This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AMENJrV8ygov73L3LGeoA2nctFI.roa File: AMENJrV8ygov73L3LGeoA2nctFI.roa (raw, json) Hash identifier: gyRR16y3QtUpUlKZN2rwn2h0u1QJLqcAd5tS2Xa5lmY= Subject key identifier: 00:C1:0D:26:B5:7C:CA:0A:2F:EF:72:F7:2C:67:A8:03:69:DC:B4:52 Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019A7C47E44377E09D6E0E9CD393809EB2DF Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AMENJrV8ygov73L3LGeoA2nctFI.roa Signing time: Thu 13 Nov 2025 08:14:37 +0000 ROA not before: Thu 13 Nov 2025 08:14:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210539 IP address blocks: 185.165.154.0/24 maxlen: 24 185.170.128.0/24 maxlen: 24 185.170.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:47:e4:43:77:e0:9d:6e:0e:9c:d3:93:80:9e:b2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Nov 13 08:14:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=00c10d26b57cca0a2fef72f72c67a80369dcb452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:56:4e:ae:3b:1a:28:ec:f5:c3:29:95:ca: c4:3d:20:3d:fb:1b:60:4f:3f:ef:05:3f:b6:f9:d6: 10:11:b3:79:7e:24:13:d0:b3:9f:ec:bc:7b:85:00: fe:15:b0:6d:ed:eb:7a:02:9d:b0:19:ee:73:4b:cc: f5:cb:76:56:e3:c2:82:bd:b6:d7:d1:ea:98:cb:3a: 56:9f:04:db:9a:8b:d4:08:c3:1c:e3:aa:96:e7:f7: fd:8a:9c:4f:fe:77:3f:45:97:15:0a:7b:9c:d4:7f: f1:ee:9a:43:d0:a3:49:4b:0a:d5:4f:06:d7:a7:33: eb:75:f3:0c:20:ed:8d:9e:e4:63:cd:ba:ca:c5:b2: a3:32:d7:ec:4d:23:90:67:76:1a:55:cc:22:f0:74: 23:dd:39:60:39:ad:e5:d3:74:f9:f3:44:ee:3d:af: 33:4b:2d:ac:ab:9b:24:46:66:74:1f:9d:7c:b4:5a: d9:cb:58:fe:91:a2:8d:ef:39:25:92:bd:b3:62:98: d6:d4:81:93:df:ab:51:64:55:04:4d:4e:23:c4:46: b1:db:81:8f:df:22:18:bb:e2:1d:10:c0:4d:d6:f4: ec:1f:e1:b3:05:6c:c2:f4:e0:38:73:5b:c5:da:6f: 9a:51:f6:d6:63:a1:5c:74:59:18:4c:70:81:90:51: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:0D:26:B5:7C:CA:0A:2F:EF:72:F7:2C:67:A8:03:69:DC:B4:52 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AMENJrV8ygov73L3LGeoA2nctFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.154.0/24 185.170.128.0/24 185.170.130.0/24 Signature Algorithm: sha256WithRSAEncryption 50:98:a2:ac:44:04:ba:d6:29:18:5d:40:13:29:89:c8:a9:eb: 86:c1:6a:e1:0e:5c:e5:71:73:82:30:cd:78:53:1d:8d:0c:ea: fa:28:d6:4b:94:1d:12:33:4e:79:bf:1b:ca:20:60:2c:28:5c: 4d:18:30:d8:ed:a7:58:f2:04:51:83:07:57:3a:70:90:2c:21: e6:86:94:26:b1:b3:35:c2:4c:e1:34:e8:09:25:98:4d:0b:8b: a2:2e:bd:df:3c:0c:8f:44:54:0d:c1:49:8f:e8:3d:bf:5a:92: 3c:17:ad:47:25:1e:a6:e1:3d:b8:b8:a5:32:0d:43:6b:1c:12: 5c:fa:d3:b3:92:76:5c:73:67:55:60:8c:d2:11:61:0a:60:64: 2b:0c:2f:17:51:68:cb:57:b6:89:fe:dd:c9:47:9b:8c:d1:5f: c5:d6:ba:81:01:1c:21:4f:62:6b:1e:af:96:19:cf:78:52:cf: 64:bc:60:14:bf:07:c7:88:dc:75:a0:f7:b7:dc:4e:e0:d0:49: da:cd:7f:73:8d:c9:c3:5b:26:ba:0d:dc:58:ee:12:62:ba:80: d3:61:6b:f7:3e:a5:d9:5a:03:7b:8b:7a:fd:14:e9:2b:5e:fe: f6:d0:1d:73:eb:ba:5b:06:20:65:5e:8e:1b:98:bb:03:2a:ab: 23:a3:3b:93 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp8R+RDd+Cdbg6c05OAnrLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUxMTEzMDgxNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGMxMGQyNmI1N2NjYTBhMmZlZjcyZjcyYzY3YTgwMzY5ZGNiNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqhWTq47Gijs9cMplcrEPSA9+xtg Tz/vBT+2+dYQEbN5fiQT0LOf7Lx7hQD+FbBt7et6Ap2wGe5zS8z1y3ZW48KCvbbX 0eqYyzpWnwTbmovUCMMc46qW5/f9ipxP/nc/RZcVCnuc1H/x7ppD0KNJSwrVTwbX pzPrdfMMIO2NnuRjzbrKxbKjMtfsTSOQZ3YaVcwi8HQj3TlgOa3l03T580TuPa8z Sy2sq5skRmZ0H518tFrZy1j+kaKN7zklkr2zYpjW1IGT36tRZFUETU4jxEax24GP 3yIYu+IdEMBN1vTsH+GzBWzC9OA4c1vF2m+aUfbWY6FcdFkYTHCBkFFaPwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFADBDSa1fMoKL+9y9yxnqANp3LRSMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvQU1FTkpyVjh5Z292NzNMM0xHZW9BMm5jdEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuaWaAwQA uaqAAwQAuaqCMA0GCSqGSIb3DQEBCwUAA4IBAQBQmKKsRAS61ikYXUATKYnIqeuG wWrhDlzlcXOCMM14Ux2NDOr6KNZLlB0SM055vxvKIGAsKFxNGDDY7adY8gRRgwdX OnCQLCHmhpQmsbM1wkzhNOgJJZhNC4uiLr3fPAyPRFQNwUmP6D2/WpI8F61HJR6m 4T24uKUyDUNrHBJc+tOzknZcc2dVYIzSEWEKYGQrDC8XUWjLV7aJ/t3JR5uM0V/F 1rqBARwhT2JrHq+WGc94Us9kvGAUvwfHiNx1oPe33E7g0EnazX9zjcnDWya6DdxY 7hJiuoDTYWv3PqXZWgN7i3r9FOkrXv720B1z67pbBiBlXo4bmLsDKqsjozuT -----END CERTIFICATE-----Generated at Sun Dec 7 15:18:03 2025 by rpki-client