This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa File: 4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa (raw, json) Hash identifier: FvxfrXpFTEI5fJri2eyNeGvuYRYi/o3NW0uubzMpvBU= Subject key identifier: E0:02:C5:6B:D2:65:CB:C5:7F:74:A2:A9:27:49:37:AE:98:6D:2A:A2 Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9 Certificate serial: 019B797E5D5D05CF08EC5D086D401DC15FCC Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa Signing time: Thu 01 Jan 2026 12:18:03 +0000 ROA not before: Thu 01 Jan 2026 12:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44136 IP address blocks: 46.16.232.0/21 maxlen: 24 91.201.60.0/22 maxlen: 24 185.20.12.0/22 maxlen: 24 2a02:28f0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5d:5d:05:cf:08:ec:5d:08:6d:40:1d:c1:5f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9 Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e002c56bd265cbc57f74a2a9274937ae986d2aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:32:2a:1b:b0:9b:02:36:30:ff:87:19:0a: f9:8d:05:3c:01:28:f6:32:f8:26:b2:5c:cd:fb:8f: 27:2b:41:89:d1:42:49:e6:a1:4b:31:09:42:94:8a: 96:92:67:81:45:fa:36:b7:27:9a:38:e1:fb:3f:d5: 64:62:af:3f:be:ae:22:8c:4a:78:0b:5d:6e:c4:5d: d7:eb:de:36:1b:de:4f:5c:b2:43:92:97:ae:80:e9: ce:5b:5a:4d:9f:7b:e0:aa:c9:5e:4f:d8:56:11:4d: a8:8f:b5:95:54:4d:c9:f4:4b:29:b9:e6:63:57:9b: c1:e1:bc:82:16:46:dc:13:da:6f:6e:fb:bf:17:08: 8d:bf:4b:4f:55:b8:8a:59:c5:0e:f6:0f:9d:c6:36: 29:48:1f:e1:05:65:e9:94:60:20:e0:9f:ae:3b:b2: 39:01:63:f9:90:a3:58:90:14:dc:55:a5:8a:6f:5c: a5:7a:b8:1a:1d:b9:f0:bf:ff:8a:3f:04:c1:6d:75: c2:d2:fb:3e:8e:0c:e5:99:b3:a9:c0:46:65:63:01: 44:09:d0:c0:b3:1c:9a:bf:d8:21:d8:01:d4:05:45: 1e:ac:c1:81:07:c9:41:cd:6d:c7:01:c6:3b:63:b1: e7:0a:36:71:48:b6:ac:cd:39:96:f7:d3:67:e2:d9: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:C5:6B:D2:65:CB:C5:7F:74:A2:A9:27:49:37:AE:98:6D:2A:A2 X509v3 Authority Key Identifier: keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.232.0/21 91.201.60.0/22 185.20.12.0/22 IPv6: 2a02:28f0::/29 Signature Algorithm: sha256WithRSAEncryption 22:6e:65:47:a6:af:4c:18:9b:f9:f8:a6:38:4d:af:21:ca:0b: d5:10:28:c0:b5:10:44:f9:bc:92:31:3b:9c:30:f5:19:70:04: d9:b5:37:70:fe:71:f8:54:e6:38:d7:37:aa:14:39:75:92:48: ba:5b:d6:d0:03:09:ba:97:e6:25:ca:96:63:e8:9e:05:be:e5: fe:52:d2:2b:69:1f:40:62:fa:0c:6f:c4:27:46:90:73:8f:b1: 6e:24:b2:58:20:1b:22:7f:09:71:6c:9a:aa:4a:84:d5:e3:34: 62:80:80:b2:aa:48:99:64:18:6d:4e:c1:f7:5a:3e:68:2a:a6: 4f:a1:3f:70:62:03:d3:bc:6a:71:42:5f:f9:c4:40:06:cb:4f: 90:f2:5f:4f:02:23:71:d2:7a:a4:be:90:e6:24:f1:25:74:69: 7b:9e:86:1b:64:71:97:93:2f:a3:02:cd:5e:91:a4:3d:78:0c: 6b:e3:3b:09:89:33:79:a3:1f:64:fb:fc:16:ba:f5:cf:03:86: 6f:94:21:ad:95:ab:22:a7:97:5f:00:cb:db:27:f1:34:32:ae: 7a:10:a3:db:ee:3d:7d:5e:79:20:be:fc:1a:c3:6d:b4:26:e9: f8:d6:76:01:4e:4e:1e:11:a5:90:f0:2d:bc:b5:02:8f:ce:20: 44:fc:e0:2f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fl1dBc8I7F0IbUAdwV/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGIyM2E1ZTI1NTBmZjk3NGNhNWY0MTkxN2FjODY3ZDUw ZTM1ZTkwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDAyYzU2YmQyNjVjYmM1N2Y3NGEyYTkyNzQ5MzdhZTk4NmQyYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FMyKhuwmwI2MP+HGQr5jQU8ASj2 MvgmslzN+48nK0GJ0UJJ5qFLMQlClIqWkmeBRfo2tyeaOOH7P9VkYq8/vq4ijEp4 C11uxF3X6942G95PXLJDkpeugOnOW1pNn3vgqsleT9hWEU2oj7WVVE3J9EspueZj V5vB4byCFkbcE9pvbvu/FwiNv0tPVbiKWcUO9g+dxjYpSB/hBWXplGAg4J+uO7I5 AWP5kKNYkBTcVaWKb1ylergaHbnwv/+KPwTBbXXC0vs+jgzlmbOpwEZlYwFECdDA sxyav9gh2AHUBUUerMGBB8lBzW3HAcY7Y7HnCjZxSLaszTmW99Nn4tmj3QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOACxWvSZcvFf3SiqSdJN66YbSqiMB8GA1UdIwQY MBaAFAfbI6XiVQ/5dMpfQZF6yGfVDjXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgt NWNjZDVlOWNlMDA0LzEvNEFMRmE5Smx5OFZfZEtLcEowazNycGh0S3FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgtNWNjZDVlOWNlMDA0 LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLhDoAwQC W8k8AwQCuRQMMA0EAgACMAcDBQMqAijwMA0GCSqGSIb3DQEBCwUAA4IBAQAibmVH pq9MGJv5+KY4Ta8hygvVECjAtRBE+bySMTucMPUZcATZtTdw/nH4VOY41zeqFDl1 kki6W9bQAwm6l+YlypZj6J4FvuX+UtIraR9AYvoMb8QnRpBzj7FuJLJYIBsifwlx bJqqSoTV4zRigICyqkiZZBhtTsH3Wj5oKqZPoT9wYgPTvGpxQl/5xEAGy0+Q8l9P AiNx0nqkvpDmJPEldGl7noYbZHGXky+jAs1ekaQ9eAxr4zsJiTN5ox9k+/wWuvXP A4ZvlCGtlasip5dfAMvbJ/E0Mq56EKPb7j19Xnkgvvwaw220Jun41nYBTk4eEaWQ 8C28tQKPziBE/OAv -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:21 2026 by rpki-client