This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/aAMBxABuNWLMiDFEaZfaORcJfCc.roa File: aAMBxABuNWLMiDFEaZfaORcJfCc.roa (raw, json) Hash identifier: OsAfZ4nItSdNeg7Pa91VVHU6gTtzsTtVrhEZpgCzWwc= Subject key identifier: 68:03:01:C4:00:6E:35:62:CC:88:31:44:69:97:DA:39:17:09:7C:27 Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b Certificate serial: 019B797EC33F8E1F9D3BCF9417588054D5DB Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/aAMBxABuNWLMiDFEaZfaORcJfCc.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39561 IP address blocks: 194.67.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c3:3f:8e:1f:9d:3b:cf:94:17:58:80:54:d5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=680301c4006e3562cc8831446997da3917097c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:e5:67:d3:23:79:6a:8c:d3:d1:d4:cb:2d: 8d:c3:b3:2d:f6:c6:2f:c4:9a:50:b5:04:7d:ef:9c: 5b:76:16:8b:3a:28:df:a6:92:ec:0a:30:8b:03:3a: 08:a8:db:88:68:ca:83:3b:f6:ca:2c:c5:d8:7d:d8: 27:5e:12:b7:4d:92:d6:7a:c4:a6:9c:90:7d:3c:88: d8:22:ce:0f:dc:2f:9b:f6:95:97:6c:43:27:94:ea: e9:4d:0c:06:2e:28:b7:eb:fc:5d:63:ff:3b:d1:bd: 8f:8b:92:71:d8:50:d7:8a:4b:75:b1:61:03:f2:fa: 59:8a:dc:e7:3e:10:02:9b:9f:ba:d5:d6:3e:ff:0d: f3:36:67:69:ca:c0:4d:e4:9e:0e:6d:ba:66:ea:f8: c6:31:29:0b:5f:69:df:30:85:de:d3:33:29:ff:f9: ef:ca:d3:5e:a6:65:b8:bf:1a:e1:00:2d:9d:3a:23: 27:bb:be:be:23:fa:e4:e6:48:a8:d3:97:88:8d:d2: 63:9e:ba:33:dd:e1:e2:44:f2:88:18:8f:ae:87:b6: b4:21:62:11:ef:ee:24:dc:73:b3:1a:d1:c0:8e:a8: 3e:0f:d5:8d:30:15:d0:56:85:93:64:54:7c:c1:df: 09:50:94:0c:ae:e5:d1:27:07:86:85:e9:ef:3a:00: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:03:01:C4:00:6E:35:62:CC:88:31:44:69:97:DA:39:17:09:7C:27 X509v3 Authority Key Identifier: keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/aAMBxABuNWLMiDFEaZfaORcJfCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.67.73.0/24 Signature Algorithm: sha256WithRSAEncryption 36:93:3c:7c:6c:10:7a:6f:b6:95:2b:64:73:93:28:77:14:61: fd:2d:0c:fa:b1:c5:b0:80:7b:ec:ea:26:f7:a9:68:61:88:f7: 65:cc:1b:3b:b1:d1:24:66:f7:1c:84:eb:da:6b:d0:31:e1:b7: b0:8b:89:1c:ce:54:e2:e1:3a:6e:e9:6a:13:ad:f3:8e:61:d4: db:e2:ea:45:34:78:3d:52:3a:6e:d6:ce:3a:b2:10:0b:9e:a9: cd:e6:d8:85:d8:c5:dd:bf:d1:ce:71:77:40:e1:7f:e5:5b:df: a3:8b:6b:85:f5:96:56:d1:66:62:e9:18:c1:15:4d:ab:ac:b0: 6d:35:1a:f7:cc:3c:62:49:32:0c:ac:96:e9:6c:95:86:c5:d4: 97:d2:00:15:d8:e1:d4:cd:6d:ef:fa:f7:cf:97:e3:65:4d:f1: 4f:8c:0b:68:3c:71:d5:f0:11:88:14:fb:51:3f:1b:50:f5:d5: 3e:55:91:8c:fc:be:d9:a7:d8:95:92:1d:72:78:ff:0a:98:66: 46:28:06:6a:7a:2b:f1:b6:27:a9:e4:6c:ea:d5:31:ac:70:79: 36:50:c6:42:f3:ce:9f:3c:45:e3:96:4f:a4:9d:2c:d7:1b:dd: c8:e6:1c:fe:c9:2a:6a:50:6e:cf:87:a2:e3:02:a1:b4:c6:90: ac:ba:58:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsM/jh+dO8+UF1iAVNXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MzMyOTRhMWNkYzEzNThhZmM0MzljMGE3MjczM2IwNjVh ODZmOGIwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODAzMDFjNDAwNmUzNTYyY2M4ODMxNDQ2OTk3ZGEzOTE3MDk3YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxTlZ9MjeWqM09HUyy2Nw7Mt9sYv xJpQtQR975xbdhaLOijfppLsCjCLAzoIqNuIaMqDO/bKLMXYfdgnXhK3TZLWesSm nJB9PIjYIs4P3C+b9pWXbEMnlOrpTQwGLii36/xdY/870b2Pi5Jx2FDXikt1sWED 8vpZitznPhACm5+61dY+/w3zNmdpysBN5J4Obbpm6vjGMSkLX2nfMIXe0zMp//nv ytNepmW4vxrhAC2dOiMnu76+I/rk5kio05eIjdJjnroz3eHiRPKIGI+uh7a0IWIR 7+4k3HOzGtHAjqg+D9WNMBXQVoWTZFR8wd8JUJQMruXRJweGhenvOgCf7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgDAcQAbjVizIgxRGmX2jkXCXwnMB8GA1UdIwQY MBaAFFgzKUoc3BNYr8Q5wKcnM7BlqG+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDct YmI0YjY1YjZhMGQxLzEvYUFNQnhBQnVOV0xNaURGRWFaZmFPUmNKZkNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDctYmI0YjY1YjZhMGQx LzEvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkNJMA0G CSqGSIb3DQEBCwUAA4IBAQA2kzx8bBB6b7aVK2Rzkyh3FGH9LQz6scWwgHvs6ib3 qWhhiPdlzBs7sdEkZvcchOvaa9Ax4bewi4kczlTi4Tpu6WoTrfOOYdTb4upFNHg9 Ujpu1s46shALnqnN5tiF2MXdv9HOcXdA4X/lW9+ji2uF9ZZW0WZi6RjBFU2rrLBt NRr3zDxiSTIMrJbpbJWGxdSX0gAV2OHUzW3v+vfPl+NlTfFPjAtoPHHV8BGIFPtR PxtQ9dU+VZGM/L7Zp9iVkh1yeP8KmGZGKAZqeivxtiep5Gzq1TGscHk2UMZC886f PEXjlk+knSzXG93I5hz+ySpqUG7Ph6LjAqG0xpCsulgH -----END CERTIFICATE-----Generated at Tue Feb 10 09:28:12 2026 by rpki-client