This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/amjmGxaJIouWoE6HVWZtWe57bQM.roa
File: amjmGxaJIouWoE6HVWZtWe57bQM.roa (raw, json)
Hash identifier: p//cUb//yTdGGVAL3sZJcljerwKjDHHVgX3jo/mQg5I=
Subject key identifier: 6A:68:E6:1B:16:89:22:8B:96:A0:4E:87:55:66:6D:59:EE:7B:6D:03
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019B7834404A56BEC4E618857DB362E7E85F
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/amjmGxaJIouWoE6HVWZtWe57bQM.roa
Signing time: Thu 01 Jan 2026 06:17:28 +0000
ROA not before: Thu 01 Jan 2026 06:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26415
IP address blocks: 2a00:11c0:48:5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:40:4a:56:be:c4:e6:18:85:7d:b3:62:e7:e8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 06:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a68e61b1689228b96a04e8755666d59ee7b6d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:57:33:31:d6:79:7d:31:89:92:08:8e:d1:79:
a1:cb:44:d3:36:71:92:ac:ad:d7:09:37:a2:60:7f:
5e:57:53:4f:e8:e8:62:96:26:ae:40:d3:75:bb:af:
01:67:30:61:26:96:2e:e3:29:c9:16:fe:42:d2:f4:
15:c9:26:9f:ca:9b:d5:d5:23:1a:45:44:f6:dc:3f:
c2:a3:26:5d:74:26:57:a2:44:7a:2a:90:85:1c:4e:
18:d0:44:b2:04:68:f0:33:eb:87:69:da:1e:0b:f5:
84:35:2a:77:3b:5d:48:44:30:c4:ad:db:f2:48:bb:
37:a9:67:3e:bd:08:cf:85:b1:a5:3c:ea:80:8a:8e:
5e:2c:b8:fd:c7:57:53:c5:a9:5e:24:7d:b0:87:59:
2e:f8:80:35:71:84:84:23:1f:d9:c0:3c:83:42:dc:
5e:24:60:ad:0f:a7:aa:34:81:66:e5:da:67:d6:90:
24:c0:c2:c7:b4:3c:ce:d7:8f:bb:ec:58:0b:34:ee:
c7:98:fe:df:9f:0d:f4:f8:70:b7:98:12:4f:89:ce:
2d:c7:4a:71:55:51:11:14:b3:d5:6f:91:97:7f:2c:
8b:4e:ee:97:28:38:27:44:03:83:54:49:ff:11:4f:
08:91:16:23:c7:fe:74:77:31:dd:6a:a1:fd:90:4d:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:E6:1B:16:89:22:8B:96:A0:4E:87:55:66:6D:59:EE:7B:6D:03
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/amjmGxaJIouWoE6HVWZtWe57bQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:11c0:48:5::/64
Signature Algorithm: sha256WithRSAEncryption
3d:59:1b:59:59:25:0c:af:98:2d:26:a8:06:5c:c1:21:db:71:
b7:6b:17:9b:86:c0:ec:ff:a5:a6:3b:01:6d:c5:6b:16:3b:42:
8e:39:0b:3c:ed:4d:d0:e0:9b:9e:f6:4e:f6:5c:3a:e2:40:5c:
38:ca:ee:62:44:01:fd:d1:6c:91:9a:66:9c:e0:49:a7:be:ec:
35:a9:5f:36:dc:6e:bc:9f:12:5d:26:7a:7e:4b:1f:67:4d:bc:
d1:a3:19:13:b2:9f:a5:3c:d8:5a:d4:92:91:bb:a4:dd:0d:65:
fd:16:78:d2:0e:38:d6:00:b3:cd:4f:7e:be:36:51:89:ce:cf:
8e:85:8e:3e:a0:6f:74:25:0d:eb:ad:aa:59:22:7d:ca:2c:31:
67:bc:fc:a0:d1:9b:96:11:87:c6:06:7d:b4:1d:b6:1f:17:0b:
4a:db:d0:53:ac:ae:20:49:05:e5:47:06:8e:f0:aa:cc:f6:8a:
c7:5c:ec:da:86:c0:bf:8b:81:e1:1e:9f:65:a0:c9:7d:5f:03:
7a:f5:f7:21:74:f9:66:5a:10:ce:84:b4:c9:6d:07:a5:a0:34:
c3:2f:1f:e1:03:73:1a:9a:aa:c8:3c:7e:fc:90:74:90:f3:a4:
11:3e:df:32:57:27:98:19:09:a8:13:29:93:16:b5:04:7e:c3:
0e:c1:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:28:33 2026 by rpki-client