This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/ACMwaAvueA5hj2k5vPo_qhJ133c.roa
File: ACMwaAvueA5hj2k5vPo_qhJ133c.roa (raw, json)
Hash identifier: cdrRftiXvx3VVL7eXRerOEoJNGRyUrwNZfHdITSoxdk=
Subject key identifier: 00:23:30:68:0B:EE:78:0E:61:8F:69:39:BC:FA:3F:AA:12:75:DF:77
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019B7C128A1EC237BC49C8806C9979AC14B1
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/ACMwaAvueA5hj2k5vPo_qhJ133c.roa
Signing time: Fri 02 Jan 2026 00:19:08 +0000
ROA not before: Fri 02 Jan 2026 00:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205913
IP address blocks: 185.202.76.0/24 maxlen: 24
185.202.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:8a:1e:c2:37:bc:49:c8:80:6c:99:79:ac:14:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jan 2 00:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=002330680bee780e618f6939bcfa3faa1275df77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:7f:32:37:86:49:43:99:99:e6:a7:0a:2d:
19:0e:58:42:e3:39:b0:61:40:32:82:9f:21:bc:a2:
12:95:55:77:75:fb:d1:ff:b1:dc:4e:b0:1f:bc:80:
00:61:dd:3b:33:0b:76:ea:7d:d8:82:30:5d:c7:c8:
e2:95:dc:3a:d1:07:72:f5:42:be:c5:1e:6a:d9:bb:
ba:7f:bc:19:20:42:e3:01:94:12:89:c8:2c:46:b1:
93:33:9e:bf:91:c0:95:26:eb:1e:a9:92:3b:fc:5c:
de:80:ae:1f:fc:7c:d2:b0:61:89:ba:36:f2:ba:ed:
7f:2d:ff:61:b4:55:c6:f3:3c:64:27:67:02:13:66:
0e:29:dd:d4:1c:66:0e:88:db:d0:f4:93:c7:08:bd:
d8:d3:cd:d0:02:9b:d1:f2:fc:96:a2:ef:74:a1:32:
0e:f4:16:4b:de:dc:64:5b:ba:e3:c8:d1:bb:ff:43:
60:73:27:8d:ca:e9:d5:4b:e7:86:2c:a2:7d:f4:b0:
3c:8b:66:58:2b:bb:dc:10:98:ec:14:36:81:50:3d:
fa:69:6a:98:78:83:8f:f7:32:b7:64:c6:bb:07:b1:
81:81:39:39:e0:f2:62:c8:c6:16:fb:b3:5f:77:21:
b0:d5:0c:00:1c:08:46:fe:b0:fd:f9:1d:cf:27:90:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:30:68:0B:EE:78:0E:61:8F:69:39:BC:FA:3F:AA:12:75:DF:77
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/ACMwaAvueA5hj2k5vPo_qhJ133c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.76.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:55:39:b9:3a:bf:4d:3c:12:04:bd:52:0d:69:d1:c8:92:62:
95:0f:17:ac:43:cc:46:cf:4a:32:4a:e6:f6:9e:e8:f5:31:8f:
6d:97:30:95:a6:6f:51:b4:05:e7:fb:97:ff:74:da:4d:67:67:
ce:e8:5a:1b:ac:14:7f:f2:76:83:60:53:ef:58:1c:62:0e:9b:
45:a2:1a:a2:31:82:c9:30:21:0c:ff:d9:cc:e8:a2:41:b1:2b:
c0:75:e8:92:51:b7:47:9c:74:bf:3b:eb:59:26:82:95:72:df:
a3:1a:58:29:4d:a1:d5:85:9c:f2:09:5d:79:8c:82:b3:3a:dc:
cc:54:0e:78:5c:d1:08:7e:b8:04:c3:42:7c:ee:3d:06:2a:50:
01:6e:5f:e0:60:b7:91:4b:28:16:46:b6:8e:7b:71:bf:bb:df:
ef:47:87:18:a1:61:a8:82:0c:9f:2a:fb:84:8a:71:c2:c8:17:
7a:14:44:c1:fd:7d:e9:94:6a:fb:e7:9b:9c:7a:a0:88:f1:26:
2f:c5:9a:c3:0a:ed:80:cd:7c:b1:2f:45:e8:25:8c:ae:17:78:
89:e4:b6:0d:2f:10:bc:94:fb:17:7d:f2:83:38:52:30:4d:b1:
dd:27:47:54:04:2b:21:b9:25:aa:b8:d2:99:30:e5:0f:a9:d1:
d4:a5:e3:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Eooewje8SciAbJl5rBSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MmIwZDcyYmYwNzQzYmYyY2RjNzhiYTFmNTNlOWE5ODhm
OWFmMWUwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDIzMzA2ODBiZWU3ODBlNjE4ZjY5MzliY2ZhM2ZhYTEyNzVkZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4d/MjeGSUOZmeanCi0ZDlhC4zmw
YUAygp8hvKISlVV3dfvR/7HcTrAfvIAAYd07Mwt26n3YgjBdx8jildw60Qdy9UK+
xR5q2bu6f7wZIELjAZQSicgsRrGTM56/kcCVJuseqZI7/FzegK4f/HzSsGGJujby
uu1/Lf9htFXG8zxkJ2cCE2YOKd3UHGYOiNvQ9JPHCL3Y083QApvR8vyWou90oTIO
9BZL3txkW7rjyNG7/0NgcyeNyunVS+eGLKJ99LA8i2ZYK7vcEJjsFDaBUD36aWqY
eIOP9zK3ZMa7B7GBgTk54PJiyMYW+7NfdyGw1QwAHAhG/rD9+R3PJ5DjDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAjMGgL7ngOYY9pObz6P6oSdd93MB8GA1UdIwQY
MBaAFHUrDXK/B0O/LNx4uh9T6amI+a8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjct
NjkxMjE5MjEzNGU5LzEvQUNNd2FBdnVlQTVoajJrNXZQb19xaEoxMzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjctNjkxMjE5MjEzNGU5
LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucpMMA0G
CSqGSIb3DQEBCwUAA4IBAQDKVTm5Or9NPBIEvVINadHIkmKVDxesQ8xGz0oySub2
nuj1MY9tlzCVpm9RtAXn+5f/dNpNZ2fO6FobrBR/8naDYFPvWBxiDptFohqiMYLJ
MCEM/9nM6KJBsSvAdeiSUbdHnHS/O+tZJoKVct+jGlgpTaHVhZzyCV15jIKzOtzM
VA54XNEIfrgEw0J87j0GKlABbl/gYLeRSygWRraOe3G/u9/vR4cYoWGoggyfKvuE
inHCyBd6FETB/X3plGr755uceqCI8SYvxZrDCu2AzXyxL0XoJYyuF3iJ5LYNLxC8
lPsXffKDOFIwTbHdJ0dUBCshuSWquNKZMOUPqdHUpeN7
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:41 2026 by rpki-client