This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AMG7o2rtQCUwpgZToZOufI5eAnM.roa File: AMG7o2rtQCUwpgZToZOufI5eAnM.roa (raw, json) Hash identifier: enCSE+g1YO3CJ3cZd2KjubDihVGeBdvj7YuA2AVEe0k= Subject key identifier: 00:C1:BB:A3:6A:ED:40:25:30:A6:06:53:A1:93:AE:7C:8E:5E:02:73 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A468FE9C5A11D4B8EBE275027238 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AMG7o2rtQCUwpgZToZOufI5eAnM.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43234 IP address blocks: 146.120.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a4:68:fe:9c:5a:11:d4:b8:eb:e2:75:02:72:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00c1bba36aed402530a60653a193ae7c8e5e0273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:74:15:17:7d:f7:14:05:2f:22:c4:20:28: a7:d7:82:28:c1:b9:18:1a:4f:3d:5f:f9:bf:ba:b7: 51:8d:39:fb:d6:89:c3:5e:18:33:09:49:bb:13:94: 75:05:73:b1:81:a5:00:83:b8:0d:84:e0:e7:93:d5: cb:4b:fa:e7:74:8c:be:a3:2b:a2:83:75:eb:d3:25: e2:04:3b:ff:21:21:01:3f:d8:8c:8c:9a:48:98:50: f2:c2:cd:81:72:a7:a4:ee:39:a8:48:32:4f:12:ee: 0c:51:8b:49:10:56:04:a0:6f:97:d7:05:b4:98:fd: 4d:39:6d:00:76:d2:fc:0b:32:0b:d7:c7:27:50:6d: a1:38:d3:1e:4f:97:45:9b:54:7b:9f:75:12:4b:70: 0f:33:81:5b:b1:de:38:11:21:90:0c:b7:c4:b8:62: 2e:d0:29:5c:46:b3:26:b1:19:68:d2:aa:41:08:b0: 65:4b:96:8c:b5:e8:74:45:ae:93:fd:1a:b3:1e:a7: 1d:7c:f2:ac:c2:8b:c1:45:78:9e:10:81:c4:3f:8a: e0:06:06:b7:70:80:36:c0:17:59:6f:f9:2f:3d:5f: 79:98:dd:37:a5:a0:99:38:b9:ae:be:62:2a:a3:0a: 3e:ec:57:82:cc:f8:5c:12:a2:e3:7e:73:bd:6c:00: ea:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:BB:A3:6A:ED:40:25:30:A6:06:53:A1:93:AE:7C:8E:5E:02:73 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AMG7o2rtQCUwpgZToZOufI5eAnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.113.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:77:16:d7:2a:e4:7a:b6:d9:19:a8:78:f3:73:73:42:b3:6d: c9:9d:06:97:7a:01:13:99:f2:84:36:5b:ab:34:51:cd:84:d3: ca:ef:49:d5:e3:89:0a:85:83:cf:0f:27:8c:93:3d:9d:99:c0: 48:a5:33:d2:ad:ef:9f:6b:74:be:4d:f9:30:8f:5a:fa:f9:41: 3e:cd:2b:df:09:7d:a4:f2:f0:1d:4c:54:2c:60:bb:58:ee:af: de:ec:f5:7f:bd:a8:0c:52:b1:00:89:84:47:00:8f:64:bc:13: 9b:b8:ef:dc:cd:3d:a2:b9:5b:f2:62:92:ac:08:13:b2:0b:1e: 84:e3:dd:96:f9:31:30:f5:c0:f5:98:63:6f:a0:eb:0f:d0:4d: 38:86:32:93:19:7e:f1:4a:c2:d1:75:6d:a7:9a:f1:65:76:de: 6c:59:e2:d2:4d:bb:b5:d7:be:27:80:4f:62:bb:42:7e:c9:3b: 61:a8:e3:4b:e6:84:4a:01:6f:7b:71:0e:9b:a6:aa:8d:d2:1a: 87:2c:1e:43:54:dd:1b:31:06:99:c9:2b:d3:10:58:9e:b8:b1: b3:01:74:a2:11:2a:24:e0:5a:23:94:ad:ed:b5:f3:f4:c3:82: 68:e9:43:4c:ee:4a:7f:19:23:ab:0a:52:95:11:b8:68:64:1e: c6:81:7a:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKRo/pxaEdS46+J1AnI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGMxYmJhMzZhZWQ0MDI1MzBhNjA2NTNhMTkzYWU3YzhlNWUwMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZN0FRd99xQFLyLEICin14IowbkY Gk89X/m/urdRjTn71onDXhgzCUm7E5R1BXOxgaUAg7gNhODnk9XLS/rndIy+oyui g3Xr0yXiBDv/ISEBP9iMjJpImFDyws2Bcqek7jmoSDJPEu4MUYtJEFYEoG+X1wW0 mP1NOW0AdtL8CzIL18cnUG2hONMeT5dFm1R7n3USS3APM4Fbsd44ESGQDLfEuGIu 0ClcRrMmsRlo0qpBCLBlS5aMteh0Ra6T/RqzHqcdfPKswovBRXieEIHEP4rgBga3 cIA2wBdZb/kvPV95mN03paCZOLmuvmIqowo+7FeCzPhcEqLjfnO9bADqTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADBu6Nq7UAlMKYGU6GTrnyOXgJzMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvQU1HN28ycnRRQ1V3cGdaVG9aT3VmSTVlQW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknhxMA0G CSqGSIb3DQEBCwUAA4IBAQA7dxbXKuR6ttkZqHjzc3NCs23JnQaXegETmfKENlur NFHNhNPK70nV44kKhYPPDyeMkz2dmcBIpTPSre+fa3S+Tfkwj1r6+UE+zSvfCX2k 8vAdTFQsYLtY7q/e7PV/vagMUrEAiYRHAI9kvBObuO/czT2iuVvyYpKsCBOyCx6E 492W+TEw9cD1mGNvoOsP0E04hjKTGX7xSsLRdW2nmvFldt5sWeLSTbu1174ngE9i u0J+yTthqONL5oRKAW97cQ6bpqqN0hqHLB5DVN0bMQaZySvTEFieuLGzAXSiESok 4FojlK3ttfP0w4Jo6UNM7kp/GSOrClKVEbhoZB7GgXqm -----END CERTIFICATE-----Generated at Mon Jan 26 09:40:42 2026 by rpki-client