This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/AMTyl2NmOJzWYIdDioCqD2l3o74.roa File: AMTyl2NmOJzWYIdDioCqD2l3o74.roa (raw, json) Hash identifier: KueLQl5N1mcezdycmNIiNC1iPrlf8pNhCrc2qwqwyuk= Subject key identifier: 00:C4:F2:97:63:66:38:9C:D6:60:87:43:8A:80:AA:0F:69:77:A3:BE Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BD163E8D106DEDE95F0CE36E4A1F3 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/AMTyl2NmOJzWYIdDioCqD2l3o74.roa Signing time: Mon 24 Nov 2025 16:04:16 +0000 ROA not before: Mon 24 Nov 2025 16:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152586 IP address blocks: 185.121.26.0/24 maxlen: 24 185.121.27.0/24 maxlen: 24 185.187.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:d1:63:e8:d1:06:de:de:95:f0:ce:36:e4:a1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=00c4f2976366389cd66087438a80aa0f6977a3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:44:6d:fd:49:ac:96:13:01:39:e2:57:ba: a4:19:90:d3:a3:cf:ce:8e:48:c9:61:2e:99:c6:fd: 97:f3:94:bc:60:75:97:7e:7f:c9:1f:01:7c:08:5c: e8:92:af:36:a6:00:5a:7e:56:08:1c:63:ff:5e:1c: 39:8b:45:2d:c4:d3:68:8a:d5:b7:85:66:01:b2:e8: e7:14:71:b6:6b:2b:96:04:92:02:1c:19:0b:87:7f: ca:e7:a5:31:8c:35:ed:25:2b:95:7f:25:e1:3c:11: fc:9a:3d:22:bc:2e:e4:05:00:81:ca:57:a0:7d:9d: 1c:eb:7d:ef:b6:3d:69:a2:0f:19:07:d8:df:73:0e: 61:0d:3e:33:d2:a4:2d:30:52:ec:75:d4:c7:4b:02: 24:52:e5:c4:97:55:ee:06:8e:1d:40:ff:71:b6:2c: a6:3a:63:a1:26:7a:5c:0c:8d:b9:04:62:e3:d0:46: 41:a6:31:6d:5e:2f:c6:37:ed:ea:7f:20:23:63:0e: 86:37:0b:b2:b8:71:ac:4d:28:4f:d0:53:0f:62:27: d7:1a:ba:fa:13:3e:3e:22:79:3e:c2:a0:90:2d:ea: 8b:ed:8e:0a:79:a1:a2:76:25:c6:12:0a:14:96:97: cc:4c:85:45:3d:b7:2f:0e:2d:63:dc:70:ba:a4:d9: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C4:F2:97:63:66:38:9C:D6:60:87:43:8A:80:AA:0F:69:77:A3:BE X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/AMTyl2NmOJzWYIdDioCqD2l3o74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.26.0/23 185.187.155.0/24 Signature Algorithm: sha256WithRSAEncryption c7:63:01:fc:e6:88:cc:8b:f3:d4:af:a6:9c:6c:e0:75:7f:67: 5f:0a:93:3e:a1:88:57:85:fc:32:3d:a7:fd:0a:11:df:0a:bb: c0:64:9f:9f:9f:c4:2c:4c:f8:55:b0:3c:f1:5b:bc:59:0b:b6: bf:6c:69:1a:6f:d1:1a:dd:f7:45:8c:91:5e:47:b4:c1:74:cb: a5:8c:a0:51:fd:42:0b:42:5f:54:f4:2a:50:5f:bf:12:7a:aa: fa:ed:4e:76:d1:d9:18:27:6f:71:66:1e:09:1d:98:c3:ec:42: 78:68:33:94:6a:96:e5:a1:84:25:eb:8d:ae:33:c9:47:ae:d9: 44:24:19:05:3e:c8:92:63:38:cc:47:30:82:ba:85:d7:cd:7b: f5:8a:b6:d0:7c:a9:dc:5c:c4:b7:e8:38:25:6c:4a:6c:68:5b: 69:dc:d0:62:47:52:ca:ef:07:a4:d5:cb:7a:44:a1:39:17:ae: 4e:6b:c0:6d:05:6a:84:23:5c:a1:1e:63:ba:de:6c:80:67:3c: 23:08:0a:78:16:df:2d:de:f8:36:ad:45:5f:50:7b:ae:11:59: 2d:f2:35:70:45:3c:b5:6e:96:df:e8:29:2d:1d:ae:6c:8b:ad: d7:9c:24:bf:ef:3f:05:90:4d:8e:a0:00:d7:29:c8:33:be:bb: 19:b9:5a:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq2m9Fj6NEG3t6V8M425KHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGM0ZjI5NzYzNjYzODljZDY2MDg3NDM4YTgwYWEwZjY5NzdhM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgREbf1JrJYTATniV7qkGZDTo8/O jkjJYS6Zxv2X85S8YHWXfn/JHwF8CFzokq82pgBaflYIHGP/Xhw5i0UtxNNoitW3 hWYBsujnFHG2ayuWBJICHBkLh3/K56UxjDXtJSuVfyXhPBH8mj0ivC7kBQCByleg fZ0c633vtj1pog8ZB9jfcw5hDT4z0qQtMFLsddTHSwIkUuXEl1XuBo4dQP9xtiym OmOhJnpcDI25BGLj0EZBpjFtXi/GN+3qfyAjYw6GNwuyuHGsTShP0FMPYifXGrr6 Ez4+Ink+wqCQLeqL7Y4KeaGidiXGEgoUlpfMTIVFPbcvDi1j3HC6pNnTNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFADE8pdjZjic1mCHQ4qAqg9pd6O+MB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvQU1UeWwyTm1PSnpXWUlkRGlvQ3FEMmwzbzc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXkaAwQA ububMA0GCSqGSIb3DQEBCwUAA4IBAQDHYwH85ojMi/PUr6acbOB1f2dfCpM+oYhX hfwyPaf9ChHfCrvAZJ+fn8QsTPhVsDzxW7xZC7a/bGkab9Ea3fdFjJFeR7TBdMul jKBR/UILQl9U9CpQX78Seqr67U520dkYJ29xZh4JHZjD7EJ4aDOUapbloYQl642u M8lHrtlEJBkFPsiSYzjMRzCCuoXXzXv1irbQfKncXMS36DglbEpsaFtp3NBiR1LK 7wek1ct6RKE5F65Oa8BtBWqEI1yhHmO63myAZzwjCAp4Ft8t3vg2rUVfUHuuEVkt 8jVwRTy1bpbf6CktHa5si63XnCS/7z8FkE2OoADXKcgzvrsZuVr8 -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:30 2025 by rpki-client