This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa File: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (raw, json) Hash identifier: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k= Subject key identifier: 68:C9:F3:23:75:65:C7:55:64:8C:AF:80:86:D3:23:7B:CA:C4:52:B0 Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Certificate serial: 019B7D5AECC6A839C3446B846733CC839069 Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa Signing time: Fri 02 Jan 2026 06:17:49 +0000 ROA not before: Fri 02 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19750 IP address blocks: 91.199.242.0/24 maxlen: 24 91.212.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ec:c6:a8:39:c3:44:6b:84:67:33:cc:83:90:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68c9f3237565c755648caf8086d3237bcac452b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:9d:c9:3c:04:53:af:69:aa:21:a4:0a:83: ef:64:99:72:05:29:77:ff:87:a6:5b:20:77:b2:6b: aa:2d:95:73:2f:2b:99:b1:3c:2a:fa:0c:44:7d:b9: 57:0e:c9:c3:93:12:36:56:c6:d5:95:b6:a0:a4:a8: 22:9a:39:b2:af:d6:62:7e:32:69:af:73:43:b3:03: c3:eb:19:c8:c5:de:f8:ba:67:b6:50:03:15:8f:21: e5:a8:ec:54:06:cd:93:7d:61:1d:96:b1:1a:e3:84: 1f:4d:5d:29:6a:1c:a8:25:3d:e7:c0:7c:b2:18:cf: a0:a8:37:6f:e9:68:f3:6a:29:34:47:52:a2:39:0b: 30:98:21:30:61:de:75:5f:94:df:8e:62:bb:3a:d9: 35:cd:df:40:dc:a7:62:e3:99:c0:5a:89:4a:be:a6: 49:b4:e0:15:b4:19:9b:21:bb:49:56:36:19:a1:18: e6:7f:1d:ab:ff:71:90:8e:79:56:4e:54:91:29:46: 7d:81:f0:34:a1:20:e6:2c:90:0f:ba:7a:48:17:74: c4:7c:e0:74:71:bb:d9:6b:e9:66:ae:88:50:4a:21: da:44:f2:e9:68:d1:f3:91:08:74:92:9b:18:54:a8: cb:e1:01:c6:3e:25:77:57:98:3c:f5:4c:a4:ed:e7: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:F3:23:75:65:C7:55:64:8C:AF:80:86:D3:23:7B:CA:C4:52:B0 X509v3 Authority Key Identifier: keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.242.0/24 91.212.98.0/24 Signature Algorithm: sha256WithRSAEncryption 25:22:c4:c8:29:04:2f:30:7b:fc:55:e8:67:0d:b5:64:50:46: 63:4c:24:6f:d2:4f:af:0d:bd:0a:b1:f4:69:09:f2:41:98:db: 1d:83:91:46:57:49:b4:85:a1:82:ed:50:6a:1a:da:79:d3:74: 45:cc:77:4e:dd:94:f5:97:b1:b7:fc:ab:8a:d2:58:a8:8d:18: a1:ac:78:8b:ec:3f:2f:f3:5b:dd:dc:31:52:2f:da:d4:4d:52: 0c:1e:71:24:b9:fb:29:a9:b4:92:aa:86:17:2b:62:57:48:82: c7:20:86:04:66:06:fe:de:1c:d6:f7:8d:a3:18:6e:43:89:a5: cf:45:6b:02:d6:f9:c0:0f:ba:58:96:3f:ea:9d:0f:0c:be:05: 23:93:da:8b:03:7b:e2:d9:36:a0:f9:1d:ad:98:7d:13:c1:39: b2:e6:ea:5b:86:99:27:15:a7:57:7c:52:c1:7e:d1:b2:28:04: 46:8e:67:c0:16:4e:65:17:bf:7d:df:50:66:84:67:25:9b:0d: 4f:b3:26:e0:12:6e:77:03:8d:f8:b4:9d:5d:09:a5:1c:9b:d6: fd:15:f0:2c:7d:b9:e2:60:b7:69:b4:4c:25:92:ea:10:74:d6: cc:2d:d6:c3:5b:96:e5:d3:06:aa:40:99:16:1d:57:8f:04:bd: 63:98:8f:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WuzGqDnDRGuEZzPMg5BpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl OGVmMzEwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGM5ZjMyMzc1NjVjNzU1NjQ4Y2FmODA4NmQzMjM3YmNhYzQ1MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCqdyTwEU69pqiGkCoPvZJlyBSl3 /4emWyB3smuqLZVzLyuZsTwq+gxEfblXDsnDkxI2VsbVlbagpKgimjmyr9ZifjJp r3NDswPD6xnIxd74ume2UAMVjyHlqOxUBs2TfWEdlrEa44QfTV0pahyoJT3nwHyy GM+gqDdv6Wjzaik0R1KiOQswmCEwYd51X5TfjmK7Otk1zd9A3Kdi45nAWolKvqZJ tOAVtBmbIbtJVjYZoRjmfx2r/3GQjnlWTlSRKUZ9gfA0oSDmLJAPunpIF3TEfOB0 cbvZa+lmrohQSiHaRPLpaNHzkQh0kpsYVKjL4QHGPiV3V5g89Uyk7ecouwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGjJ8yN1ZcdVZIyvgIbTI3vKxFKwMB8GA1UdIwQY MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt MWY1NWQ5OTk5ZWViLzEvYU1uekkzVmx4MVZrakstQWh0TWplOHJFVXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8fyAwQA W9RiMA0GCSqGSIb3DQEBCwUAA4IBAQAlIsTIKQQvMHv8VehnDbVkUEZjTCRv0k+v Db0KsfRpCfJBmNsdg5FGV0m0haGC7VBqGtp503RFzHdO3ZT1l7G3/KuK0liojRih rHiL7D8v81vd3DFSL9rUTVIMHnEkufspqbSSqoYXK2JXSILHIIYEZgb+3hzW942j GG5DiaXPRWsC1vnAD7pYlj/qnQ8MvgUjk9qLA3vi2Tag+R2tmH0TwTmy5upbhpkn FadXfFLBftGyKARGjmfAFk5lF79931BmhGclmw1PsybgEm53A434tJ1dCaUcm9b9 FfAsfbniYLdptEwlkuoQdNbMLdbDW5bl0waqQJkWHVePBL1jmI9r -----END CERTIFICATE-----Generated at Mon Jan 26 21:05:35 2026 by rpki-client