This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/avmhdb_wzCiEf_bFZVLepM346tM.roa File: avmhdb_wzCiEf_bFZVLepM346tM.roa (raw, json) Hash identifier: Fd2kheVgg0mzBwUJ7cAsgm0+4NKEkBm1SzUz47egMuw= Subject key identifier: 6A:F9:A1:75:BF:F0:CC:28:84:7F:F6:C5:65:52:DE:A4:CD:F8:EA:D3 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B76EAEE17ED510D253712F4D7EB8C2C82 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/avmhdb_wzCiEf_bFZVLepM346tM.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205007 IP address blocks: 138.124.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ee:17:ed:51:0d:25:37:12:f4:d7:eb:8c:2c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af9a175bff0cc28847ff6c56552dea4cdf8ead3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:18:7c:55:b4:1e:f8:bf:20:65:8b:f4:cc: 0e:6d:94:17:90:4e:4f:84:d0:27:76:6e:55:7a:21: 32:8e:c6:e6:e5:d6:5a:5b:7d:fc:4b:89:9e:4e:26: cf:7a:d0:e5:53:e3:65:96:59:3a:88:20:4b:28:d0: 03:15:6d:6e:00:49:3b:35:df:9f:f8:5e:25:59:6f: 7f:98:56:27:33:c9:e6:2e:4a:a7:f4:d1:03:48:39: 18:5f:6a:d2:f2:c8:f5:94:23:99:e6:be:05:75:f0: 35:d0:84:62:df:0d:39:c2:93:6e:f7:58:05:7a:65: b8:fc:f9:e5:63:5c:fb:b2:62:7a:1f:bf:fe:9c:0e: b7:be:3e:b1:49:8b:06:75:ce:ba:39:ac:11:39:f6: fd:2d:72:5a:09:a2:aa:9b:bb:dc:f1:76:23:4a:ac: 3a:ae:37:2d:92:94:b8:66:51:6d:ca:13:23:c3:3f: 20:31:04:33:76:ff:24:eb:00:c1:e0:8b:ca:80:b1: eb:64:68:f0:22:83:17:01:61:12:08:fc:cd:55:3f: e1:dc:8e:71:24:5b:e5:db:66:a8:a9:b6:82:74:a3: 25:90:de:19:48:0d:e3:2b:d2:76:cd:5f:38:d6:c4: c6:15:73:f9:9c:de:b3:a9:12:c4:f1:c2:b0:ac:85: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F9:A1:75:BF:F0:CC:28:84:7F:F6:C5:65:52:DE:A4:CD:F8:EA:D3 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/avmhdb_wzCiEf_bFZVLepM346tM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.126.0/24 Signature Algorithm: sha256WithRSAEncryption 89:2d:ca:48:00:4f:62:7c:48:d1:87:8a:35:7f:f0:69:0c:20: 75:d0:d1:f8:f6:b7:f7:02:da:d2:70:70:78:b0:83:8c:e2:0b: ff:03:4c:8c:91:ff:4e:b7:a0:e5:db:f1:c8:06:2d:06:58:94: 0c:56:43:f4:5d:4d:f2:de:5e:03:56:0f:83:01:4d:fc:a4:83: 10:71:6d:8d:3c:6e:bf:9b:03:66:83:64:a9:6b:f2:70:bc:67: 1a:a3:a4:18:2f:7b:00:b8:2f:e6:5c:3a:43:e3:75:56:26:6a: 3f:25:69:3e:2d:e9:93:a9:e9:e1:69:bc:93:77:b1:2c:09:4d: 05:3b:36:44:fb:0e:dc:e7:e3:ed:36:94:19:28:d1:4b:9b:24: 46:0b:05:44:f2:a5:f6:18:a4:81:e7:00:73:cc:f4:3a:eb:94: f7:60:60:18:ce:cf:e5:02:3e:42:9c:b3:43:65:c2:6b:a2:c8: 3f:72:f2:ca:d6:94:7e:ae:1a:1b:e1:c3:5e:ef:ee:f2:ca:40: 6b:65:9a:93:91:a4:0e:1a:2b:79:86:dc:c6:24:4c:81:5e:5c: c2:37:1e:29:f2:03:3d:ed:d1:30:a6:d9:49:87:03:bd:8c:9d: 4b:09:a2:ad:bf:fb:c5:fb:dd:77:6d:80:e0:3f:06:1d:55:6e: 26:28:c6:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26u4X7VENJTcS9NfrjCyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWY5YTE3NWJmZjBjYzI4ODQ3ZmY2YzU2NTUyZGVhNGNkZjhlYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulUYfFW0Hvi/IGWL9MwObZQXkE5P hNAndm5VeiEyjsbm5dZaW338S4meTibPetDlU+Nlllk6iCBLKNADFW1uAEk7Nd+f +F4lWW9/mFYnM8nmLkqn9NEDSDkYX2rS8sj1lCOZ5r4FdfA10IRi3w05wpNu91gF emW4/PnlY1z7smJ6H7/+nA63vj6xSYsGdc66OawROfb9LXJaCaKqm7vc8XYjSqw6 rjctkpS4ZlFtyhMjwz8gMQQzdv8k6wDB4IvKgLHrZGjwIoMXAWESCPzNVT/h3I5x JFvl22aoqbaCdKMlkN4ZSA3jK9J2zV841sTGFXP5nN6zqRLE8cKwrIU1BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGr5oXW/8MwohH/2xWVS3qTN+OrTMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvYXZtaGRiX3d6Q2lFZl9iRlpWTGVwTTM0NnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinx+MA0G CSqGSIb3DQEBCwUAA4IBAQCJLcpIAE9ifEjRh4o1f/BpDCB10NH49rf3AtrScHB4 sIOM4gv/A0yMkf9Ot6Dl2/HIBi0GWJQMVkP0XU3y3l4DVg+DAU38pIMQcW2NPG6/ mwNmg2Spa/JwvGcao6QYL3sAuC/mXDpD43VWJmo/JWk+LemTqenhabyTd7EsCU0F OzZE+w7c5+PtNpQZKNFLmyRGCwVE8qX2GKSB5wBzzPQ665T3YGAYzs/lAj5CnLND ZcJrosg/cvLK1pR+rhob4cNe7+7yykBrZZqTkaQOGit5htzGJEyBXlzCNx4p8gM9 7dEwptlJhwO9jJ1LCaKtv/vF+913bYDgPwYdVW4mKMZb -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:27 2026 by rpki-client