8d:0d: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B2:68:D9:53:64:44:1A:21:C6:71:53:45:BE:FA:1D:09:5E:93:8C X509v3 Authority Key Identifier: keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/ALJo2VNkRBohxnFTRb76HQlek4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.38.0/24 193.56.43.0/24 IPv6: 2a00:6fc0:c010::/44 Signature Algorithm: sha256WithRSAEncryption 1e:46:8f:f1:ea:54:58:93:c8:e3:4c:92:be:3d:dc:61:d9:4f: a3:c6:08:f5:ba:69:e7:8b:05:c8:76:6b:5a:6c:4f:31:02:7f: c7:d0:7d:31:67:f8:09:c9:b2:51:05:be:ca:d0:01:cb:cf:bc: 30:32:2a:1e:f0:f5:33:7e:95:ff:b1:34:cd:1c:06:8c:39:93: ab:39:b6:f8:47:86:ef:f3:eb:f5:4f:9a:82:ff:d3:f6:b8:b8: e5:bf:e1:20:db:1e:3d:ed:cd:4f:a1:e3:72:4b:cc:95:d4:c9: 35:66:bd:f1:6f:6f:fe:d4:97:c7:1b:89:fb:03:c2:2b:f3:2b: 2f:47:19:df:3f:51:56:dc:95:29:11:e1:5b:dd:43:cb:c8:ce: 62:cb:67:9b:84:b5:21:ab:b6:d6:e2:44:25:84:bf:7a:02:1a: f2:7b:2a:bb:05:c9:84:7b:bc:e8:90:55:55:c7:c4:45:94:54: d9:c7:b6:47:f2:2d:52:12:31:c4:5d:aa:56:0e:bc:eb:7d:1b: ca:13:29:d6:b2:a5:73:54:dc:14:64:b3:2a:51:05:84:ae:5a: e4:ed:dd:ac:b0:b8:13:33:ce:91:03:9e:9f:cc:69:18:c5:73: 9c:cf:16:19:0b:20:ab:5c:b8:be:8d:81:3f:40:40:30:ae:af: 35:a5:26:30 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+pyJa+mQZbsP8PbZUQvKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzQ4ZjdhNTkxMjA1ODhkNDE3MGVhMjgxNWU2YWU1MWJl NmJjZmYwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGIyNjhkOTUzNjQ0NDFhMjFjNjcxNTM0NWJlZmExZDA5NWU5MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76/ko/odnsMPXf61wl1UJWzVg2F3 /oj1jfFijML66RaLMnTPb4zqEFGqF35e16WmSZ4ztwSGRyfb23WPlbkeirY8HaP2 Yam7Dt3O9T9tAusEmybLM0eqADHrEuxB+7TWpbMDuvHk0clxoxngL167nsMtz1LL TXhg+JE3RTEEHDKoCV7O6bnEuS9gLe18M+ZKQmx/fCTcUjTxwUnAe6EuwDpncs6Z dEqupDcFn3ZI/u04uSwBUFZEOTzP3O/xTVPIZR7GsCEQL3TCr3NtWp8Cfmhy/gxd CnVTzqlJJjS5V92N1vLfGFjCo26u53Fo4iHFxBdtGbkZFmpZKxh5jQ3heQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFACyaNlTZEQaIcZxU0W++h0JXpOMMB8GA1UdIwQY MBaAFKzEj3pZEgWI1BcOooFeauUb5rz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTIt YjUyYjNhMjM2ZmE3LzEvQUxKbzJWTmtSQm9oeG5GVFJiNzZIUWxlazR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTItYjUyYjNhMjM2ZmE3 LzEvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwTgmAwQA wTgrMA8EAgACMAkDBwQqAG/AwBAwDQYJKoZIhvcNAQELBQADggEBAB5Gj/HqVFiT yONMkr493GHZT6PGCPW6aeeLBch2a1psTzECf8fQfTFn+AnJslEFvsrQAcvPvDAy Kh7w9TN+lf+xNM0cBow5k6s5tvhHhu/z6/VPmoL/0/a4uOW/4SDbHj3tzU+h43JL zJXUyTVmvfFvb/7Ul8cbifsDwivzKy9HGd8/UVbclSkR4VvdQ8vIzmLLZ5uEtSGr ttbiRCWEv3oCGvJ7KrsFyYR7vOiQVVXHxEWUVNnHtkfyLVISMcRdqlYOvOt9G8oT KdaypXNU3BRksypRBYSuWuTt3aywuBMzzpEDnp/MaRjFc5zPFhkLIKtcuL6NgT9A QDCurzWlJjA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:11 2026 by rpki-client