This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/APmBkMX_pMK441bf-2MyEEsSpyE.roa File: APmBkMX_pMK441bf-2MyEEsSpyE.roa (raw, json) Hash identifier: FGwt+lOQmOUxEfL46WXI10p4KLHDPKDq+pMd+aTF8wE= Subject key identifier: 00:F9:81:90:C5:FF:A4:C2:B8:E3:56:DF:FB:63:32:10:4B:12:A7:21 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B997F4A235B6586481BBD4CFBE0C16A29 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/APmBkMX_pMK441bf-2MyEEsSpyE.roa Signing time: Wed 07 Jan 2026 17:26:54 +0000 ROA not before: Wed 07 Jan 2026 17:26:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 2.57.242.0/24 maxlen: 24 45.88.15.0/24 maxlen: 24 45.135.182.0/24 maxlen: 24 77.81.101.0/24 maxlen: 24 79.110.227.0/24 maxlen: 24 85.204.18.0/24 maxlen: 24 89.35.119.0/24 maxlen: 24 89.35.129.0/24 maxlen: 24 89.37.185.0/24 maxlen: 24 89.39.120.0/24 maxlen: 24 89.40.70.0/24 maxlen: 24 89.125.0.0/24 maxlen: 24 89.125.1.0/24 maxlen: 24 89.125.2.0/24 maxlen: 24 89.125.3.0/24 maxlen: 24 89.125.53.0/24 maxlen: 24 89.125.60.0/24 maxlen: 24 89.125.63.0/24 maxlen: 24 89.125.92.0/24 maxlen: 24 89.125.95.0/24 maxlen: 24 89.125.98.0/24 maxlen: 24 89.125.122.0/24 maxlen: 24 89.125.123.0/24 maxlen: 24 89.125.131.0/24 maxlen: 24 89.125.152.0/24 maxlen: 24 89.125.159.0/24 maxlen: 24 89.125.181.0/24 maxlen: 24 89.125.210.0/24 maxlen: 24 94.177.13.0/24 maxlen: 24 94.177.106.0/24 maxlen: 24 94.177.145.0/24 maxlen: 24 103.56.84.0/24 maxlen: 24 103.73.35.0/24 maxlen: 24 167.17.40.0/24 maxlen: 24 167.17.176.0/24 maxlen: 24 167.17.177.0/24 maxlen: 24 167.17.178.0/24 maxlen: 24 167.17.180.0/24 maxlen: 24 167.17.182.0/24 maxlen: 24 167.17.191.0/24 maxlen: 24 185.212.119.0/24 maxlen: 24 188.208.103.0/24 maxlen: 24 188.213.0.0/24 maxlen: 24 188.214.107.0/24 maxlen: 24 193.124.36.0/24 maxlen: 24 193.124.225.0/24 maxlen: 24 194.85.249.0/24 maxlen: 24 194.85.251.0/24 maxlen: 24 202.71.12.0/24 maxlen: 24 202.71.13.0/24 maxlen: 24 202.71.15.0/24 maxlen: 24 204.77.1.0/24 maxlen: 24 206.245.129.0/24 maxlen: 24 206.245.131.0/24 maxlen: 24 206.245.133.0/24 maxlen: 24 206.245.134.0/24 maxlen: 24 206.245.135.0/24 maxlen: 24 206.245.157.0/24 maxlen: 24 206.245.159.0/24 maxlen: 24 208.123.185.0/24 maxlen: 24 208.123.190.0/24 maxlen: 24 208.123.191.0/24 maxlen: 24 212.192.8.0/24 maxlen: 24 212.192.11.0/24 maxlen: 24 212.192.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:7f:4a:23:5b:65:86:48:1b:bd:4c:fb:e0:c1:6a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 7 17:26:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00f98190c5ffa4c2b8e356dffb6332104b12a721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:3c:c2:9a:78:31:e1:2b:60:d0:7d:2d:c3: 82:f9:37:91:b6:f7:34:87:d3:a4:f5:32:66:02:47: 1c:32:d2:b3:1d:e4:e1:f4:af:bd:b5:25:7e:e3:01: 5b:57:c6:26:be:e6:5a:10:62:af:48:a5:eb:fb:9f: 13:b9:c3:83:9d:05:be:53:8b:19:18:57:38:81:03: f5:f2:7a:af:84:1b:01:cb:bc:42:af:1f:f3:1c:10: de:c7:35:8b:bf:08:44:0a:2c:55:15:22:57:a6:db: 52:ba:dd:89:fd:8b:08:04:73:71:4b:b7:a2:6f:a6: 9c:36:e9:5d:76:aa:73:5e:40:e4:76:2f:35:05:90: 27:89:45:e4:b8:32:21:03:f5:35:b0:a4:4a:ff:5c: 36:50:f8:37:81:bf:df:f2:9f:40:57:6a:d7:42:84: 2d:36:2e:a5:c0:90:98:ed:b2:c0:f8:0d:66:e2:db: 1e:a8:87:20:a5:8d:ee:10:6b:e2:f9:7e:14:81:ca: e9:8c:b0:66:a3:da:9a:1f:02:b3:a8:2a:58:21:78: 0b:5d:e6:27:ac:5a:42:c2:24:53:b0:18:2d:f6:b2: 02:b9:ad:ed:58:bd:1e:a6:b1:67:fa:78:37:28:ae: 68:70:bb:90:ce:e7:76:bd:a9:f6:25:6b:c0:ec:80: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F9:81:90:C5:FF:A4:C2:B8:E3:56:DF:FB:63:32:10:4B:12:A7:21 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/APmBkMX_pMK441bf-2MyEEsSpyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.242.0/24 45.88.15.0/24 45.135.182.0/24 77.81.101.0/24 79.110.227.0/24 85.204.18.0/24 89.35.119.0/24 89.35.129.0/24 89.37.185.0/24 89.39.120.0/24 89.40.70.0/24 89.125.0.0/22 89.125.53.0/24 89.125.60.0/24 89.125.63.0/24 89.125.92.0/24 89.125.95.0/24 89.125.98.0/24 89.125.122.0/23 89.125.131.0/24 89.125.152.0/24 89.125.159.0/24 89.125.181.0/24 89.125.210.0/24 94.177.13.0/24 94.177.106.0/24 94.177.145.0/24 103.56.84.0/24 103.73.35.0/24 167.17.40.0/24 167.17.176.0-167.17.178.255 167.17.180.0/24 167.17.182.0/24 167.17.191.0/24 185.212.119.0/24 188.208.103.0/24 188.213.0.0/24 188.214.107.0/24 193.124.36.0/24 193.124.225.0/24 194.85.249.0/24 194.85.251.0/24 202.71.12.0/23 202.71.15.0/24 204.77.1.0/24 206.245.129.0/24 206.245.131.0/24 206.245.133.0-206.245.135.255 206.245.157.0/24 206.245.159.0/24 208.123.185.0/24 208.123.190.0/23 212.192.8.0/24 212.192.11.0/24 212.192.212.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:55:8b:f0:8f:53:32:95:a0:56:ac:99:ba:83:16:fc:b3:82: 3b:49:1f:a5:7f:0a:92:5d:62:67:a1:fb:34:f0:86:8e:e0:15: 73:e4:f2:36:12:ed:3d:2d:20:2a:68:b7:c3:f5:16:8a:96:ae: cc:73:f5:68:4c:e2:a8:68:6b:b1:6c:06:69:ba:85:73:14:84: ee:f4:2f:03:0c:87:50:c6:ff:8c:76:61:4c:62:d3:12:df:c8: 84:42:68:0c:09:61:30:79:57:7d:f0:ab:e3:a5:8b:86:13:5f: 14:7b:f8:05:a5:8b:ef:fb:ad:c7:48:00:88:ed:03:f6:ad:f3: 9b:32:d7:03:18:6c:a6:a3:ad:9a:f3:2b:2c:d6:27:a6:42:4b: 50:e0:9f:15:30:ab:ac:bb:73:04:d9:d5:c4:60:da:48:39:5e: 26:81:32:46:e1:4c:05:72:59:2e:6d:b4:f8:f6:d7:ef:da:e0: 9f:96:33:b1:b1:9f:af:7e:a2:5c:11:c8:d8:d7:a7:05:67:b0: d6:62:22:d2:09:66:64:d8:79:86:c2:c7:08:46:69:1b:73:d6: ff:81:ed:ee:17:72:52:23:88:cb:49:cb:3b:8b:36:2b:b5:e5: 50:1c:df:8b:4c:8c:34:29:52:78:20:09:7d:05:76:9a:2d:a3: f4:fd:c0:26 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISAZuZf0ojW2WGSBu9TPvgwWopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTA3MTcyNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGY5ODE5MGM1ZmZhNGMyYjhlMzU2ZGZmYjYzMzIxMDRiMTJhNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG48wpp4MeErYNB9LcOC+TeRtvc0 h9Ok9TJmAkccMtKzHeTh9K+9tSV+4wFbV8YmvuZaEGKvSKXr+58TucODnQW+U4sZ GFc4gQP18nqvhBsBy7xCrx/zHBDexzWLvwhECixVFSJXpttSut2J/YsIBHNxS7ei b6acNulddqpzXkDkdi81BZAniUXkuDIhA/U1sKRK/1w2UPg3gb/f8p9AV2rXQoQt Ni6lwJCY7bLA+A1m4tseqIcgpY3uEGvi+X4UgcrpjLBmo9qaHwKzqCpYIXgLXeYn rFpCwiRTsBgt9rICua3tWL0eprFn+ng3KK5ocLuQzud2van2JWvA7IApEQIDAQAB o4IDZzCCA2MwHQYDVR0OBBYEFAD5gZDF/6TCuONW3/tjMhBLEqchMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvQVBtQmtNWF9wTUs0NDFiZi0yTXlFRXNTcHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBewYIKwYBBQUHAQcBAf8EggFqMIIBZjCCAWIEAgABMIIB WgMEAAI58gMEAC1YDwMEAC2HtgMEAE1RZQMEAE9u4wMEAFXMEgMEAFkjdwMEAFkj gQMEAFkluQMEAFkneAMEAFkoRgMEAll9AAMEAFl9NQMEAFl9PAMEAFl9PwMEAFl9 XAMEAFl9XwMEAFl9YgMEAVl9egMEAFl9gwMEAFl9mAMEAFl9nwMEAFl9tQMEAFl9 0gMEAF6xDQMEAF6xagMEAF6xkQMEAGc4VAMEAGdJIwMEAKcRKDAMAwQEpxGwAwQA pxGyAwQApxG0AwQApxG2AwQApxG/AwQAudR3AwQAvNBnAwQAvNUAAwQAvNZrAwQA wXwkAwQAwXzhAwQAwlX5AwQAwlX7AwQBykcMAwQAykcPAwQAzE0BAwQAzvWBAwQA zvWDMAwDBADO9YUDBAPO9YADBADO9Z0DBADO9Z8DBADQe7kDBAHQe74DBADUwAgD BADUwAsDBADUwNQwDQYJKoZIhvcNAQELBQADggEBAA9Vi/CPUzKVoFasmbqDFvyz gjtJH6V/CpJdYmeh+zTwho7gFXPk8jYS7T0tICpot8P1FoqWrsxz9WhM4qhoa7Fs Bmm6hXMUhO70LwMMh1DG/4x2YUxi0xLfyIRCaAwJYTB5V33wq+Oli4YTXxR7+AWl i+/7rcdIAIjtA/at85sy1wMYbKajrZrzKyzWJ6ZCS1DgnxUwq6y7cwTZ1cRg2kg5 XiaBMkbhTAVyWS5ttPj21+/a4J+WM7Gxn69+olwRyNjXpwVnsNZiItIJZmTYeYbC xwhGaRtz1v+B7e4XclIjiMtJyzuLNiu15VAc34tMjDQpUnggCX0Fdpoto/T9wCY= -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:26 2026 by rpki-client