This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4Amcw_pQnCgUTmmioG8dHpbahno.roa File: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (raw, json) Hash identifier: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE= Subject key identifier: E0:09:9C:C3:FA:50:9C:28:14:4E:69:A2:A0:6F:1D:1E:96:DA:86:7A Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA716B3F293658562100A59C095D168 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4Amcw_pQnCgUTmmioG8dHpbahno.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 80.78.132.0/24 maxlen: 24 2a0d:2146:2400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:16:b3:f2:93:65:85:62:10:0a:59:c0:95:d1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0099cc3fa509c28144e69a2a06f1d1e96da867a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:ed:13:81:6a:f6:1a:ff:6d:f3:9b:5b:3b: c6:83:c1:a2:be:f0:1c:2a:d2:2e:42:26:7f:7e:f7: 53:ac:dc:5b:c3:08:f7:33:f8:81:ef:24:da:fd:78: f5:c1:6a:3d:da:00:4f:48:1e:b4:39:96:2a:58:9f: b3:d6:37:fc:90:09:fc:f7:42:1b:66:44:c3:79:3b: 1d:a1:aa:9e:98:4f:e3:8a:36:eb:6a:d9:2c:de:a4: c8:ee:be:10:64:a6:23:12:b9:23:72:5c:1c:05:19: 4b:27:44:e5:0f:2f:39:cb:3e:70:02:fb:fb:ff:ad: 13:03:76:a5:d0:57:d1:00:23:7a:cb:c7:79:f5:01: 91:72:d1:45:e8:4b:2d:48:11:d4:45:4e:90:f4:fc: 87:02:fe:16:8d:d8:8e:1f:a5:5d:f7:92:21:d3:c9: 57:a9:51:f5:e3:63:38:1c:e8:2d:0b:9a:9c:65:08: ec:2b:8c:81:ae:e5:82:4e:e3:30:a5:01:5e:8b:8d: 54:31:09:f8:b2:6a:7d:e3:2c:d8:dd:99:c7:bf:7a: 28:ee:75:03:76:d2:50:35:d0:1e:5d:d0:bf:ba:f8: e3:3d:93:5c:b2:ad:e2:21:be:f2:8d:09:34:bc:5a: 62:fb:7f:22:79:da:a8:f5:e7:ea:8b:10:1b:63:49: 0d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:9C:C3:FA:50:9C:28:14:4E:69:A2:A0:6F:1D:1E:96:DA:86:7A X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4Amcw_pQnCgUTmmioG8dHpbahno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.78.132.0/24 IPv6: 2a0d:2146:2400::/44 Signature Algorithm: sha256WithRSAEncryption 09:95:0b:04:92:8a:99:85:f3:bc:00:c9:8c:83:b8:9d:3e:4e: 6f:70:a6:3f:33:4b:f6:10:91:9a:b6:28:98:73:67:b4:b1:ce: 34:d2:d4:d0:96:bc:b7:e4:32:1f:8a:bc:92:69:c8:35:78:ba: e6:6f:d1:42:42:6d:a8:d6:b4:f1:ca:86:91:e9:95:e1:45:fc: 9c:88:ec:9e:32:68:5e:75:f7:7f:19:bf:55:19:fe:c0:63:2c: ea:b5:c6:9b:1b:02:2c:7f:68:68:e9:13:ad:ba:54:59:66:ca: 0a:98:b5:de:87:bb:c3:72:f5:9b:cb:e5:24:62:0d:18:09:a3: bf:50:ad:e5:f7:27:59:e0:03:18:f6:de:f6:2c:fb:2b:75:22: 83:1b:f4:7a:d4:1f:57:ff:0f:c4:af:d9:e4:cd:90:f8:7f:65: be:c3:3f:99:2b:38:84:dc:88:69:45:3c:c3:f5:80:04:80:59: 3b:3d:0b:a3:3f:ec:a1:f6:b1:84:7e:bc:89:6f:7a:f3:68:9e: 54:00:07:f6:1b:91:e2:41:50:e2:68:16:8a:b3:93:28:ab:c5: 16:53:c8:69:5b:8b:a4:5d:ed:2b:fe:74:eb:f0:11:9f:9a:ba: ab:72:ac:43:14:6f:d3:3f:b2:1c:a0:59:87:eb:79:06:f4:76: 03:12:29:c0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pxaz8pNlhWIQClnAldFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDA5OWNjM2ZhNTA5YzI4MTQ0ZTY5YTJhMDZmMWQxZTk2ZGE4NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOntE4Fq9hr/bfObWzvGg8GivvAc KtIuQiZ/fvdTrNxbwwj3M/iB7yTa/Xj1wWo92gBPSB60OZYqWJ+z1jf8kAn890Ib ZkTDeTsdoaqemE/jijbratks3qTI7r4QZKYjErkjclwcBRlLJ0TlDy85yz5wAvv7 /60TA3al0FfRACN6y8d59QGRctFF6EstSBHURU6Q9PyHAv4WjdiOH6Vd95Ih08lX qVH142M4HOgtC5qcZQjsK4yBruWCTuMwpQFei41UMQn4smp94yzY3ZnHv3oo7nUD dtJQNdAeXdC/uvjjPZNcsq3iIb7yjQk0vFpi+38iedqo9efqixAbY0kNkQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOAJnMP6UJwoFE5poqBvHR6W2oZ6MB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvNEFtY3dfcFFuQ2dVVG1taW9HOGRIcGJhaG5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUE6EMA8E AgACMAkDBwQqDSFGJAAwDQYJKoZIhvcNAQELBQADggEBAAmVCwSSipmF87wAyYyD uJ0+Tm9wpj8zS/YQkZq2KJhzZ7SxzjTS1NCWvLfkMh+KvJJpyDV4uuZv0UJCbajW tPHKhpHpleFF/JyI7J4yaF51938Zv1UZ/sBjLOq1xpsbAix/aGjpE626VFlmygqY td6Hu8Ny9ZvL5SRiDRgJo79QreX3J1ngAxj23vYs+yt1IoMb9HrUH1f/D8Sv2eTN kPh/Zb7DP5krOITciGlFPMP1gASAWTs9C6M/7KH2sYR+vIlvevNonlQAB/YbkeJB UOJoFoqzkyirxRZTyGlbi6Rd7Sv+dOvwEZ+auqtyrEMUb9M/shygWYfreQb0dgMS KcA= -----END CERTIFICATE-----Generated at Mon Jan 19 17:46:52 2026 by rpki-client