This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1AlxxMUZolJLdZHPVyV2UoSe358.roa File: 1AlxxMUZolJLdZHPVyV2UoSe358.roa (raw, json) Hash identifier: 9ehijIeVwQp7RL+YUW6sio1uU2Yn7VaTLU6Oe4mOvfE= Subject key identifier: D4:09:71:C4:C5:19:A2:52:4B:75:91:CF:57:25:76:52:84:9E:DF:9F Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB4EE507B01CB0841283AA1479E36B Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1AlxxMUZolJLdZHPVyV2UoSe358.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44244 IP address blocks: 85.185.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4e:e5:07:b0:1c:b0:84:12:83:aa:14:79:e3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d40971c4c519a2524b7591cf57257652849edf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:b3:18:31:2a:8f:69:e4:4f:0d:b4:d2:64: d1:2e:17:55:1b:6e:4d:1e:c6:e0:bd:ed:8f:6d:02: bd:ef:57:c2:d6:db:fd:ff:d7:6f:f6:6d:67:66:d6: 69:87:9f:03:f8:84:f2:40:fa:51:ac:f6:80:55:d2: f4:49:a7:4a:ff:1c:5a:0c:01:6f:eb:2d:a9:38:63: 11:d1:ba:d2:49:81:36:a3:3d:ab:5d:d8:85:5d:13: 68:cd:08:09:2f:ec:c3:95:6c:18:82:13:12:cd:26: 97:1e:b4:76:bb:68:5d:d1:0c:c7:4b:8d:db:14:74: 90:5e:7c:e3:4c:de:aa:4f:2b:04:d2:03:7b:dd:27: 2e:35:60:ab:3c:2e:4d:4e:c2:01:a8:5b:b9:e8:24: ca:3b:23:35:b6:40:ee:3b:e0:6f:45:34:7f:0b:0d: b4:09:f6:60:77:4e:4a:6e:b4:55:59:5e:ee:b8:cd: b7:90:5b:1e:ef:85:d0:75:35:c8:72:dc:a0:aa:a7: 3b:fb:52:e8:b0:25:8b:22:4e:30:0c:41:6b:7e:c3: 5e:05:4d:6c:c8:c8:94:69:7f:f5:6e:b5:bb:c3:b7: a7:2d:01:3a:56:f7:32:4f:26:83:14:d8:72:99:cc: 87:0e:59:23:87:4f:b4:93:79:36:fe:47:44:06:b6: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:71:C4:C5:19:A2:52:4B:75:91:CF:57:25:76:52:84:9E:DF:9F X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1AlxxMUZolJLdZHPVyV2UoSe358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.185.36.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:8f:d2:92:f6:5c:1c:53:55:47:04:f8:e9:0c:51:4d:b9:c4: a2:cb:64:e4:ba:df:94:eb:0e:d8:94:ba:52:c8:17:04:93:32: 73:35:f6:74:e2:7e:5d:0b:d0:cc:97:a8:97:40:62:7f:95:bb: e0:0f:14:85:d3:dd:73:1e:07:23:fe:62:05:23:cc:4f:96:62: 30:be:a4:b1:52:46:aa:67:01:fc:dd:6e:8a:9e:76:40:df:bf: 8f:41:83:69:a3:f9:03:67:5f:f2:82:e0:0d:c1:84:ba:0e:3a: ad:a1:09:18:72:24:ee:f4:55:54:d2:dc:cb:8b:21:85:73:a9: be:d8:5e:3b:10:0d:a8:8c:c2:fa:ce:02:a5:25:a7:f9:1e:4d: 67:80:b2:67:be:c2:88:a9:b1:32:31:34:8c:7b:3f:5d:65:61: f1:0f:e5:5a:d7:7e:91:b3:73:76:93:15:54:11:d6:04:cc:6c: c6:1b:52:25:bc:b2:85:38:7d:e1:38:07:ff:ae:04:9b:2e:ff: c1:c9:d5:12:69:55:46:a3:f4:05:4c:bb:04:c9:bb:78:43:b6: 49:e7:0f:c0:e9:4a:bd:81:05:84:30:01:46:f4:24:e3:9c:f5: 35:f3:8a:7e:29:fe:29:7d:96:c7:cf:a2:77:68:57:71:9f:2e: 5a:f6:fe:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2607lB7AcsIQSg6oUeeNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDA5NzFjNGM1MTlhMjUyNGI3NTkxY2Y1NzI1NzY1Mjg0OWVkZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofCzGDEqj2nkTw200mTRLhdVG25N Hsbgve2PbQK971fC1tv9/9dv9m1nZtZph58D+ITyQPpRrPaAVdL0SadK/xxaDAFv 6y2pOGMR0brSSYE2oz2rXdiFXRNozQgJL+zDlWwYghMSzSaXHrR2u2hd0QzHS43b FHSQXnzjTN6qTysE0gN73ScuNWCrPC5NTsIBqFu56CTKOyM1tkDuO+BvRTR/Cw20 CfZgd05KbrRVWV7uuM23kFse74XQdTXIctygqqc7+1LosCWLIk4wDEFrfsNeBU1s yMiUaX/1brW7w7enLQE6VvcyTyaDFNhymcyHDlkjh0+0k3k2/kdEBrYZtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQJccTFGaJSS3WRz1cldlKEnt+fMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvMUFseHhNVVpvbEpMZFpIUFZ5VjJVb1NlMzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVbkkMA0G CSqGSIb3DQEBCwUAA4IBAQBqj9KS9lwcU1VHBPjpDFFNucSiy2Tkut+U6w7YlLpS yBcEkzJzNfZ04n5dC9DMl6iXQGJ/lbvgDxSF091zHgcj/mIFI8xPlmIwvqSxUkaq ZwH83W6KnnZA37+PQYNpo/kDZ1/yguANwYS6DjqtoQkYciTu9FVU0tzLiyGFc6m+ 2F47EA2ojML6zgKlJaf5Hk1ngLJnvsKIqbEyMTSMez9dZWHxD+Va136Rs3N2kxVU EdYEzGzGG1IlvLKFOH3hOAf/rgSbLv/BydUSaVVGo/QFTLsEybt4Q7ZJ5w/A6Uq9 gQWEMAFG9CTjnPU184p+Kf4pfZbHz6J3aFdxny5a9v6d -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:56 2026 by rpki-client