This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/alAcQYfnAO5j-BoxDOLZJf-3icg.roa File: alAcQYfnAO5j-BoxDOLZJf-3icg.roa (raw, json) Hash identifier: e+NRVXhBMGqxMrnIDt+RCZxXYxWe4EBHhkt/FcBznKg= Subject key identifier: 6A:50:1C:41:87:E7:00:EE:63:F8:1A:31:0C:E2:D9:25:FF:B7:89:C8 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F85009CEC4A24825CD855A591B13266 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/alAcQYfnAO5j-BoxDOLZJf-3icg.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207677 IP address blocks: 92.253.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:00:9c:ec:4a:24:82:5c:d8:55:a5:91:b1:32:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a501c4187e700ee63f81a310ce2d925ffb789c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:fa:ea:79:fe:cf:21:5f:8e:5a:b0:58:3f: 86:39:3d:3b:d1:fd:b0:48:d0:a7:bf:e8:b3:c4:5d: c9:bd:72:86:c8:a9:bd:25:65:a9:14:ec:14:23:2a: 4a:49:37:16:32:3a:ac:96:51:d4:e4:f8:4f:84:a1: 0f:66:0b:5b:b6:74:4e:6e:a0:c4:64:15:03:94:21: 4f:f6:9d:14:e6:99:f7:2a:de:2d:9f:ab:d8:cb:fb: 47:6a:1d:04:88:91:58:3a:1d:cf:84:8e:4c:b1:a7: 8b:f1:7b:17:89:4c:28:86:11:57:40:88:41:9c:25: 7c:19:b3:40:90:8f:b1:30:27:ca:c3:a1:aa:b4:9c: 33:53:73:f7:9f:ab:0f:64:92:63:2b:ce:45:32:06: bf:c1:75:7b:c8:b5:d1:86:d9:f1:a8:91:83:fb:99: 9a:a4:bb:0a:61:f5:3a:8c:50:c7:45:18:d4:1c:2c: 48:87:18:a1:7a:43:5f:c1:87:9d:f2:e6:5b:37:1e: 8a:d3:a3:df:1e:b8:1a:c8:e2:b8:fe:e0:aa:6b:6a: 52:6b:9a:a3:55:5e:f3:ba:18:2c:de:b0:ff:88:2e: 5e:7a:4c:ea:a8:f3:06:20:a9:61:c2:2a:8b:a3:be: f1:d8:23:ef:bd:26:08:52:d1:90:99:bf:0b:ea:48: 99:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:50:1C:41:87:E7:00:EE:63:F8:1A:31:0C:E2:D9:25:FF:B7:89:C8 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/alAcQYfnAO5j-BoxDOLZJf-3icg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.253.234.0/24 Signature Algorithm: sha256WithRSAEncryption a2:f7:6c:68:cf:bb:45:f6:8f:2e:17:08:70:78:ad:18:9b:e5: 7d:44:8f:f3:40:ab:eb:1f:0f:8d:ef:94:f4:2c:55:1f:74:20: a2:12:15:57:9b:9d:75:8c:42:8e:5e:5f:3f:13:ca:73:a1:b8: 99:96:b1:c3:77:85:e6:bd:38:4e:a0:52:b6:2f:f4:7f:4a:eb: 04:bd:8e:d2:e9:9b:77:ac:4f:42:e5:8e:53:16:ee:8a:9c:16: 95:29:f3:ee:6c:a5:54:ea:91:f7:f5:df:1e:09:d5:5c:12:0b: 33:62:96:b9:b8:d6:2a:c8:ce:a4:b7:63:8f:41:d0:c2:32:a0: da:fc:dc:bb:f3:9f:d1:d6:0e:71:af:9f:e9:3b:7c:c0:0c:43: c6:b0:b0:1f:b6:2b:d9:e7:f0:32:86:5b:b5:02:73:ec:a9:62: dc:dd:f1:16:20:83:77:58:2b:61:7d:37:e8:6e:20:32:8d:ca: be:32:d6:9e:c7:7b:1e:8e:fb:75:7a:ce:c6:0a:6d:f4:c0:c6: 6f:be:d5:14:89:32:90:1d:70:16:0b:94:cf:f0:3c:0c:d1:76: e5:55:cf:64:bd:d5:be:6d:90:12:ac:ac:d0:1f:ce:de:05:b7: 86:d3:e1:ca:37:42:45:29:c5:5c:3f:7b:9e:71:bd:ab:d7:47: c6:13:f9:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQCc7EokglzYVaWRsTJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTUwMWM0MTg3ZTcwMGVlNjNmODFhMzEwY2UyZDkyNWZmYjc4OWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXj66nn+zyFfjlqwWD+GOT070f2w SNCnv+izxF3JvXKGyKm9JWWpFOwUIypKSTcWMjqsllHU5PhPhKEPZgtbtnRObqDE ZBUDlCFP9p0U5pn3Kt4tn6vYy/tHah0EiJFYOh3PhI5MsaeL8XsXiUwohhFXQIhB nCV8GbNAkI+xMCfKw6GqtJwzU3P3n6sPZJJjK85FMga/wXV7yLXRhtnxqJGD+5ma pLsKYfU6jFDHRRjUHCxIhxihekNfwYed8uZbNx6K06PfHrgayOK4/uCqa2pSa5qj VV7zuhgs3rD/iC5eekzqqPMGIKlhwiqLo77x2CPvvSYIUtGQmb8L6kiZ+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpQHEGH5wDuY/gaMQzi2SX/t4nIMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYWxBY1FZZm5BTzVqLUJveERPTFpKZi0zaWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP3qMA0G CSqGSIb3DQEBCwUAA4IBAQCi92xoz7tF9o8uFwhweK0Ym+V9RI/zQKvrHw+N75T0 LFUfdCCiEhVXm511jEKOXl8/E8pzobiZlrHDd4XmvThOoFK2L/R/SusEvY7S6Zt3 rE9C5Y5TFu6KnBaVKfPubKVU6pH39d8eCdVcEgszYpa5uNYqyM6kt2OPQdDCMqDa /Ny785/R1g5xr5/pO3zADEPGsLAftivZ5/Ayhlu1AnPsqWLc3fEWIIN3WCthfTfo biAyjcq+Mtaex3sejvt1es7GCm30wMZvvtUUiTKQHXAWC5TP8DwM0XblVc9kvdW+ bZASrKzQH87eBbeG0+HKN0JFKcVcP3uecb2r10fGE/mO -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:15 2026 by rpki-client