This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/amzi7HtQV9_v7w8hHHWKukbKI-U.roa File: amzi7HtQV9_v7w8hHHWKukbKI-U.roa (raw, json) Hash identifier: cjyKi8MyZ6FA0LhuL8RVz7jOZxAcNj3RS515aaG3koA= Subject key identifier: 6A:6C:E2:EC:7B:50:57:DF:EF:EF:0F:21:1C:75:8A:BA:46:CA:23:E5 Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019B77C7454A378D228CE1D021B7B5FD1AAC Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/amzi7HtQV9_v7w8hHHWKukbKI-U.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34240 IP address blocks: 2.59.84.0/22 maxlen: 22 89.238.64.0/18 maxlen: 18 89.238.80.0/24 maxlen: 24 89.238.85.0/24 maxlen: 24 217.11.48.0/20 maxlen: 20 2a00:1828::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:45:4a:37:8d:22:8c:e1:d0:21:b7:b5:fd:1a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a6ce2ec7b5057dfefef0f211c758aba46ca23e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:2c:05:64:91:ad:e4:20:13:ae:a1:d0:07: 91:df:90:72:12:50:21:c9:8a:6a:65:9f:93:ed:13: 80:90:9a:36:ad:25:f9:8c:17:40:10:71:dc:71:f1: 8d:e6:3e:34:06:ee:db:0f:de:0b:c1:4a:11:cc:54: ab:24:e5:3c:60:b9:f4:c5:fe:ce:f3:82:f4:59:88: 54:dd:5e:23:76:47:68:38:09:c1:03:e6:65:64:78: 6f:a2:89:1d:02:db:51:63:10:ed:ae:18:68:0f:c1: 0d:26:96:5f:21:87:80:66:51:8b:97:33:56:88:3b: 40:64:4b:2f:95:4b:f9:d2:1b:cc:9c:9c:ed:bb:37: 9a:f5:52:63:23:ac:0c:99:e9:c8:c3:b1:1d:e3:e9: 8d:99:ae:ce:52:64:1e:87:a1:f1:cd:36:f7:09:54: 88:84:25:b2:79:de:3c:ca:c1:88:a1:3a:9f:d6:5f: 88:12:7e:e2:44:7c:0d:95:2b:62:6b:8e:6a:93:e8: f3:79:1d:db:56:30:05:f6:3e:d3:7b:e6:79:43:ce: d7:0f:5b:d6:fe:b0:d3:54:fa:66:93:42:5f:c1:7a: c6:fd:72:82:62:f0:e5:36:df:38:ef:34:df:cf:8c: 52:9d:9e:b6:e4:11:60:bc:f4:9e:b2:b2:ce:4f:c7: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6C:E2:EC:7B:50:57:DF:EF:EF:0F:21:1C:75:8A:BA:46:CA:23:E5 X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/amzi7HtQV9_v7w8hHHWKukbKI-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.84.0/22 89.238.64.0/18 217.11.48.0/20 IPv6: 2a00:1828::/32 Signature Algorithm: sha256WithRSAEncryption 6e:16:90:51:8d:f2:79:9c:70:cb:23:61:94:36:fa:de:e0:1d: 6d:f0:e7:bf:b8:e5:4c:45:14:11:50:7d:5b:d0:2e:56:2f:f2: 09:b5:63:cc:66:08:5b:33:96:c2:3f:56:1b:de:6e:7d:ee:d7: 41:96:0b:9e:ac:8b:ce:a4:50:cb:b6:4e:ff:68:66:3f:e3:e9: 04:8e:a7:60:65:c9:60:f2:6b:2c:3b:10:07:4a:f8:95:46:e9: 0e:70:c2:40:7c:da:e3:11:e4:7b:5a:97:88:35:0f:42:9d:76: b0:d1:9e:d6:a4:b3:d8:5c:e6:4d:f3:44:16:15:09:aa:32:0e: 13:53:92:a3:a0:94:4e:a2:21:e4:69:87:0d:21:61:b6:43:44: b9:c0:31:81:f7:7c:68:15:c0:b7:e7:04:35:0c:3e:a9:0e:28: e8:c9:d2:3a:f6:36:16:61:ac:1d:29:7f:5c:10:cc:78:2a:db: 0f:73:b0:2e:2b:a7:e2:19:76:63:86:58:28:29:dc:b8:9d:f2: b9:b2:c7:be:72:97:92:7c:6e:b1:c2:fb:71:a7:2a:b6:19:34: d5:b7:42:7c:be:9a:af:be:a4:d8:85:63:7d:cf:b6:9f:c9:d7: f6:19:94:aa:49:39:11:0c:29:bf:f6:59:02:7a:4e:35:00:5c: e9:d7:7d:54 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3x0VKN40ijOHQIbe1/RqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTZjZTJlYzdiNTA1N2RmZWZlZjBmMjExYzc1OGFiYTQ2Y2EyM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ0sBWSRreQgE66h0AeR35ByElAh yYpqZZ+T7ROAkJo2rSX5jBdAEHHccfGN5j40Bu7bD94LwUoRzFSrJOU8YLn0xf7O 84L0WYhU3V4jdkdoOAnBA+ZlZHhvookdAttRYxDtrhhoD8ENJpZfIYeAZlGLlzNW iDtAZEsvlUv50hvMnJztuzea9VJjI6wMmenIw7Ed4+mNma7OUmQeh6HxzTb3CVSI hCWyed48ysGIoTqf1l+IEn7iRHwNlStia45qk+jzeR3bVjAF9j7Te+Z5Q87XD1vW /rDTVPpmk0JfwXrG/XKCYvDlNt847zTfz4xSnZ625BFgvPSesrLOT8fXIwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGps4ux7UFff7+8PIRx1irpGyiPlMB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvYW16aTdIdFFWOV92N3c4aEhIV0t1a2JLSS1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCAjtUAwQG We5AAwQE2QswMA0EAgACMAcDBQAqABgoMA0GCSqGSIb3DQEBCwUAA4IBAQBuFpBR jfJ5nHDLI2GUNvre4B1t8Oe/uOVMRRQRUH1b0C5WL/IJtWPMZghbM5bCP1Yb3m59 7tdBlguerIvOpFDLtk7/aGY/4+kEjqdgZclg8mssOxAHSviVRukOcMJAfNrjEeR7 WpeINQ9CnXaw0Z7WpLPYXOZN80QWFQmqMg4TU5KjoJROoiHkaYcNIWG2Q0S5wDGB 93xoFcC35wQ1DD6pDijoydI69jYWYawdKX9cEMx4KtsPc7AuK6fiGXZjhlgoKdy4 nfK5sse+cpeSfG6xwvtxpyq2GTTVt0J8vpqvvqTYhWN9z7afydf2GZSqSTkRDCm/ 9lkCek41AFzp131U -----END CERTIFICATE-----Generated at Mon Jan 19 20:15:49 2026 by rpki-client