This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/amFStnp6j-M9lkAATZthidSAqw0.roa File: amFStnp6j-M9lkAATZthidSAqw0.roa (raw, json) Hash identifier: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA= Subject key identifier: 6A:61:52:B6:7A:7A:8F:E3:3D:96:40:00:4D:9B:61:89:D4:80:AB:0D Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F159D5200EDA2B6ADA64CBFC95E9D54 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/amFStnp6j-M9lkAATZthidSAqw0.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 185.226.56.0/23 maxlen: 23 185.226.58.0/23 maxlen: 23 194.179.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9d:52:00:ed:a2:b6:ad:a6:4c:bf:c9:5e:9d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a6152b67a7a8fe33d9640004d9b6189d480ab0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:b9:50:80:d0:1a:26:1f:34:7f:a4:21:e8: 21:80:2a:c3:a9:2a:b0:f9:18:9e:77:40:3c:7d:a6: ac:b9:30:36:9d:ad:66:0b:39:1d:03:69:5b:03:ad: d3:50:8f:d3:88:cf:e8:19:14:fc:10:6b:dd:16:0f: 69:b2:09:03:85:25:7a:3c:9a:b6:e6:9e:f8:38:4e: 24:0a:df:49:2e:57:a4:71:f2:aa:b6:dc:97:23:4d: 16:09:7f:75:34:91:c5:b4:c0:69:0f:70:6c:2c:f9: 67:99:25:c1:fa:15:e2:ed:21:7c:98:ef:3e:f3:a7: c9:02:64:bc:76:bb:b9:17:96:fc:f5:0c:4d:1d:e1: 48:8f:90:cd:52:93:6d:03:77:78:62:7e:8a:21:1c: e0:ec:76:82:3a:be:7a:5a:8b:8f:c0:53:a6:32:e1: d5:a2:a8:30:bb:55:90:39:3d:d9:00:fa:67:16:f2: 1a:f6:ef:18:94:83:63:16:1b:ff:bb:b8:90:d7:f5: 81:d7:9a:ae:52:5e:5d:f2:93:ef:66:01:c6:f5:7b: 50:f2:d7:4f:69:cd:73:cf:76:52:79:f7:2d:e9:30: 0f:e5:ed:ee:e9:d6:c4:f6:32:86:81:89:6a:a3:91: 2f:27:fb:80:48:b7:c1:ed:b1:9f:7f:5d:6c:62:c0: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:52:B6:7A:7A:8F:E3:3D:96:40:00:4D:9B:61:89:D4:80:AB:0D X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/amFStnp6j-M9lkAATZthidSAqw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.56.0/22 194.179.138.0/23 Signature Algorithm: sha256WithRSAEncryption 43:47:13:38:09:85:4c:44:3b:e6:60:33:bb:d5:e8:11:23:b4: 6e:fb:29:59:dc:99:a5:c3:cd:4a:2a:4b:cd:d0:2b:d6:07:75: 3b:ba:ce:49:3c:1f:76:d5:70:ca:89:cd:49:8b:37:e5:b5:bc: 40:e1:c0:47:24:cc:74:24:65:2e:df:cd:8e:2f:07:1d:25:7f: fa:94:27:f3:5c:9a:2d:e4:07:cc:b3:93:b9:f1:c5:8f:cc:b7: ab:6d:15:c8:7f:13:9f:f3:6d:21:ac:81:1f:78:44:31:d7:23: 04:69:15:8b:b8:b6:0f:04:a3:88:b0:50:b3:df:eb:a9:22:2c: ff:38:d4:1a:fa:32:14:5f:5f:d5:e9:d4:4a:2d:eb:35:f8:a1: 88:1b:84:e4:53:71:6f:f8:69:8a:79:ec:70:94:77:1f:49:ac: f8:22:cc:fa:33:5f:e1:14:6e:a6:bc:b2:e2:60:49:11:a2:0c: fc:f3:e1:6e:2c:1e:58:2c:db:27:50:aa:77:77:15:8a:c8:bf: ed:6f:04:15:77:c1:a0:21:d1:f3:50:53:f0:8b:3c:17:29:4f: 83:fa:a9:e2:e6:99:ea:91:f4:1a:ef:00:e3:91:65:c1:b6:f3: 37:af:24:71:db:d9:6c:e9:3d:cb:0b:39:00:2a:b9:1b:4b:eb: 4b:7a:ba:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZ1SAO2itq2mTL/JXp1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTYxNTJiNjdhN2E4ZmUzM2Q5NjQwMDA0ZDliNjE4OWQ0ODBhYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiy5UIDQGiYfNH+kIeghgCrDqSqw +Ried0A8faasuTA2na1mCzkdA2lbA63TUI/TiM/oGRT8EGvdFg9psgkDhSV6PJq2 5p74OE4kCt9JLlekcfKqttyXI00WCX91NJHFtMBpD3BsLPlnmSXB+hXi7SF8mO8+ 86fJAmS8dru5F5b89QxNHeFIj5DNUpNtA3d4Yn6KIRzg7HaCOr56WouPwFOmMuHV oqgwu1WQOT3ZAPpnFvIa9u8YlINjFhv/u7iQ1/WB15quUl5d8pPvZgHG9XtQ8tdP ac1zz3ZSefct6TAP5e3u6dbE9jKGgYlqo5EvJ/uASLfB7bGff11sYsAaEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGphUrZ6eo/jPZZAAE2bYYnUgKsNMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvYW1GU3RucDZqLU05bGtBQVRadGhpZFNBcXcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCueI4AwQB wrOKMA0GCSqGSIb3DQEBCwUAA4IBAQBDRxM4CYVMRDvmYDO71egRI7Ru+ylZ3Jml w81KKkvN0CvWB3U7us5JPB921XDKic1JizfltbxA4cBHJMx0JGUu382OLwcdJX/6 lCfzXJot5AfMs5O58cWPzLerbRXIfxOf820hrIEfeEQx1yMEaRWLuLYPBKOIsFCz 3+upIiz/ONQa+jIUX1/V6dRKLes1+KGIG4TkU3Fv+GmKeexwlHcfSaz4Isz6M1/h FG6mvLLiYEkRogz88+FuLB5YLNsnUKp3dxWKyL/tbwQVd8GgIdHzUFPwizwXKU+D +qni5pnqkfQa7wDjkWXBtvM3ryRx29ls6T3LCzkAKrkbS+tLerpN -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:35 2026 by rpki-client