This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/aM4m7Oc6NIzyqSxndNoY0r_8S2M.roa File: aM4m7Oc6NIzyqSxndNoY0r_8S2M.roa (raw, json) Hash identifier: 775mbRNMV7kdlBzbryoJnSCHY7z/GhaIJplZrGCXfAY= Subject key identifier: 68:CE:26:EC:E7:3A:34:8C:F2:A9:2C:67:74:DA:18:D2:BF:FC:4B:63 Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1 Certificate serial: 019B7C1225DC2EAD012697C6A5F2B31CDAD4 Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/aM4m7Oc6NIzyqSxndNoY0r_8S2M.roa Signing time: Fri 02 Jan 2026 00:18:42 +0000 ROA not before: Fri 02 Jan 2026 00:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28935 IP address blocks: 195.47.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:25:dc:2e:ad:01:26:97:c6:a5:f2:b3:1c:da:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1 Validity Not Before: Jan 2 00:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68ce26ece73a348cf2a92c6774da18d2bffc4b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:11:c8:18:c5:23:5d:d7:2b:c6:32:45:da:32: 97:55:aa:18:4c:15:27:20:9c:9f:10:41:9a:ca:3f: 1c:9d:d4:4b:c1:d6:3a:a6:b2:33:38:9f:38:ee:01: f0:76:a4:cd:4a:2f:6f:ed:bc:25:82:bb:7e:53:89: 20:bd:93:12:70:d0:02:24:2b:64:ae:d0:b6:70:39: c3:0f:5a:c4:80:2a:50:f5:21:a6:a1:6e:c5:16:d1: 64:46:5c:e0:b4:2f:1d:f6:ca:9f:4f:6c:1f:a4:cf: 6d:34:a8:19:48:0d:64:e1:28:d9:cf:97:9e:29:8a: 00:e1:3f:cc:e6:c1:43:ba:71:be:5b:51:0c:12:8d: 86:52:ef:12:34:3a:1f:9d:24:22:cf:48:ed:00:c5: 9f:55:bf:0c:2b:19:7f:68:f7:09:56:10:55:0b:56: cf:40:85:cc:0f:54:67:b1:f0:c0:7b:70:31:4a:f8: a5:62:19:b6:dd:46:52:8e:3e:8e:da:4b:a3:15:63: 45:e6:c1:dc:b3:3c:43:d8:46:67:e6:2f:e7:51:71: e0:36:4c:df:43:72:e9:2f:25:b9:17:33:f0:9a:f1: 66:e2:da:18:00:df:82:1b:e4:5d:43:33:d7:44:be: 23:c4:14:aa:9b:4b:d8:67:19:33:b3:61:2d:12:a3: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CE:26:EC:E7:3A:34:8C:F2:A9:2C:67:74:DA:18:D2:BF:FC:4B:63 X509v3 Authority Key Identifier: keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/aM4m7Oc6NIzyqSxndNoY0r_8S2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.206.0/24 Signature Algorithm: sha256WithRSAEncryption a9:2e:82:9e:15:4c:ef:9a:b8:f8:e3:88:f8:0c:21:a7:e8:d3: 2f:2a:06:99:c4:8a:cd:ea:4e:2c:9f:2d:0d:0d:80:2b:56:35: 13:49:00:23:a3:38:8f:02:9a:33:8e:f0:9e:85:d3:9f:c7:fd: c0:3a:3b:d9:55:98:af:f9:bd:e8:4b:06:a7:a6:63:d5:ba:74: ad:74:8d:4b:19:f4:c5:f2:11:5d:4e:3d:79:88:44:6e:35:2e: a5:49:d6:9b:6e:a5:6b:cd:6b:5b:26:4e:5b:4a:fa:73:53:03: 4c:fd:74:db:12:c2:70:25:d0:c9:ee:53:a9:72:d6:73:8e:b0: 63:55:a7:34:6f:69:02:39:66:31:a5:70:21:e2:c9:82:36:46: 84:d0:3c:b6:b2:10:1d:01:66:f6:2a:c9:8d:fa:e8:1a:ad:5f: 59:37:6b:f9:80:fb:fa:a5:83:9c:da:41:f2:fc:e0:59:c1:64: 2b:a6:11:f1:06:12:e6:63:51:d4:7b:78:c1:e9:28:1f:ac:b7: f9:39:81:f6:a4:d8:af:b5:fe:52:a9:9f:9c:4d:71:34:4e:75: 3a:ef:84:1b:8d:33:73:e0:b1:5b:ea:c5:d9:2b:e8:3e:33:28: f0:54:f6:f7:f5:b1:74:c2:49:bc:ab:91:eb:63:7d:05:7f:ba: 79:cd:47:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EiXcLq0BJpfGpfKzHNrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMjFkZDJmNzcyYTViYjQ3OTI1YzI4YmI1ZDE2Y2Q5MzBm MjA2YjEwHhcNMjYwMTAyMDAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGNlMjZlY2U3M2EzNDhjZjJhOTJjNjc3NGRhMThkMmJmZmM0YjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBHIGMUjXdcrxjJF2jKXVaoYTBUn IJyfEEGayj8cndRLwdY6prIzOJ847gHwdqTNSi9v7bwlgrt+U4kgvZMScNACJCtk rtC2cDnDD1rEgCpQ9SGmoW7FFtFkRlzgtC8d9sqfT2wfpM9tNKgZSA1k4SjZz5ee KYoA4T/M5sFDunG+W1EMEo2GUu8SNDofnSQiz0jtAMWfVb8MKxl/aPcJVhBVC1bP QIXMD1RnsfDAe3AxSvilYhm23UZSjj6O2kujFWNF5sHcszxD2EZn5i/nUXHgNkzf Q3LpLyW5FzPwmvFm4toYAN+CG+RdQzPXRL4jxBSqm0vYZxkzs2EtEqNiQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjOJuznOjSM8qksZ3TaGNK//EtjMB8GA1UdIwQY MBaAFK8h3S93Klu0eSXCi7XRbNkw8gaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEt NTUyZTUxNTQyZDRkLzEvYU00bTdPYzZOSXp5cVN4bmROb1kwcl84UzJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEtNTUyZTUxNTQyZDRk LzEvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/OMA0G CSqGSIb3DQEBCwUAA4IBAQCpLoKeFUzvmrj444j4DCGn6NMvKgaZxIrN6k4sny0N DYArVjUTSQAjoziPApozjvCehdOfx/3AOjvZVZiv+b3oSwanpmPVunStdI1LGfTF 8hFdTj15iERuNS6lSdabbqVrzWtbJk5bSvpzUwNM/XTbEsJwJdDJ7lOpctZzjrBj Vac0b2kCOWYxpXAh4smCNkaE0Dy2shAdAWb2KsmN+ugarV9ZN2v5gPv6pYOc2kHy /OBZwWQrphHxBhLmY1HUe3jB6SgfrLf5OYH2pNivtf5SqZ+cTXE0TnU674QbjTNz 4LFb6sXZK+g+MyjwVPb39bF0wkm8q5HrY30Ff7p5zUf9 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:13 2026 by rpki-client