This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AmintH5W5_ngWc6-sW2fzBctZv4.roa File: AmintH5W5_ngWc6-sW2fzBctZv4.roa (raw, json) Hash identifier: xc9EO676IAjhePl6MrlKmhj9JGbp1tpCjEdGyC4/I3M= Subject key identifier: 02:68:A7:B4:7E:56:E7:F9:E0:59:CE:BE:B1:6D:9F:CC:17:2D:66:FE Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E395AC832CDB32A7B295779ABBB8317 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AmintH5W5_ngWc6-sW2fzBctZv4.roa Signing time: Fri 02 Jan 2026 10:20:46 +0000 ROA not before: Fri 02 Jan 2026 10:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212815 IP address blocks: 45.13.119.0/24 maxlen: 24 45.154.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:5a:c8:32:cd:b3:2a:7b:29:57:79:ab:bb:83:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0268a7b47e56e7f9e059cebeb16d9fcc172d66fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:b1:f0:84:73:ef:8c:b7:9b:0b:12:65:5e: ce:5e:89:ec:48:7c:93:77:2c:4a:69:b4:5a:ad:12: 32:7a:0c:e8:6d:ac:9e:e1:ad:e4:43:99:88:b2:32: 9c:b6:af:7b:33:6d:d4:dc:35:24:98:25:13:5b:ef: b0:1f:ee:8b:60:6e:68:b7:3f:ac:c2:fe:0d:b9:34: fa:18:81:50:49:0d:a2:6c:78:b5:9e:8d:59:eb:cf: ba:fb:78:67:d6:14:19:3b:d3:cb:82:19:01:d5:d3: e3:a6:e6:6a:36:78:e1:90:c7:28:b2:6d:74:b0:31: 91:da:5c:62:f1:2c:97:6a:70:9e:d9:f6:cb:da:65: 5e:de:2d:f0:d3:b6:8b:1a:26:19:ef:62:34:98:2d: 84:08:ed:3c:0d:a7:2f:db:ce:fa:2f:6f:65:26:4d: 90:45:0a:56:3e:cc:e7:46:33:2b:5a:78:86:cb:8f: 2d:be:cc:0d:03:ec:6b:89:af:4c:21:f4:b9:96:fa: 1e:3e:60:83:d0:c3:d9:9e:ab:3b:ee:32:c2:d2:4a: f7:98:16:71:ea:8c:3f:f9:ef:05:96:5c:ce:e5:86: 5a:8f:a7:1b:75:97:cf:3a:32:21:6d:58:d3:35:1c: 6f:e1:de:10:0b:d1:35:fa:ef:0e:11:2a:d1:a5:f8: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:68:A7:B4:7E:56:E7:F9:E0:59:CE:BE:B1:6D:9F:CC:17:2D:66:FE X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AmintH5W5_ngWc6-sW2fzBctZv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.119.0/24 45.154.96.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:65:96:14:0d:f1:fc:b7:16:55:5b:52:af:a6:ed:33:b4:05: 72:75:91:0e:a7:68:c3:03:ec:70:89:f4:eb:92:e4:16:92:0c: f2:ff:a6:2e:86:5c:16:a6:62:a4:5f:a2:ed:03:08:44:bc:56: 11:3f:d2:1b:9d:2d:4f:b6:cc:47:a1:39:c4:3f:ce:39:0e:c2: 67:95:f0:64:ea:5d:67:21:90:8c:20:25:91:c8:7d:98:0f:e7: 47:c8:1d:df:22:f2:73:86:09:c8:a7:63:46:7d:9d:23:72:d8: 9b:de:e9:61:5d:ac:76:2b:1e:a5:aa:bc:11:cb:e3:b3:bf:6f: 9e:08:fa:b7:bd:e3:e1:57:1a:84:ad:0c:67:6b:95:96:a8:82: fb:22:76:92:f1:71:d6:bb:74:3a:c6:62:68:39:1d:d3:7d:27: 6c:57:44:48:56:25:46:e9:5b:0e:ec:94:52:3d:7b:8d:93:f2: 89:ea:ad:a4:45:63:fe:b8:2d:2c:df:a2:19:7f:e4:f5:85:05: c9:ca:c6:91:5e:22:7e:33:11:85:4d:41:5f:cb:cc:10:e0:46: 9a:a4:7c:9b:ec:db:21:01:15:c3:66:6f:2c:94:2f:e0:19:ba: 93:4e:13:ea:65:08:01:bc:04:3c:9e:3a:15:75:c9:1c:32:0b: 3b:38:17:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OVrIMs2zKnspV3mru4MXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjY4YTdiNDdlNTZlN2Y5ZTA1OWNlYmViMTZkOWZjYzE3MmQ2NmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ+x8IRz74y3mwsSZV7OXonsSHyT dyxKabRarRIyegzobaye4a3kQ5mIsjKctq97M23U3DUkmCUTW++wH+6LYG5otz+s wv4NuTT6GIFQSQ2ibHi1no1Z68+6+3hn1hQZO9PLghkB1dPjpuZqNnjhkMcosm10 sDGR2lxi8SyXanCe2fbL2mVe3i3w07aLGiYZ72I0mC2ECO08Dacv2876L29lJk2Q RQpWPsznRjMrWniGy48tvswNA+xria9MIfS5lvoePmCD0MPZnqs77jLC0kr3mBZx 6ow/+e8FllzO5YZaj6cbdZfPOjIhbVjTNRxv4d4QC9E1+u8OESrRpfiujQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAJop7R+Vuf54FnOvrFtn8wXLWb+MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvQW1pbnRINVc1X25nV2M2LXNXMmZ6QmN0WnY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ13AwQA LZpgMA0GCSqGSIb3DQEBCwUAA4IBAQAcZZYUDfH8txZVW1Kvpu0ztAVydZEOp2jD A+xwifTrkuQWkgzy/6YuhlwWpmKkX6LtAwhEvFYRP9IbnS1PtsxHoTnEP845DsJn lfBk6l1nIZCMICWRyH2YD+dHyB3fIvJzhgnIp2NGfZ0jctib3ulhXax2Kx6lqrwR y+Ozv2+eCPq3vePhVxqErQxna5WWqIL7InaS8XHWu3Q6xmJoOR3TfSdsV0RIViVG 6VsO7JRSPXuNk/KJ6q2kRWP+uC0s36IZf+T1hQXJysaRXiJ+MxGFTUFfy8wQ4Eaa pHyb7NshARXDZm8slC/gGbqTThPqZQgBvAQ8njoVdckcMgs7OBcu -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:05 2026 by rpki-client