This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/amSTviWcpNfFbYSFgRc7dVcQjeA.roa File: amSTviWcpNfFbYSFgRc7dVcQjeA.roa (raw, json) Hash identifier: Bxjgw9G1GYZZgTPu4+UgnuoNiNrgpSZHWrPjS89a4Ic= Subject key identifier: 6A:64:93:BE:25:9C:A4:D7:C5:6D:84:85:81:17:3B:75:57:10:8D:E0 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3CC6D7B772004080748588FDA1E8 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/amSTviWcpNfFbYSFgRc7dVcQjeA.roa Signing time: Thu 01 Jan 2026 12:17:54 +0000 ROA not before: Thu 01 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209710 IP address blocks: 185.238.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3c:c6:d7:b7:72:00:40:80:74:85:88:fd:a1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a6493be259ca4d7c56d848581173b7557108de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:40:04:87:92:4f:67:a4:07:5a:f7:d7:b9: a6:92:a4:8d:1a:df:0f:6f:c2:ce:14:a8:26:79:35: f4:74:98:df:5c:d6:2a:f8:96:b2:2d:18:d3:03:14: 67:68:0f:92:82:52:5c:34:a6:ae:2c:86:d3:3b:ee: 33:c4:16:6b:75:d3:cf:0b:57:71:50:39:b6:ef:84: 1b:9e:0e:98:c1:88:95:2f:ed:11:fa:c8:a7:4a:71: 47:1b:04:2d:88:5e:c9:ca:2a:03:50:96:61:54:09: 71:50:0c:29:b7:96:54:26:85:54:7e:58:c1:1b:18: 1d:f0:ff:aa:cf:c1:cb:65:2c:ba:94:be:16:5d:1c: 58:33:b8:93:cc:2e:d1:43:38:69:56:54:93:a9:c4: 62:a5:71:c8:ea:96:d8:2c:9a:b3:3c:c0:41:dc:40: 58:be:18:18:f9:20:44:5f:1b:e7:94:1c:94:63:07: 0d:5f:57:04:7e:03:d6:d5:e4:26:7a:d0:b6:3b:ac: db:a0:62:16:f2:ed:37:de:cd:66:ee:11:ac:b9:ba: 36:a0:3b:be:46:75:db:78:11:06:22:d4:b8:35:e5: 6c:28:ed:84:7a:cb:b4:f0:e8:42:b9:b8:f2:ca:2d: 16:f3:38:80:9a:29:f2:3d:2a:9a:f8:53:59:3c:d9: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:93:BE:25:9C:A4:D7:C5:6D:84:85:81:17:3B:75:57:10:8D:E0 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/amSTviWcpNfFbYSFgRc7dVcQjeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.241.0/24 Signature Algorithm: sha256WithRSAEncryption b4:d3:bc:8a:7c:12:60:1c:6a:23:6d:dd:c0:c7:24:e1:b4:b1: 68:c4:49:a5:7f:53:a2:29:2f:54:2f:ff:3a:ba:b5:7f:92:79: d5:ae:6e:6c:39:d5:6b:19:6c:76:f6:22:53:c3:9c:94:1e:85: 24:14:28:fd:c5:4b:43:b4:5f:4d:72:8b:f7:be:d9:7e:1d:65: f3:bc:ea:91:b1:6f:b3:2f:91:38:e4:20:2b:40:a7:74:e9:a0: 78:fc:2a:42:36:0b:e5:63:01:6b:30:2a:f4:61:78:16:9f:4d: de:78:c0:23:d9:86:84:5d:e7:21:cd:0a:07:ae:8f:ab:d9:42: 21:1e:5d:ed:ff:65:80:b4:22:df:cb:3b:dd:ae:46:58:ff:12: 81:a3:50:0f:3f:fe:a7:c9:9d:ee:0a:03:1c:83:6c:b1:6b:5d: b9:a8:f2:e8:23:aa:f6:c8:2f:0b:14:70:3f:05:fe:6a:76:7f: e7:87:a2:30:f2:fd:f9:b3:c7:b5:e6:c7:56:73:cb:82:61:41: fb:f8:0e:08:ae:b0:89:e5:f5:be:46:06:56:ce:ce:51:4c:65: 4f:87:db:37:35:01:7d:7a:a8:9e:fb:72:e7:43:1b:8c:c8:6e: 77:70:03:29:e8:7c:65:ad:11:b1:73:a5:2c:b9:31:a2:eb:7d: a4:2b:8d:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjzG17dyAECAdIWI/aHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTY0OTNiZTI1OWNhNGQ3YzU2ZDg0ODU4MTE3M2I3NTU3MTA4ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRdABIeST2ekB1r317mmkqSNGt8P b8LOFKgmeTX0dJjfXNYq+JayLRjTAxRnaA+SglJcNKauLIbTO+4zxBZrddPPC1dx UDm274Qbng6YwYiVL+0R+sinSnFHGwQtiF7JyioDUJZhVAlxUAwpt5ZUJoVUfljB Gxgd8P+qz8HLZSy6lL4WXRxYM7iTzC7RQzhpVlSTqcRipXHI6pbYLJqzPMBB3EBY vhgY+SBEXxvnlByUYwcNX1cEfgPW1eQmetC2O6zboGIW8u033s1m7hGsubo2oDu+ RnXbeBEGItS4NeVsKO2Eesu08OhCubjyyi0W8ziAminyPSqa+FNZPNmIbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpkk74lnKTXxW2EhYEXO3VXEI3gMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvYW1TVHZpV2NwTmZGYllTRmdSYzdkVmNRamVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue7xMA0G CSqGSIb3DQEBCwUAA4IBAQC007yKfBJgHGojbd3AxyThtLFoxEmlf1OiKS9UL/86 urV/knnVrm5sOdVrGWx29iJTw5yUHoUkFCj9xUtDtF9Ncov3vtl+HWXzvOqRsW+z L5E45CArQKd06aB4/CpCNgvlYwFrMCr0YXgWn03eeMAj2YaEXechzQoHro+r2UIh Hl3t/2WAtCLfyzvdrkZY/xKBo1APP/6nyZ3uCgMcg2yxa125qPLoI6r2yC8LFHA/ Bf5qdn/nh6Iw8v35s8e15sdWc8uCYUH7+A4IrrCJ5fW+RgZWzs5RTGVPh9s3NQF9 eqie+3LnQxuMyG53cAMp6HxlrRGxc6UsuTGi632kK420 -----END CERTIFICATE-----Generated at Mon Jan 19 20:22:04 2026 by rpki-client