This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/amTwSoJu04--PPMgX7cWGoLl7yI.roa File: amTwSoJu04--PPMgX7cWGoLl7yI.roa (raw, json) Hash identifier: LHgYpMKmWJ/zte9nRlTYZiOamXW79eIiHdCMO+n1Kpc= Subject key identifier: 6A:64:F0:4A:82:6E:D3:8F:BE:3C:F3:20:5F:B7:16:1A:82:E5:EF:22 Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0 Certificate serial: 019B7CED8188FE1A155414AA80E13825C698 Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/amTwSoJu04--PPMgX7cWGoLl7yI.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 193.138.212.0/22 maxlen: 22 2001:67c:18c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:81:88:fe:1a:15:54:14:aa:80:e1:38:25:c6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0 Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a64f04a826ed38fbe3cf3205fb7161a82e5ef22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:5d:80:d0:ab:b1:bc:b4:8c:b7:bb:70:6d: 64:dc:21:f0:7e:a1:09:aa:4b:40:bd:e5:eb:64:5b: 83:f6:a4:b0:b7:92:95:24:ee:f7:cf:85:a1:86:3c: 32:bd:8a:a5:b3:0e:57:e9:43:49:5c:13:88:0d:c4: aa:69:74:24:05:f1:55:a6:34:3a:c7:d5:f4:83:3e: cf:82:95:11:28:24:b7:4c:bc:56:db:91:29:7e:33: 76:7c:f5:df:49:63:4a:9b:6f:f9:fa:af:42:3b:c8: f1:1d:4e:2a:c5:ce:8a:b4:4a:e3:02:0f:f0:77:ef: f5:ef:7c:15:25:90:f5:99:b1:90:31:fd:b6:fb:e6: 22:83:7d:5c:6c:d1:29:0a:d5:83:35:57:2f:d2:37: 54:1d:4c:e2:ff:d3:08:9d:2c:81:36:b6:f9:52:4e: f5:c9:00:6f:97:ea:1a:f6:10:5a:df:33:33:68:c9: 0d:69:f0:17:e0:59:62:a7:d2:d7:dc:d9:8e:d3:34: ce:ed:9d:42:59:94:24:ac:89:25:e6:3c:2f:0d:f3: 2b:e6:3f:67:4a:2b:b8:cd:d7:6c:05:02:fd:df:db: 31:50:89:39:8d:9c:d2:16:35:53:ae:d7:92:12:a3: 43:38:b3:b8:b7:c9:b7:75:7a:1e:aa:f7:3f:0b:e1: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:F0:4A:82:6E:D3:8F:BE:3C:F3:20:5F:B7:16:1A:82:E5:EF:22 X509v3 Authority Key Identifier: keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/amTwSoJu04--PPMgX7cWGoLl7yI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.212.0/22 IPv6: 2001:67c:18c4::/48 Signature Algorithm: sha256WithRSAEncryption 89:e4:8a:03:89:49:e4:de:5f:53:5f:ce:61:5f:d5:4f:51:f8: 53:ae:8f:fb:0e:5e:7e:43:2f:d3:84:14:6d:83:13:72:d9:e6: 70:46:9e:b0:90:d0:cb:88:d4:aa:1c:80:ea:c8:a9:9a:15:7d: 12:97:25:80:73:77:43:d5:55:db:0f:ec:69:e6:f0:3e:84:9d: 45:07:0d:7a:56:d5:85:b9:00:c3:5c:42:0e:b3:1f:2e:f2:25: eb:b1:e0:35:28:2e:9b:4b:f2:2c:10:32:7f:18:32:b5:db:9b: 77:df:4e:d7:63:19:a4:9f:0c:fd:df:04:6c:55:40:20:e9:30: b6:05:70:1d:3a:e4:bf:44:a8:18:e8:a6:ba:ef:74:d5:cd:c4: a4:02:fd:38:43:a8:8f:59:f8:93:fb:21:a7:fd:e8:4e:fb:9a: 6a:35:73:d5:30:3b:f9:6a:17:93:ea:65:21:91:6a:9a:fd:9d: 6b:6f:87:13:47:68:64:ec:39:4a:63:65:fd:df:d3:1c:62:64: c2:b8:c0:7b:93:e4:ea:b7:f0:db:bd:aa:ea:a0:84:62:84:f6: c5:37:13:97:6a:c8:85:3d:e7:43:93:54:b9:f7:b7:7f:0c:2e: 44:58:2a:62:86:1f:02:fe:ea:07:9e:2a:5f:38:02:e8:cd:ae: 62:d2:f3:c9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87YGI/hoVVBSqgOE4JcaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MjVhZmI5Y2UzMzVlZWQzZTUzMTI4YjRhOWViMjVmYzQ5 NWQ2ZTAwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTY0ZjA0YTgyNmVkMzhmYmUzY2YzMjA1ZmI3MTYxYTgyZTVlZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJldgNCrsby0jLe7cG1k3CHwfqEJ qktAveXrZFuD9qSwt5KVJO73z4WhhjwyvYqlsw5X6UNJXBOIDcSqaXQkBfFVpjQ6 x9X0gz7PgpURKCS3TLxW25EpfjN2fPXfSWNKm2/5+q9CO8jxHU4qxc6KtErjAg/w d+/173wVJZD1mbGQMf22++Yig31cbNEpCtWDNVcv0jdUHUzi/9MInSyBNrb5Uk71 yQBvl+oa9hBa3zMzaMkNafAX4Flip9LX3NmO0zTO7Z1CWZQkrIkl5jwvDfMr5j9n Siu4zddsBQL939sxUIk5jZzSFjVTrteSEqNDOLO4t8m3dXoeqvc/C+ELIQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGpk8EqCbtOPvjzzIF+3FhqC5e8iMB8GA1UdIwQY MBaAFMYlr7nOM17tPlMSi0qesl/EldbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQt MTAwYzNlMWJlM2EyLzEvYW1Ud1NvSnUwNC0tUFBNZ1g3Y1dHb0xsN3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQtMTAwYzNlMWJlM2Ey LzEveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwYrUMA8E AgACMAkDBwAgAQZ8GMQwDQYJKoZIhvcNAQELBQADggEBAInkigOJSeTeX1NfzmFf 1U9R+FOuj/sOXn5DL9OEFG2DE3LZ5nBGnrCQ0MuI1KocgOrIqZoVfRKXJYBzd0PV VdsP7Gnm8D6EnUUHDXpW1YW5AMNcQg6zHy7yJeux4DUoLptL8iwQMn8YMrXbm3ff TtdjGaSfDP3fBGxVQCDpMLYFcB065L9EqBjoprrvdNXNxKQC/ThDqI9Z+JP7Iaf9 6E77mmo1c9UwO/lqF5PqZSGRapr9nWtvhxNHaGTsOUpjZf3f0xxiZMK4wHuT5Oq3 8Nu9quqghGKE9sU3E5dqyIU950OTVLn3t38MLkRYKmKGHwL+6geeKl84AujNrmLS 88k= -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:17 2026 by rpki-client