This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/amJeDHvWP-ETK0yoiLHExz0KUe8.roa
File: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (raw, json)
Hash identifier: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=
Subject key identifier: 6A:62:5E:0C:7B:D6:3F:E1:13:2B:4C:A8:88:B1:C4:C7:3D:0A:51:EF
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 019B7C12DAF5E9BF3C5B39B811F8308050E1
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/amJeDHvWP-ETK0yoiLHExz0KUe8.roa
Signing time: Fri 02 Jan 2026 00:19:29 +0000
ROA not before: Fri 02 Jan 2026 00:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57325
IP address blocks: 185.239.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:da:f5:e9:bf:3c:5b:39:b8:11:f8:30:80:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Jan 2 00:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a625e0c7bd63fe1132b4ca888b1c4c73d0a51ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:01:79:ad:61:b2:6b:92:e2:9e:f5:e3:4f:
2c:89:ff:ec:6a:db:a8:93:fc:c5:c1:f5:af:b7:08:
27:92:3a:6f:f5:3f:31:db:2e:00:fd:b7:5b:32:65:
ee:12:24:7a:f2:d1:63:12:e6:f9:20:e6:b2:fb:74:
8c:b5:a7:a2:6f:da:7f:40:ae:36:7e:50:38:78:33:
04:3e:74:1a:ed:c4:71:e4:66:df:0e:f4:92:23:25:
5f:8f:92:a7:ee:c9:b8:e4:91:45:ae:6c:f9:d1:6e:
40:d3:61:ab:db:5f:7c:4a:75:76:ca:6d:4e:20:d5:
4d:7b:27:0c:da:97:5c:a1:53:6c:53:9e:fc:fc:9f:
19:37:e8:d4:56:a4:78:03:00:23:48:5a:39:08:d6:
30:8e:95:a8:00:d2:e6:3f:d4:dd:26:88:05:db:5d:
b0:8d:4a:ae:4c:a9:09:fe:7c:80:fe:2b:55:36:86:
80:bc:42:9e:1b:27:ee:9d:d4:55:83:2e:68:83:9e:
3e:43:75:40:d1:ad:57:f7:4e:8f:14:9a:e3:8c:42:
17:2b:7a:91:ba:0e:44:e9:9b:16:b4:72:7c:8f:97:
11:8d:da:db:dc:31:e5:e4:74:a8:2e:b9:96:05:ab:
f8:0f:66:9a:2b:bf:7a:ca:97:2a:e4:ed:32:6b:14:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:62:5E:0C:7B:D6:3F:E1:13:2B:4C:A8:88:B1:C4:C7:3D:0A:51:EF
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/amJeDHvWP-ETK0yoiLHExz0KUe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
25:df:a1:7a:08:7f:74:16:a3:c4:fe:40:99:0d:cd:57:f0:35:
63:72:4f:d9:f2:a3:3b:d7:80:16:a9:65:8d:82:bc:05:2c:e8:
86:2a:23:41:1c:75:66:bd:f2:17:35:15:2d:8b:a7:db:28:b3:
8e:8e:e4:22:2b:c9:e9:4a:da:c5:fc:1c:41:95:52:b7:89:1b:
9a:05:73:2d:30:df:59:cf:fa:b9:50:53:83:80:e5:ca:93:49:
d6:b2:9a:2d:30:9a:12:6b:e4:0b:32:ca:eb:e8:40:09:f3:32:
04:ac:da:f5:16:6a:a2:bc:c5:1f:79:90:0a:07:df:c7:37:32:
69:c8:6e:67:f1:8b:11:07:86:3e:bd:32:8a:01:a0:d3:14:a4:
23:1a:63:a7:41:7b:b0:9b:47:39:7b:60:68:06:59:c5:c5:5c:
5b:e2:9b:25:89:81:b2:09:fb:82:f8:3e:4d:f2:33:60:00:45:
a1:f5:61:0b:e7:87:72:9c:c3:c8:74:fd:1b:35:ee:5d:aa:8d:
b4:62:83:54:58:6d:47:ec:fd:f6:9c:9a:cd:b0:cc:cf:cd:f5:
eb:1b:23:06:bf:90:12:13:52:c6:d2:42:67:f6:22:4a:ed:f0:
71:82:8e:57:df:62:41:47:22:ca:df:18:19:b1:87:c0:66:30:
96:70:f5:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Etr16b88Wzm4EfgwgFDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDA4OWE3MTQ4YjI2MWEwNTllNjY2ZmViYTU5ZjkyYTI2
OGMxNmMwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTYyNWUwYzdiZDYzZmUxMTMyYjRjYTg4OGIxYzRjNzNkMGE1MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lABea1hsmuS4p71408sif/satuo
k/zFwfWvtwgnkjpv9T8x2y4A/bdbMmXuEiR68tFjEub5IOay+3SMtaeib9p/QK42
flA4eDMEPnQa7cRx5GbfDvSSIyVfj5Kn7sm45JFFrmz50W5A02Gr2198SnV2ym1O
INVNeycM2pdcoVNsU578/J8ZN+jUVqR4AwAjSFo5CNYwjpWoANLmP9TdJogF212w
jUquTKkJ/nyA/itVNoaAvEKeGyfundRVgy5og54+Q3VA0a1X906PFJrjjEIXK3qR
ug5E6ZsWtHJ8j5cRjdrb3DHl5HSoLrmWBav4D2aaK796ypcq5O0yaxShnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGpiXgx71j/hEytMqIixxMc9ClHvMB8GA1UdIwQY
MBaAFAXQiacUiyYaBZ5mb+uln5KiaMFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEt
MWVhYTNmMjJkZjUyLzEvYW1KZURIdldQLUVUSzB5b2lMSEV4ejBLVWU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEtMWVhYTNmMjJkZjUy
LzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue88MA0G
CSqGSIb3DQEBCwUAA4IBAQAl36F6CH90FqPE/kCZDc1X8DVjck/Z8qM714AWqWWN
grwFLOiGKiNBHHVmvfIXNRUti6fbKLOOjuQiK8npStrF/BxBlVK3iRuaBXMtMN9Z
z/q5UFODgOXKk0nWspotMJoSa+QLMsrr6EAJ8zIErNr1FmqivMUfeZAKB9/HNzJp
yG5n8YsRB4Y+vTKKAaDTFKQjGmOnQXuwm0c5e2BoBlnFxVxb4psliYGyCfuC+D5N
8jNgAEWh9WEL54dynMPIdP0bNe5dqo20YoNUWG1H7P32nJrNsMzPzfXrGyMGv5AS
E1LG0kJn9iJK7fBxgo5X32JBRyLK3xgZsYfAZjCWcPXy
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:22 2026 by rpki-client