This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AMJOu8yeOKRG8K2ZyRej7tf73io.roa File: AMJOu8yeOKRG8K2ZyRej7tf73io.roa (raw, json) Hash identifier: a0usx4wpMw93PA/eXNjhwMYn3mUDohSAguRxVsEX3Hg= Subject key identifier: 00:C2:4E:BB:CC:9E:38:A4:46:F0:AD:99:C9:17:A3:EE:D7:FB:DE:2A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFEFE2BB833EF38B9B216310141E8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AMJOu8yeOKRG8K2ZyRej7tf73io.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205043 IP address blocks: 2a0e:97c0:b10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:fe:2b:b8:33:ef:38:b9:b2:16:31:01:41:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00c24ebbcc9e38a446f0ad99c917a3eed7fbde2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:c9:a7:f1:89:f7:6f:b0:c7:f9:c0:40:fd: 21:fb:75:a9:7e:83:6c:0a:87:11:15:1f:b4:e2:fd: e4:6d:c5:4c:5e:3b:94:07:77:c0:2f:89:2c:bf:ca: dd:9d:ce:6b:90:e4:60:b2:4f:63:6d:b7:18:5e:81: fb:62:1a:91:04:d1:87:1e:ac:cd:f7:9d:f5:ae:8e: fd:eb:b6:da:4c:24:98:22:d8:64:f2:d1:12:33:74: 88:fc:a9:4e:3a:f8:c2:2a:44:82:e5:f6:b5:e9:3b: ea:68:be:dc:f6:9c:42:67:62:c1:25:d0:3b:3a:75: 18:65:9d:a7:64:45:9d:29:34:30:d5:d1:38:a6:1a: 91:26:3d:f1:e8:36:62:23:1e:b1:50:bb:27:33:66: 48:35:9c:87:5a:83:0f:f1:b4:59:35:1b:3b:d6:57: 24:d6:55:ae:bd:33:5f:4a:12:a9:0a:66:e3:17:22: cb:46:c2:e3:18:c6:3d:89:94:d7:23:64:4e:2d:d2: c7:11:e4:30:a7:9b:8a:66:42:92:aa:cd:5a:dd:88: 94:95:20:9c:48:e8:c5:f6:60:9d:b9:c3:24:61:ed: ed:0c:0d:da:2b:33:f8:ef:b8:42:d6:7b:73:2a:2b: 98:3b:90:c6:06:d8:89:f5:a3:b6:7d:79:48:36:f0: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C2:4E:BB:CC:9E:38:A4:46:F0:AD:99:C9:17:A3:EE:D7:FB:DE:2A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AMJOu8yeOKRG8K2ZyRej7tf73io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:b10::/44 Signature Algorithm: sha256WithRSAEncryption a8:c8:0f:55:38:5a:d0:0d:68:d5:2d:0c:be:75:8b:f1:18:fc: 47:52:72:80:cc:ae:e2:90:90:29:7a:0e:01:42:c7:a7:df:ed: 80:f0:27:e0:1a:66:69:29:ad:c0:3b:b5:16:f6:e2:3f:9f:c9: d9:67:89:11:35:0e:05:32:26:ce:c0:60:57:7a:91:75:40:73: 36:98:07:8b:de:f7:04:f5:63:5f:f0:81:9d:09:71:5f:cf:8a: 65:55:6f:e5:eb:6c:92:bd:93:70:16:65:e1:e1:ad:b9:12:84: 2f:0f:b4:b7:6d:bb:fd:72:5d:9d:2a:fe:85:83:db:1d:05:d9: fc:f4:d5:d2:b8:ad:a4:2e:be:61:23:3e:1c:7c:ed:5b:b2:4b: 6c:09:aa:ed:2f:73:1d:ef:b5:b8:5f:c1:00:da:c1:98:8a:6e: 80:e2:30:c9:67:7e:b9:98:df:da:0a:3a:05:fc:d3:d8:87:55: f9:4d:0d:5e:03:ff:b7:da:33:da:5c:4e:d7:c7:b3:13:89:8d: 8b:b8:d8:be:33:16:cb:33:f6:04:69:2c:cd:c1:17:cc:77:41: e2:31:5b:90:95:d3:33:ba:51:83:18:b6:a6:e5:98:9e:26:ae: 4a:2a:83:ab:fe:56:a9:76:67:15:80:37:f9:66:27:fa:0e:ae: 8a:f3:1f:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XP7+K7gz7zi5shYxAUHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGMyNGViYmNjOWUzOGE0NDZmMGFkOTljOTE3YTNlZWQ3ZmJkZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVXJp/GJ92+wx/nAQP0h+3WpfoNs CocRFR+04v3kbcVMXjuUB3fAL4ksv8rdnc5rkORgsk9jbbcYXoH7YhqRBNGHHqzN 9531ro7967baTCSYIthk8tESM3SI/KlOOvjCKkSC5fa16TvqaL7c9pxCZ2LBJdA7 OnUYZZ2nZEWdKTQw1dE4phqRJj3x6DZiIx6xULsnM2ZINZyHWoMP8bRZNRs71lck 1lWuvTNfShKpCmbjFyLLRsLjGMY9iZTXI2ROLdLHEeQwp5uKZkKSqs1a3YiUlSCc SOjF9mCducMkYe3tDA3aKzP477hC1ntzKiuYO5DGBtiJ9aO2fXlINvDtlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFADCTrvMnjikRvCtmckXo+7X+94qMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQU1KT3U4eWVPS1JHOEsyWnlSZWo3dGY3M2lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAsQ MA0GCSqGSIb3DQEBCwUAA4IBAQCoyA9VOFrQDWjVLQy+dYvxGPxHUnKAzK7ikJAp eg4BQsen3+2A8CfgGmZpKa3AO7UW9uI/n8nZZ4kRNQ4FMibOwGBXepF1QHM2mAeL 3vcE9WNf8IGdCXFfz4plVW/l62ySvZNwFmXh4a25EoQvD7S3bbv9cl2dKv6Fg9sd Bdn89NXSuK2kLr5hIz4cfO1bsktsCartL3Md77W4X8EA2sGYim6A4jDJZ365mN/a CjoF/NPYh1X5TQ1eA/+32jPaXE7Xx7MTiY2LuNi+MxbLM/YEaSzNwRfMd0HiMVuQ ldMzulGDGLam5ZieJq5KKoOr/lapdmcVgDf5Zif6Dq6K8x8d -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:51 2026 by rpki-client