This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/PAm1yALS9x-qP_AZ-54W9AnDYy8.roa File: PAm1yALS9x-qP_AZ-54W9AnDYy8.roa (raw, json) Hash identifier: GPlRwEDHa/2OENPSASpmCv5lcN0fa6+rmfNybAsq4r0= Subject key identifier: 3C:09:B5:C8:02:D2:F7:1F:AA:3F:F0:19:FB:9E:16:F4:09:C3:63:2F Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Certificate serial: 019B78A35803DBA888A16691D606BDD8CD00 Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/PAm1yALS9x-qP_AZ-54W9AnDYy8.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213398 IP address blocks: 62.164.144.0/24 maxlen: 24 89.23.124.0/24 maxlen: 24 89.40.30.0/24 maxlen: 24 91.234.235.0/24 maxlen: 24 194.164.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:03:db:a8:88:a1:66:91:d6:06:bd:d8:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c09b5c802d2f71faa3ff019fb9e16f409c3632f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:5e:ba:c0:28:c8:89:85:f6:c7:b5:22:4f: ed:17:cb:51:41:53:f6:bc:56:8c:cb:18:03:5a:ad: f7:bf:46:8e:8d:4b:5a:71:c3:af:ef:f8:81:88:87: 1c:a8:61:a9:29:68:a8:94:0e:39:e8:f1:19:b6:a4: 91:7d:89:70:80:ea:e4:b3:00:54:f3:41:86:de:44: c7:e5:93:35:c2:3e:1f:77:f5:3c:18:98:16:50:ca: db:a7:1f:a1:c3:79:fc:23:a1:84:28:2b:fa:32:d7: 59:06:24:8a:d2:53:dc:ee:08:45:ff:bf:b8:05:0b: 39:71:1b:af:dd:5c:fb:6e:20:fb:11:98:75:69:b1: 82:8c:5b:0c:8a:1c:09:c6:7c:ce:81:71:1c:8a:d3: e4:72:e3:a5:39:3a:c5:46:e4:4c:1f:d5:c9:9b:97: 30:f9:a1:c5:13:8a:16:0f:3a:8d:ab:a4:66:73:ba: 2f:35:ca:a8:32:d4:99:d7:10:27:68:1c:45:9c:d9: 6f:2e:29:af:c4:ae:6a:09:bf:a3:62:51:dc:b3:f5: e8:da:92:7c:59:23:e9:18:51:b2:a2:d1:4e:b9:e9: 2b:4c:57:e2:cb:cc:4c:76:27:7b:69:40:00:5f:88: 8c:59:bf:91:c7:b5:d4:b2:72:80:9c:df:08:c8:bf: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:09:B5:C8:02:D2:F7:1F:AA:3F:F0:19:FB:9E:16:F4:09:C3:63:2F X509v3 Authority Key Identifier: keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/PAm1yALS9x-qP_AZ-54W9AnDYy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.144.0/24 89.23.124.0/24 89.40.30.0/24 91.234.235.0/24 194.164.224.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:b6:c1:08:07:7e:16:c5:10:83:e7:06:8c:0a:72:e8:25:59: ed:89:08:74:6a:1f:1c:27:bd:c5:3a:fa:8e:aa:56:4f:99:3f: 28:42:17:ac:d0:51:af:9c:51:d7:e9:ec:19:d6:ad:12:38:91: f6:83:bb:4f:20:83:07:2e:87:a7:96:76:9f:e8:d0:f2:82:b3: 2a:2b:50:c2:d7:bf:b6:65:82:84:e6:04:22:b4:04:88:52:2f: 99:b5:bb:87:54:11:65:e6:e0:99:ed:8c:a0:97:dd:3e:46:1b: 95:e1:3f:2f:4c:e3:21:13:c1:14:e5:3f:fb:06:3b:b4:3a:0d: 47:0d:a9:10:c2:3f:c2:bd:ab:fa:b4:df:d3:68:d5:c4:0f:5d: 68:de:61:1f:51:16:8e:26:c3:84:c4:3e:11:37:e7:16:ac:5d: 46:b8:93:e4:77:7a:92:3b:ab:c0:50:ee:a6:7c:af:75:25:2a: 83:94:58:38:6c:cc:4c:8b:4f:ab:c9:11:52:31:4c:ce:1d:a2: e5:d3:af:14:7d:8b:f3:23:36:d6:30:4e:1f:a2:75:1b:f0:9a: 1d:82:5b:db:1f:a0:cc:e6:8d:e7:ca:03:13:d5:bc:46:2f:99: 63:3e:28:18:8c:8f:5f:fe:08:37:ce:7b:40:39:a9:28:bb:6c: a8:5e:01:24 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4o1gD26iIoWaR1ga92M0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2QyMTQ0ZGQxYjcxNGU5ZTNjYTA5MDFmZTY3NTA0YmY0 NTdlZWIwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA5YjVjODAyZDJmNzFmYWEzZmYwMTlmYjllMTZmNDA5YzM2MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGdeusAoyImF9se1Ik/tF8tRQVP2 vFaMyxgDWq33v0aOjUtaccOv7/iBiIccqGGpKWiolA456PEZtqSRfYlwgOrkswBU 80GG3kTH5ZM1wj4fd/U8GJgWUMrbpx+hw3n8I6GEKCv6MtdZBiSK0lPc7ghF/7+4 BQs5cRuv3Vz7biD7EZh1abGCjFsMihwJxnzOgXEcitPkcuOlOTrFRuRMH9XJm5cw +aHFE4oWDzqNq6Rmc7ovNcqoMtSZ1xAnaBxFnNlvLimvxK5qCb+jYlHcs/Xo2pJ8 WSPpGFGyotFOuekrTFfiy8xMdid7aUAAX4iMWb+Rx7XUsnKAnN8IyL87tQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDwJtcgC0vcfqj/wGfueFvQJw2MvMB8GA1UdIwQY MBaAFFV9IUTdG3FOnjygkB/mdQS/RX7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlgwaFJOMGJjVTZlUEtDUUgtWjFCTDlGZnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xZjA4MzEtZmM2Yi00ODY1LWE4YTgt ZWRmNDJkNWM0ODFmLzEvUEFtMXlBTFM5eC1xUF9BWi01NFc5QW5EWXk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xZjA4MzEtZmM2Yi00ODY1LWE4YTgtZWRmNDJkNWM0ODFm LzEvVlgwaFJOMGJjVTZlUEtDUUgtWjFCTDlGZnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPqSQAwQA WRd8AwQAWSgeAwQAW+rrAwQAwqTgMA0GCSqGSIb3DQEBCwUAA4IBAQBMtsEIB34W xRCD5waMCnLoJVntiQh0ah8cJ73FOvqOqlZPmT8oQhes0FGvnFHX6ewZ1q0SOJH2 g7tPIIMHLoenlnaf6NDygrMqK1DC17+2ZYKE5gQitASIUi+ZtbuHVBFl5uCZ7Yyg l90+RhuV4T8vTOMhE8EU5T/7Bju0Og1HDakQwj/Cvav6tN/TaNXED11o3mEfURaO JsOExD4RN+cWrF1GuJPkd3qSO6vAUO6mfK91JSqDlFg4bMxMi0+ryRFSMUzOHaLl 068UfYvzIzbWME4fonUb8JodglvbH6DM5o3nygMT1bxGL5ljPigYjI9f/gg3zntA Oakou2yoXgEk -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:31 2026 by rpki-client