This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/aMxhZsLMDx304AXjnZldJIQi_VU.roa File: aMxhZsLMDx304AXjnZldJIQi_VU.roa (raw, json) Hash identifier: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4= Subject key identifier: 68:CC:61:66:C2:CC:0F:1D:F4:E0:05:E3:9D:99:5D:24:84:22:FD:55 Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Certificate serial: 019B7A5B5551E0054DB75114AF5D3EE8940A Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/aMxhZsLMDx304AXjnZldJIQi_VU.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 45.159.204.0/22 maxlen: 24 2a09:db40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:55:51:e0:05:4d:b7:51:14:af:5d:3e:e8:94:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68cc6166c2cc0f1df4e005e39d995d248422fd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:e5:ef:af:78:6b:43:87:bd:3a:87:a5:4c: fc:ab:8b:cc:de:8a:00:a3:d8:db:8a:0e:39:6d:cd: 21:8e:ce:e2:60:8a:fe:8a:e9:38:37:05:b7:d8:87: 12:2e:ae:75:b3:b5:30:69:ec:e1:b6:1f:69:cd:e9: b2:7e:4f:4c:6e:71:41:45:d9:f0:6c:21:7e:37:e7: 18:88:cc:75:97:8e:3e:f1:52:5b:8e:8d:9f:6b:4d: 96:d2:0a:51:3c:e4:86:b5:0d:12:82:18:e7:57:67: 22:af:3a:38:31:de:a2:fd:f7:b5:6b:aa:d1:31:d1: ce:07:58:13:81:3d:62:a5:07:e1:0f:cb:a0:95:f4: 82:08:e1:a6:b1:32:d1:89:bb:0f:11:aa:0a:d3:e1: 75:9a:04:bf:90:82:40:6e:8d:51:0a:c8:fd:42:40: ba:77:e4:96:5f:b4:e5:6d:72:ec:f7:6e:c0:7c:78: 4f:94:ae:4b:92:45:3d:1f:73:f0:c5:e2:78:e1:1f: b2:27:9f:fa:90:8f:d8:d0:ae:92:f7:ff:3e:a9:dc: c0:c2:b1:76:bd:d5:40:9c:fe:ef:4a:16:9c:b6:3c: 50:33:b0:ac:ef:63:8b:a1:3a:ab:d4:a2:d0:20:19: 2c:4d:2b:a1:08:dc:2f:f4:96:06:53:b3:6f:1b:78: 8d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CC:61:66:C2:CC:0F:1D:F4:E0:05:E3:9D:99:5D:24:84:22:FD:55 X509v3 Authority Key Identifier: keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/aMxhZsLMDx304AXjnZldJIQi_VU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.204.0/22 IPv6: 2a09:db40::/29 Signature Algorithm: sha256WithRSAEncryption 2e:1b:ce:1c:3e:07:6b:72:25:76:47:ec:f6:6f:55:f0:72:69: 1f:ba:d0:1e:d6:2a:f3:86:59:13:fd:44:8a:13:ed:86:c9:94: 86:37:98:58:4b:e3:f7:dd:0d:80:de:de:91:e0:b7:e4:02:c7: f7:c8:eb:af:6c:46:6d:fb:59:37:af:5d:1c:09:e5:28:44:e6: af:a3:41:ca:f8:6e:48:46:de:14:ae:71:ab:0e:7c:58:db:ba: 8a:55:e2:3a:15:90:cd:49:d3:a5:26:6c:1d:47:be:e5:0a:0a: 4c:43:19:77:2f:68:9b:07:e1:eb:c5:87:1c:b0:b2:96:04:32: 85:7c:b4:4a:9b:f7:3c:67:81:ed:e4:79:bb:9e:4c:bf:7c:ce: 3e:19:a9:da:d6:4d:da:02:17:de:33:3d:ae:9b:44:28:66:27: ea:1a:6d:53:6d:f1:49:fe:08:20:bc:fe:02:35:4d:dc:de:10: 35:77:70:4b:91:18:01:12:4d:f3:39:e9:a8:b6:f1:f9:60:5b: 81:be:92:43:c0:ca:b1:43:b8:f6:8b:0f:00:74:2f:da:fd:a1: 7e:45:5f:2e:45:2b:76:b6:4a:9d:b1:5e:92:e8:03:28:cb:1f: a5:51:3c:95:bf:cc:99:ef:09:6a:85:0b:24:a4:2f:61:8f:2f: d9:b5:84:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W1VR4AVNt1EUr10+6JQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl MzA5MjEwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGNjNjE2NmMyY2MwZjFkZjRlMDA1ZTM5ZDk5NWQyNDg0MjJmZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/l7694a0OHvTqHpUz8q4vM3ooA o9jbig45bc0hjs7iYIr+iuk4NwW32IcSLq51s7Uwaezhth9pzemyfk9MbnFBRdnw bCF+N+cYiMx1l44+8VJbjo2fa02W0gpRPOSGtQ0SghjnV2cirzo4Md6i/fe1a6rR MdHOB1gTgT1ipQfhD8uglfSCCOGmsTLRibsPEaoK0+F1mgS/kIJAbo1RCsj9QkC6 d+SWX7TlbXLs927AfHhPlK5LkkU9H3PwxeJ44R+yJ5/6kI/Y0K6S9/8+qdzAwrF2 vdVAnP7vShactjxQM7Cs72OLoTqr1KLQIBksTSuhCNwv9JYGU7NvG3iNFwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGjMYWbCzA8d9OAF452ZXSSEIv1VMB8GA1UdIwQY MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt NjMxOWJiMDc5YzQ0LzEvYU14aFpzTE1EeDMwNEFYam5abGRKSVFpX1ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0 LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ/MMA0E AgACMAcDBQMqCdtAMA0GCSqGSIb3DQEBCwUAA4IBAQAuG84cPgdrciV2R+z2b1Xw cmkfutAe1irzhlkT/USKE+2GyZSGN5hYS+P33Q2A3t6R4LfkAsf3yOuvbEZt+1k3 r10cCeUoROavo0HK+G5IRt4UrnGrDnxY27qKVeI6FZDNSdOlJmwdR77lCgpMQxl3 L2ibB+HrxYccsLKWBDKFfLRKm/c8Z4Ht5Hm7nky/fM4+Gana1k3aAhfeMz2um0Qo ZifqGm1TbfFJ/gggvP4CNU3c3hA1d3BLkRgBEk3zOemotvH5YFuBvpJDwMqxQ7j2 iw8AdC/a/aF+RV8uRSt2tkqdsV6S6AMoyx+lUTyVv8yZ7wlqhQskpC9hjy/ZtYRZ -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:34 2026 by rpki-client