This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/AL0W8JafgnmPnnZBBZOLnMOElHU.roa File: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (raw, json) Hash identifier: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8= Subject key identifier: 00:BD:16:F0:96:9F:82:79:8F:9E:76:41:05:93:8B:9C:C3:84:94:75 Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1 Certificate serial: 019B7AC906A2F4F2E740580D0DA7BB0CC1EF Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/AL0W8JafgnmPnnZBBZOLnMOElHU.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47134 IP address blocks: 93.91.64.0/20 maxlen: 20 93.91.65.0/24 maxlen: 24 93.91.67.0/24 maxlen: 24 93.91.73.0/24 maxlen: 24 93.91.74.0/24 maxlen: 24 93.91.75.0/24 maxlen: 24 93.91.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:06:a2:f4:f2:e7:40:58:0d:0d:a7:bb:0c:c1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1 Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00bd16f0969f82798f9e764105938b9cc3849475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:53:dd:f7:36:81:45:c8:dc:d1:43:1a:3b: b0:f2:53:d4:c6:cc:e4:39:3d:86:5e:84:fd:fc:ff: b9:f1:92:f1:b7:51:e8:a1:9e:29:45:98:a8:8a:e7: 0c:9a:e5:52:17:36:75:4f:e6:f0:8d:6b:00:93:c1: d1:65:70:9d:c0:a3:c8:fc:dd:3d:11:68:14:29:c2: bf:aa:87:ce:d7:d5:bd:4f:46:2d:60:7a:6c:97:5a: 09:b0:2e:be:96:4c:5f:6e:e8:05:b0:d5:b6:f7:94: ca:94:64:cd:23:4d:3d:35:5a:43:df:89:ae:ac:8f: 53:0d:0a:ef:b8:39:d9:0b:fa:ef:6c:ea:4a:c0:13: 3d:7f:c1:34:06:59:f8:06:b8:ac:3e:ed:1f:ff:1e: 8e:26:a2:8b:06:5e:49:f7:6f:70:f1:e5:eb:12:c4: b3:60:2e:59:e5:27:f3:69:03:d7:94:11:fe:58:aa: f1:19:08:4a:5e:9b:c6:5f:4a:2a:85:36:af:99:8f: 1e:96:c5:2d:6a:1b:fd:72:86:96:e1:62:7d:8f:4d: 12:2b:cc:e6:5a:e6:5e:23:29:2b:25:ea:7e:52:b7: 18:eb:1a:be:f7:c1:e4:01:7d:9c:9b:ea:15:b3:73: ae:b1:0a:d8:a2:8d:39:7c:75:9d:da:47:6e:22:31: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BD:16:F0:96:9F:82:79:8F:9E:76:41:05:93:8B:9C:C3:84:94:75 X509v3 Authority Key Identifier: keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/AL0W8JafgnmPnnZBBZOLnMOElHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.91.64.0/20 Signature Algorithm: sha256WithRSAEncryption 27:66:ba:c4:70:78:67:97:27:23:74:d6:7b:f0:7e:d5:de:ae: 34:5f:2d:2d:3c:5f:d6:00:14:60:74:6f:dd:a1:22:b6:fc:7d: e3:37:8a:42:01:e5:8c:c9:6e:39:d9:3a:5d:84:1c:ed:b9:db: 8c:7e:a7:c2:c4:2d:8a:67:36:37:23:92:30:eb:79:af:d3:f5: 30:de:00:bf:be:fc:1d:fa:65:61:7a:c9:7f:d0:9d:19:a1:f6: bf:e0:7f:38:0e:5d:59:1c:23:87:ad:1f:88:01:28:8a:0b:b6: a8:d3:47:21:50:a9:ce:57:16:ab:89:9e:60:77:3f:30:29:ef: a2:34:10:82:26:ce:af:6b:8b:90:7c:9d:1b:b8:79:0b:70:f0: 1a:4d:8a:f7:c9:47:bf:ce:70:04:fd:40:48:78:d7:f4:af:ae: 4b:35:81:17:4e:f0:61:a3:71:b9:7d:53:58:30:4c:0d:a8:0e: 7b:ca:60:23:77:b0:11:57:43:7e:c0:a4:c1:67:ee:65:f8:27: 50:43:b5:0a:38:86:f2:a0:3f:8d:3c:5a:1c:e7:d4:77:3c:e6: af:b2:10:51:cc:96:48:23:e3:47:76:cf:fb:6a:61:bf:7e:c3: 43:78:77:e1:9c:17:b5:11:b4:1f:18:5f:b6:3c:ef:92:8a:d3: e3:d4:a6:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQai9PLnQFgNDae7DMHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx ODVlYjEwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGJkMTZmMDk2OWY4Mjc5OGY5ZTc2NDEwNTkzOGI5Y2MzODQ5NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY9T3fc2gUXI3NFDGjuw8lPUxszk OT2GXoT9/P+58ZLxt1HooZ4pRZioiucMmuVSFzZ1T+bwjWsAk8HRZXCdwKPI/N09 EWgUKcK/qofO19W9T0YtYHpsl1oJsC6+lkxfbugFsNW295TKlGTNI009NVpD34mu rI9TDQrvuDnZC/rvbOpKwBM9f8E0Bln4BrisPu0f/x6OJqKLBl5J929w8eXrEsSz YC5Z5SfzaQPXlBH+WKrxGQhKXpvGX0oqhTavmY8elsUtahv9coaW4WJ9j00SK8zm WuZeIykrJep+UrcY6xq+98HkAX2cm+oVs3OusQrYoo05fHWd2kduIjFXiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAC9FvCWn4J5j552QQWTi5zDhJR1MB8GA1UdIwQY MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt NWE3Mjg5ZWY1ZjYzLzEvQUwwVzhKYWZnbm1Qbm5aQkJaT0xuTU9FbEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXVtAMA0G CSqGSIb3DQEBCwUAA4IBAQAnZrrEcHhnlycjdNZ78H7V3q40Xy0tPF/WABRgdG/d oSK2/H3jN4pCAeWMyW452TpdhBztuduMfqfCxC2KZzY3I5Iw63mv0/Uw3gC/vvwd +mVhesl/0J0Zofa/4H84Dl1ZHCOHrR+IASiKC7ao00chUKnOVxariZ5gdz8wKe+i NBCCJs6va4uQfJ0buHkLcPAaTYr3yUe/znAE/UBIeNf0r65LNYEXTvBho3G5fVNY MEwNqA57ymAjd7ARV0N+wKTBZ+5l+CdQQ7UKOIbyoD+NPFoc59R3POavshBRzJZI I+NHds/7amG/fsNDeHfhnBe1EbQfGF+2PO+SitPj1KZA -----END CERTIFICATE-----Generated at Mon Jan 26 01:49:01 2026 by rpki-client