This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/albAVH6lwfzmwVJzDmkpKh655KQ.roa File: albAVH6lwfzmwVJzDmkpKh655KQ.roa (raw, json) Hash identifier: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM= Subject key identifier: 6A:56:C0:54:7E:A5:C1:FC:E6:C1:52:73:0E:69:29:2A:1E:B9:E4:A4 Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a Certificate serial: 019B7D5B1787B37724E676DA254DB00519A5 Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/albAVH6lwfzmwVJzDmkpKh655KQ.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 193.221.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:17:87:b3:77:24:e6:76:da:25:4d:b0:05:19:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a56c0547ea5c1fce6c152730e69292a1eb9e4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:56:50:96:de:45:b6:51:d0:b7:23:da:87:83: 19:e2:3f:c3:59:f3:dd:d1:82:a2:fd:c4:40:25:5d: 49:28:13:0a:b7:3e:f0:38:1f:15:18:f4:dd:5f:c1: 07:e1:89:cc:74:7b:fc:8d:60:9e:61:c8:37:aa:8f: 3c:13:5f:23:1c:b6:89:71:67:27:64:a6:6c:2a:1f: 17:b5:84:5a:f5:5f:fb:f2:da:25:c0:40:7b:91:d3: 7d:60:61:91:56:24:c9:f1:a5:f6:8c:6d:c5:c2:f8: 0c:07:8a:3f:9d:13:af:df:91:ba:97:4a:c3:3d:0f: f6:b1:c2:13:e9:7d:05:f3:26:23:c7:7a:1c:f0:24: 97:63:71:a7:31:e0:01:12:28:3d:a7:3b:fa:96:08: e8:59:77:5f:6a:6e:44:8e:1e:33:31:f4:8d:3f:ed: 9a:68:e7:c8:57:46:e7:d9:10:97:74:c6:75:c4:05: ea:11:bb:c7:23:5a:99:78:08:43:c4:ab:c6:9c:d2: fc:a8:84:38:14:59:89:19:05:1c:88:66:78:e1:89: d3:55:ac:87:2b:47:e0:4f:76:b5:92:ec:20:56:a6: 47:15:9f:c5:17:e5:bd:d7:eb:4a:5d:eb:94:59:e8: 72:33:54:9e:51:9a:31:0e:31:7c:0e:6b:89:d0:c6: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:C0:54:7E:A5:C1:FC:E6:C1:52:73:0E:69:29:2A:1E:B9:E4:A4 X509v3 Authority Key Identifier: keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/albAVH6lwfzmwVJzDmkpKh655KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.118.0/24 Signature Algorithm: sha256WithRSAEncryption 34:75:c8:4e:87:92:2e:25:da:60:35:b2:6f:57:f2:bc:53:46: 88:a7:b0:44:a1:d7:4e:53:cc:4f:5a:4a:f8:70:73:6d:66:b0: 35:ec:72:a5:30:57:0f:bf:1f:69:d4:e6:08:63:b8:7c:c4:3b: fc:96:11:b1:84:84:0e:d0:67:8f:c3:49:5c:ac:d5:0b:83:0b: 98:35:06:2f:72:6a:16:5f:b5:b2:c8:aa:3d:0f:aa:2f:15:14: 87:8a:19:1d:67:6c:d4:b9:4b:ed:53:f5:b4:f7:34:18:35:e4: 4d:85:30:2e:5c:a0:ce:67:b0:05:25:98:a6:61:8f:aa:a9:6c: d2:2f:1e:41:f7:4a:ca:0e:23:50:2d:21:fb:fd:eb:a4:5a:ca: 05:26:30:5c:9f:46:ff:bc:1e:f1:41:13:ae:30:c0:ed:68:29: ad:27:b0:c7:05:e3:0d:81:22:c8:bc:4c:31:82:ba:bc:12:45: d3:b3:b1:5c:22:d1:66:b9:5f:d1:bb:83:92:ba:56:dc:a6:b6: bd:0f:91:8c:78:b2:96:b6:da:ac:b4:53:e1:05:08:7e:cb:31: c1:8c:c6:13:a3:a3:1f:44:be:dd:16:21:e1:c0:37:73:a0:ea: 52:35:ff:3c:db:4b:da:22:85:74:a8:a3:b0:90:a6:d3:95:44: 34:2a:79:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WxeHs3ck5nbaJU2wBRmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm YWI0OWEwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTU2YzA1NDdlYTVjMWZjZTZjMTUyNzMwZTY5MjkyYTFlYjllNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lZQlt5FtlHQtyPah4MZ4j/DWfPd 0YKi/cRAJV1JKBMKtz7wOB8VGPTdX8EH4YnMdHv8jWCeYcg3qo88E18jHLaJcWcn ZKZsKh8XtYRa9V/78tolwEB7kdN9YGGRViTJ8aX2jG3FwvgMB4o/nROv35G6l0rD PQ/2scIT6X0F8yYjx3oc8CSXY3GnMeABEig9pzv6lgjoWXdfam5Ejh4zMfSNP+2a aOfIV0bn2RCXdMZ1xAXqEbvHI1qZeAhDxKvGnNL8qIQ4FFmJGQUciGZ44YnTVayH K0fgT3a1kuwgVqZHFZ/FF+W91+tKXeuUWehyM1SeUZoxDjF8DmuJ0MbQZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpWwFR+pcH85sFScw5pKSoeueSkMB8GA1UdIwQY MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt YmYxZTFkZTJlYTYzLzEvYWxiQVZINmx3Znptd1ZKekRta3BLaDY1NUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd12MA0G CSqGSIb3DQEBCwUAA4IBAQA0dchOh5IuJdpgNbJvV/K8U0aIp7BEoddOU8xPWkr4 cHNtZrA17HKlMFcPvx9p1OYIY7h8xDv8lhGxhIQO0GePw0lcrNULgwuYNQYvcmoW X7WyyKo9D6ovFRSHihkdZ2zUuUvtU/W09zQYNeRNhTAuXKDOZ7AFJZimYY+qqWzS Lx5B90rKDiNQLSH7/eukWsoFJjBcn0b/vB7xQROuMMDtaCmtJ7DHBeMNgSLIvEwx grq8EkXTs7FcItFmuV/Ru4OSulbcpra9D5GMeLKWttqstFPhBQh+yzHBjMYTo6Mf RL7dFiHhwDdzoOpSNf8820vaIoV0qKOwkKbTlUQ0Knm4 -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:28 2026 by rpki-client