This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/AmfEdzSNiIaUyE9kjKWdw8wez0c.roa File: AmfEdzSNiIaUyE9kjKWdw8wez0c.roa (raw, json) Hash identifier: vq0oBZ5uLCFVx07CNofWY4tR5A83hhnnOOhh+V4vUU0= Subject key identifier: 02:67:C4:77:34:8D:88:86:94:C8:4F:64:8C:A5:9D:C3:CC:1E:CF:47 Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8 Certificate serial: 019B2C4E06C792A6A16A5AA361D55EC670C3 Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/AmfEdzSNiIaUyE9kjKWdw8wez0c.roa Signing time: Wed 17 Dec 2025 12:34:29 +0000 ROA not before: Wed 17 Dec 2025 12:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12843 IP address blocks: 185.60.57.0/24 maxlen: 24 2a0e:3200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:4e:06:c7:92:a6:a1:6a:5a:a3:61:d5:5e:c6:70:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8 Validity Not Before: Dec 17 12:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0267c477348d888694c84f648ca59dc3cc1ecf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:bd:eb:37:98:53:67:14:99:34:bb:30:db: a9:96:c1:72:53:7e:f7:df:32:4e:47:eb:44:77:88: 25:a1:11:c8:b1:51:ad:2f:59:e2:15:f1:95:4d:ca: 62:b6:61:35:2a:a7:c5:fe:51:7d:40:f0:f8:cc:db: 26:fe:59:bd:b6:6d:08:39:34:66:72:eb:c6:73:ee: c4:15:d0:0e:31:91:35:b9:c5:98:1a:1a:ee:3c:89: 63:e9:e1:91:e0:35:09:de:14:4d:30:23:22:89:81: 8c:27:06:17:0f:4d:30:49:59:0a:35:d0:2f:0f:24: 9a:ee:25:e3:fd:4e:c7:ac:f4:b5:74:d2:61:17:48: e9:5d:65:e2:b0:4b:dd:e5:70:c9:6d:bb:7f:c5:18: a9:21:31:8e:a4:51:be:41:1e:b6:44:6c:2b:7d:5f: 96:fa:59:3b:df:33:01:60:1a:21:80:3d:88:8d:ba: 94:71:3f:49:2e:16:79:70:9d:c4:3c:97:17:6a:e5: 46:7c:70:8c:1d:ac:1a:79:fd:52:81:ee:e7:80:62: 6b:3e:8e:a9:31:38:29:3d:20:44:a3:e4:64:c8:c0: 07:2d:86:a6:5d:a0:28:62:26:f9:55:3e:cb:5f:10: b4:29:15:40:16:82:aa:7b:6a:a8:8e:e6:26:32:38: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:67:C4:77:34:8D:88:86:94:C8:4F:64:8C:A5:9D:C3:CC:1E:CF:47 X509v3 Authority Key Identifier: keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/AmfEdzSNiIaUyE9kjKWdw8wez0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.57.0/24 IPv6: 2a0e:3200::/29 Signature Algorithm: sha256WithRSAEncryption 3f:37:22:6d:81:7b:42:19:84:ad:75:e8:8e:f0:ab:e6:67:07: 1c:88:a0:59:4e:ca:c2:0e:c3:01:4e:96:d6:d3:68:94:90:cc: 03:6b:f8:c6:eb:c0:94:a2:aa:2c:a9:33:63:86:12:06:3f:83: d7:32:58:49:d4:7c:37:53:58:7c:63:c8:bf:d2:24:ee:a5:c3: d7:ec:11:a2:35:66:c2:f0:67:93:7e:d8:29:32:6b:78:da:6b: e0:56:f7:a7:e1:f9:4a:e3:6d:88:1f:79:ba:24:e2:87:4d:2a: ee:8f:5b:2f:9a:2b:4c:f6:ad:ad:00:3c:07:21:af:fa:1e:44: 90:0f:78:3e:6e:03:93:a1:aa:8d:70:dc:95:58:27:13:34:28: ac:c0:93:d3:00:30:50:23:81:f1:bb:10:29:ae:7a:07:09:45: 21:af:7b:09:d2:9f:7f:79:c2:1d:91:55:5e:63:ca:10:8b:4e: 3a:fe:d1:d8:ab:d6:9a:5d:b5:b9:3e:ed:46:36:0a:28:4e:a5: 65:f7:14:4b:fb:6e:1c:67:91:d1:2d:28:86:85:70:02:5d:3c: 53:ed:da:51:fa:48:9e:61:a1:63:23:b8:28:25:e6:d0:59:93: c1:0e:be:af:94:cb:ad:0c:7c:ff:b0:63:24:66:e1:8f:40:28: 93:27:f8:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZssTgbHkqahalqjYdVexnDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWFmZmU1OWQ1ODYyMWQ5NDViODk3ZmU2Yjc5NDdkNTYy NTI5YjgwHhcNMjUxMjE3MTIzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjY3YzQ3NzM0OGQ4ODg2OTRjODRmNjQ4Y2E1OWRjM2NjMWVjZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQG96zeYU2cUmTS7MNuplsFyU373 3zJOR+tEd4gloRHIsVGtL1niFfGVTcpitmE1KqfF/lF9QPD4zNsm/lm9tm0IOTRm cuvGc+7EFdAOMZE1ucWYGhruPIlj6eGR4DUJ3hRNMCMiiYGMJwYXD00wSVkKNdAv DySa7iXj/U7HrPS1dNJhF0jpXWXisEvd5XDJbbt/xRipITGOpFG+QR62RGwrfV+W +lk73zMBYBohgD2IjbqUcT9JLhZ5cJ3EPJcXauVGfHCMHawaef1Sge7ngGJrPo6p MTgpPSBEo+RkyMAHLYamXaAoYib5VT7LXxC0KRVAFoKqe2qojuYmMjjo6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAJnxHc0jYiGlMhPZIylncPMHs9HMB8GA1UdIwQY MBaAFDwa/+WdWGIdlFuJf+a3lH1WJSm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEt MWRmNGNmZDdhYjc3LzEvQW1mRWR6U05pSWFVeUU5a2pLV2R3OHdlejBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEtMWRmNGNmZDdhYjc3 LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuTw5MA0E AgACMAcDBQMqDjIAMA0GCSqGSIb3DQEBCwUAA4IBAQA/NyJtgXtCGYStdeiO8Kvm ZwcciKBZTsrCDsMBTpbW02iUkMwDa/jG68CUoqosqTNjhhIGP4PXMlhJ1Hw3U1h8 Y8i/0iTupcPX7BGiNWbC8GeTftgpMmt42mvgVven4flK422IH3m6JOKHTSruj1sv mitM9q2tADwHIa/6HkSQD3g+bgOToaqNcNyVWCcTNCiswJPTADBQI4HxuxAprnoH CUUhr3sJ0p9/ecIdkVVeY8oQi046/tHYq9aaXbW5Pu1GNgooTqVl9xRL+24cZ5HR LSiGhXACXTxT7dpR+kieYaFjI7goJebQWZPBDr6vlMutDHz/sGMkZuGPQCiTJ/hy -----END CERTIFICATE-----Generated at Thu Dec 18 17:11:16 2025 by rpki-client