This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/AMaU2fzpygF41S188jpF5PCtFow.roa File: AMaU2fzpygF41S188jpF5PCtFow.roa (raw, json) Hash identifier: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU= Subject key identifier: 00:C6:94:D9:FC:E9:CA:01:78:D5:2D:7C:F2:3A:45:E4:F0:AD:16:8C Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Certificate serial: 019B7F1333FE2B804D79A632E3D7FA9EABD1 Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/AMaU2fzpygF41S188jpF5PCtFow.roa Signing time: Fri 02 Jan 2026 14:18:43 +0000 ROA not before: Fri 02 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214815 IP address blocks: 91.90.166.0/24 maxlen: 24 147.189.163.0/24 maxlen: 24 2001:67c:328::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:33:fe:2b:80:4d:79:a6:32:e3:d7:fa:9e:ab:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Validity Not Before: Jan 2 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00c694d9fce9ca0178d52d7cf23a45e4f0ad168c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:47:17:9c:84:a0:ee:67:52:14:e3:a1:c7:c1: 03:a0:9d:20:84:5a:c2:29:d0:6a:a6:52:eb:c6:57: a0:9d:68:03:ff:e7:5c:be:9e:54:89:fe:40:18:33: c8:33:ef:cf:ff:55:2c:e1:9f:e5:19:27:6f:f3:fa: 01:3d:37:8e:be:44:3e:fc:5d:4b:d2:90:92:f4:8d: 57:4b:93:7d:bf:c0:d4:df:d0:23:9e:2f:aa:db:87: 53:bc:01:61:73:fa:35:d0:f6:97:51:a3:34:12:9e: fc:d2:cd:54:d3:05:1a:b3:6b:18:c9:48:68:cf:c1: 2f:f7:ed:78:b4:43:03:19:06:dd:aa:b3:c7:25:29: 5a:c5:27:a1:c1:09:08:62:ad:69:45:97:44:d7:35: 9b:6c:5d:46:2b:fc:ed:c6:85:05:aa:79:e5:bc:f6: 5f:7c:00:43:75:3b:2c:39:98:c2:15:b6:b8:b0:20: c0:41:a6:af:5b:70:8c:fb:c5:4d:75:11:0c:6e:36: 24:6a:85:44:de:a6:c3:2d:3b:4a:91:d0:77:41:b4: f5:84:79:dd:6e:dc:c3:72:7d:03:6a:40:32:63:7b: 36:da:e1:2a:33:4c:31:f7:ca:9e:e1:9c:a6:98:96: 3d:74:3c:81:a6:e8:27:0e:e9:54:6b:cb:44:ea:c6: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:94:D9:FC:E9:CA:01:78:D5:2D:7C:F2:3A:45:E4:F0:AD:16:8C X509v3 Authority Key Identifier: keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/AMaU2fzpygF41S188jpF5PCtFow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.166.0/24 147.189.163.0/24 IPv6: 2001:67c:328::/48 Signature Algorithm: sha256WithRSAEncryption 88:91:e8:3f:79:d2:61:b6:a7:e3:cc:bb:f2:2b:87:67:51:52: 5a:42:e3:e0:6d:91:45:85:dc:05:e5:0e:38:20:22:47:bf:3a: b1:06:55:f2:f0:db:e4:44:6b:15:91:4a:cc:4c:94:56:5e:4c: 6e:d7:38:f8:5f:2d:63:55:2e:12:d0:9c:07:63:b1:31:64:66: fd:27:54:06:ff:cf:95:39:4d:e3:4e:b3:d4:93:6a:21:b2:6a: 58:07:7a:ed:d5:35:a4:d3:a3:27:95:8c:65:9d:26:63:8d:9a: cb:c5:39:84:b3:0e:1f:00:38:0c:22:00:b4:24:17:99:57:f9: 64:c6:a5:fa:94:2d:37:9b:4a:dc:bd:72:9b:b7:58:03:a4:71: 75:34:0a:58:f7:77:e2:a7:12:25:3e:4b:78:1f:27:09:34:d1: b2:f1:ce:c5:86:d8:f6:48:32:a8:69:53:9a:76:58:40:19:4b: df:31:87:0f:2f:92:f0:35:51:93:b4:99:37:23:0e:ba:f4:a1: 2f:e9:e1:6f:df:2c:89:34:79:6b:63:11:00:7d:3e:73:77:54: 95:17:ba:bf:5f:18:74:eb:f5:4d:b4:54:af:66:ae:fe:85:ba: 16:5b:97:9e:63:ce:5b:0e:09:4d:49:c4:be:85:4a:a0:eb:db: 54:ca:12:bf -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/EzP+K4BNeaYy49f6nqvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGJlNDc0YzE1NWZjMTM4NDdiODU5NTAxYTU1M2NmZmMz YWM0YjIwHhcNMjYwMTAyMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGM2OTRkOWZjZTljYTAxNzhkNTJkN2NmMjNhNDVlNGYwYWQxNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EcXnISg7mdSFOOhx8EDoJ0ghFrC KdBqplLrxlegnWgD/+dcvp5Uif5AGDPIM+/P/1Us4Z/lGSdv8/oBPTeOvkQ+/F1L 0pCS9I1XS5N9v8DU39Ajni+q24dTvAFhc/o10PaXUaM0Ep780s1U0wUas2sYyUho z8Ev9+14tEMDGQbdqrPHJSlaxSehwQkIYq1pRZdE1zWbbF1GK/ztxoUFqnnlvPZf fABDdTssOZjCFba4sCDAQaavW3CM+8VNdREMbjYkaoVE3qbDLTtKkdB3QbT1hHnd btzDcn0DakAyY3s22uEqM0wx98qe4ZymmJY9dDyBpugnDulUa8tE6sZQIwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFADGlNn86coBeNUtfPI6ReTwrRaMMB8GA1UdIwQY MBaAFA2L5HTBVfwThHuFlQGlU8/8OsSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDct NDg2MWQ0M2UyNGVmLzEvQU1hVTJmenB5Z0Y0MVMxODhqcEY1UEN0Rm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDctNDg2MWQ0M2UyNGVm LzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW1qmAwQA k72jMA8EAgACMAkDBwAgAQZ8AygwDQYJKoZIhvcNAQELBQADggEBAIiR6D950mG2 p+PMu/Irh2dRUlpC4+BtkUWF3AXlDjggIke/OrEGVfLw2+REaxWRSsxMlFZeTG7X OPhfLWNVLhLQnAdjsTFkZv0nVAb/z5U5TeNOs9STaiGyalgHeu3VNaTToyeVjGWd JmONmsvFOYSzDh8AOAwiALQkF5lX+WTGpfqULTebSty9cpu3WAOkcXU0Clj3d+Kn EiU+S3gfJwk00bLxzsWG2PZIMqhpU5p2WEAZS98xhw8vkvA1UZO0mTcjDrr0oS/p 4W/fLIk0eWtjEQB9PnN3VJUXur9fGHTr9U20VK9mrv6FuhZbl55jzlsOCU1JxL6F SqDr21TKEr8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:47 2026 by rpki-client