This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ALPiTkZxPDTnbdpPpErdvl97Wc8.roa File: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (raw, json) Hash identifier: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ= Subject key identifier: 00:B3:E2:4E:46:71:3C:34:E7:6D:DA:4F:A4:4A:DD:BE:5F:7B:59:CF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B7E37D832A03203116EEF3CFEB561C78A Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ALPiTkZxPDTnbdpPpErdvl97Wc8.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61036 IP address blocks: 95.38.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d8:32:a0:32:03:11:6e:ef:3c:fe:b5:61:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00b3e24e46713c34e76dda4fa44addbe5f7b59cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e6:05:ad:17:52:1e:d3:92:ba:a4:74:aa:23: 5c:08:5e:ff:be:ec:7e:1f:ce:76:ef:25:2e:d7:92: 63:75:78:a5:73:59:9f:a4:b1:14:94:b2:6c:c4:f8: bd:03:2f:05:01:37:11:e0:6e:f9:8e:8a:f7:8d:2f: a2:dd:98:80:d5:72:e1:c6:fd:1a:2e:58:de:e3:08: ed:16:56:b0:5d:ad:01:58:7b:16:6e:64:db:c6:e7: 99:e8:4b:22:d9:96:bf:1d:7e:26:e4:72:c2:84:cd: 77:cb:af:ed:c5:72:22:4d:a0:5e:9c:4a:36:e4:34: f2:99:7b:e8:70:df:2e:e5:c2:8f:40:dd:7d:f5:d3: 38:5b:be:80:b9:b4:b4:a9:12:94:40:23:6d:1e:64: 03:3b:0a:2f:08:bf:bd:cf:f0:1b:26:bb:b7:1f:56: e4:99:0e:c6:48:8a:b7:b9:d7:95:34:6a:52:d8:18: 7e:ba:04:06:fb:84:ee:55:41:d4:3a:43:64:3e:2b: 45:a8:10:85:d8:1d:f0:bf:b2:e7:04:72:e9:98:52: 82:42:bd:a0:0d:03:e1:8d:68:14:12:43:4c:83:b8: 5a:05:29:86:7a:22:08:37:89:ab:d2:69:6e:02:8a: 18:0f:de:be:bf:e8:a3:27:51:5d:0b:60:fb:8f:a4: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B3:E2:4E:46:71:3C:34:E7:6D:DA:4F:A4:4A:DD:BE:5F:7B:59:CF X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ALPiTkZxPDTnbdpPpErdvl97Wc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.38.255.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:81:6b:50:00:4c:d0:69:0d:84:bb:5a:74:81:1f:c5:d4:58: 91:57:52:c8:de:19:55:b8:a2:d8:fc:af:13:ec:dc:e6:8e:f7: 64:a4:95:91:48:70:82:98:a0:a4:e1:b8:cf:2d:f9:c7:9c:b8: 05:34:28:02:9a:82:57:fa:55:b8:b3:b5:d5:71:8f:bb:24:a8: 01:61:ee:fc:07:38:d1:08:13:96:13:d0:79:76:10:bd:20:43: c1:e1:10:9f:4c:20:4d:8e:f1:6c:8b:5a:a9:59:cf:ba:d5:bb: 48:ca:26:27:67:ab:cf:98:55:0a:33:2b:4e:6e:19:69:9c:df: a5:6b:58:2b:c7:ce:df:a6:f5:98:9a:cb:fc:53:a9:f6:1f:69: 03:01:53:99:54:de:21:be:12:c2:c1:b3:41:5e:f7:5c:e5:95: 10:d5:64:2c:46:48:c2:08:cd:d4:52:af:82:dc:de:ad:a8:bc: 9e:17:f0:6a:52:a4:1a:c6:d8:30:48:5c:d7:d1:0b:a1:49:ba: 4d:ac:7d:5c:f6:41:ed:a6:de:7b:76:c0:be:0a:ea:83:d8:ed: f2:1e:88:7d:2b:7f:f7:25:d5:f7:c5:29:5e:c1:bf:e2:c8:65: 44:48:31:29:ff:26:52:74:65:55:06:c4:9f:42:49:26:a6:cc: 01:66:e1:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9gyoDIDEW7vPP61YceKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGIzZTI0ZTQ2NzEzYzM0ZTc2ZGRhNGZhNDRhZGRiZTVmN2I1OWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OYFrRdSHtOSuqR0qiNcCF7/vux+ H8527yUu15JjdXilc1mfpLEUlLJsxPi9Ay8FATcR4G75jor3jS+i3ZiA1XLhxv0a Llje4wjtFlawXa0BWHsWbmTbxueZ6Esi2Za/HX4m5HLChM13y6/txXIiTaBenEo2 5DTymXvocN8u5cKPQN199dM4W76AubS0qRKUQCNtHmQDOwovCL+9z/AbJru3H1bk mQ7GSIq3udeVNGpS2Bh+ugQG+4TuVUHUOkNkPitFqBCF2B3wv7LnBHLpmFKCQr2g DQPhjWgUEkNMg7haBSmGeiIIN4mr0mluAooYD96+v+ijJ1FdC2D7j6QuVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFACz4k5GcTw0523aT6RK3b5fe1nPMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvQUxQaVRrWnhQRFRuYmRwUHBFcmR2bDk3V2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXyb/MA0G CSqGSIb3DQEBCwUAA4IBAQB7gWtQAEzQaQ2Eu1p0gR/F1FiRV1LI3hlVuKLY/K8T 7NzmjvdkpJWRSHCCmKCk4bjPLfnHnLgFNCgCmoJX+lW4s7XVcY+7JKgBYe78BzjR CBOWE9B5dhC9IEPB4RCfTCBNjvFsi1qpWc+61btIyiYnZ6vPmFUKMytObhlpnN+l a1grx87fpvWYmsv8U6n2H2kDAVOZVN4hvhLCwbNBXvdc5ZUQ1WQsRkjCCM3UUq+C 3N6tqLyeF/BqUqQaxtgwSFzX0QuhSbpNrH1c9kHtpt57dsC+CuqD2O3yHoh9K3/3 JdX3xSlewb/iyGVESDEp/yZSdGVVBsSfQkkmpswBZuHu -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:16 2026 by rpki-client