This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/AHMMR6EYDrQMxtQlnkSulO0X6jU.roa File: AHMMR6EYDrQMxtQlnkSulO0X6jU.roa (raw, json) Hash identifier: 3sv84sSITu71ClB0zVRpfx2vaESjgHX6LKDrGF5Yu28= Subject key identifier: 00:73:0C:47:A1:18:0E:B4:0C:C6:D4:25:9E:44:AE:94:ED:17:EA:35 Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Certificate serial: 019B7DCA9C796543FF4DD7FE1BDAA4743C08 Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/AHMMR6EYDrQMxtQlnkSulO0X6jU.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199967 IP address blocks: 185.230.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9c:79:65:43:ff:4d:d7:fe:1b:da:a4:74:3c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00730c47a1180eb40cc6d4259e44ae94ed17ea35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:e6:14:85:65:24:b9:c9:1f:12:7c:a1:dd: 88:48:a9:8c:81:ba:a9:30:54:27:92:8b:0e:ff:33: b7:bd:8f:2e:4b:a0:0a:3d:29:c7:3b:47:3c:01:49: e0:f7:a9:96:7f:77:78:02:0b:28:d6:6a:2d:d3:6c: 75:99:47:85:7c:4b:fb:8a:db:c6:ec:3c:9e:7d:a9: 6f:b7:1f:83:26:d0:0b:4c:37:04:71:ad:6e:fb:df: 1f:03:1e:94:b7:6e:e7:36:20:48:47:6f:90:65:b7: 93:d4:40:09:0c:78:e2:f9:0b:0b:e9:57:27:f7:2d: 54:21:10:da:4d:25:74:42:40:33:fe:a5:c0:4a:7c: ef:69:69:bb:29:d7:55:11:9b:eb:34:e5:9c:a1:92: 33:38:ad:27:cb:7f:71:aa:ba:ab:28:a3:c1:d2:51: 88:90:0e:f2:24:2f:47:69:2d:41:c0:14:9d:6c:a2: b1:20:0d:2d:17:45:07:b4:68:a0:1d:75:95:bc:8d: cf:d8:77:af:d1:b1:fc:ab:c0:a5:61:23:d3:b6:e8: 3e:f1:ec:f7:a3:60:45:70:a6:33:f3:96:ed:5d:ab: 35:bd:5f:7e:46:10:3b:31:e2:5f:df:9c:b1:ef:8c: ad:47:70:24:9b:42:9c:04:28:45:e4:64:e4:25:4f: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:0C:47:A1:18:0E:B4:0C:C6:D4:25:9E:44:AE:94:ED:17:EA:35 X509v3 Authority Key Identifier: keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/AHMMR6EYDrQMxtQlnkSulO0X6jU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.229.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:9c:a3:4c:eb:5b:a4:47:c1:e3:55:4a:f8:9e:69:06:85:ab: 14:25:30:fb:97:15:36:dc:c8:7c:76:78:31:37:a6:28:1a:4a: ed:a4:ae:77:b2:34:06:0a:83:25:c8:74:87:4b:7c:84:6e:1e: af:57:3d:26:98:2c:4e:e6:3a:a9:e5:b1:55:85:5c:67:32:59: 64:41:a4:08:11:f6:14:73:c9:85:55:5a:3b:17:68:db:d9:90: 73:2c:3e:00:4f:5d:a3:98:fd:22:95:2e:13:66:51:ab:58:d5: 02:fd:19:8c:ec:d7:fa:34:91:40:82:e9:f5:f0:b0:9d:55:45: 55:f8:80:0b:b8:73:c7:d7:ce:24:28:f1:c8:69:24:c6:cf:a9: ba:7d:a5:30:69:b1:f1:ee:90:e1:1d:3e:b7:66:ee:28:d3:44: 84:83:35:4f:3b:94:7e:46:bc:46:f0:0d:8e:7f:0e:06:99:de: 5b:37:13:6f:ef:a5:1e:1e:18:8a:1a:0c:20:72:df:dd:6b:75: 8c:84:42:7e:f6:91:81:70:bc:7e:9a:a1:37:b8:08:0b:75:da: fb:5b:64:24:0c:92:51:99:cc:61:2e:c0:77:cc:4d:58:50:7c: 27:3c:cb:54:20:e0:f1:b6:26:9c:f0:36:89:6e:cc:4e:08:e9: 1e:19:01:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ypx5ZUP/Tdf+G9qkdDwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4 YzYxMDAwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDczMGM0N2ExMTgwZWI0MGNjNmQ0MjU5ZTQ0YWU5NGVkMTdlYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQvmFIVlJLnJHxJ8od2ISKmMgbqp MFQnkosO/zO3vY8uS6AKPSnHO0c8AUng96mWf3d4Agso1mot02x1mUeFfEv7itvG 7Dyefalvtx+DJtALTDcEca1u+98fAx6Ut27nNiBIR2+QZbeT1EAJDHji+QsL6Vcn 9y1UIRDaTSV0QkAz/qXASnzvaWm7KddVEZvrNOWcoZIzOK0ny39xqrqrKKPB0lGI kA7yJC9HaS1BwBSdbKKxIA0tF0UHtGigHXWVvI3P2Hev0bH8q8ClYSPTtug+8ez3 o2BFcKYz85btXas1vV9+RhA7MeJf35yx74ytR3Akm0KcBChF5GTkJU8e1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFABzDEehGA60DMbUJZ5ErpTtF+o1MB8GA1UdIwQY MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt MjMxNjU3ODI5ZWY1LzEvQUhNTVI2RVlEclFNeHRRbG5rU3VsTzBYNmpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1 LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueblMA0G CSqGSIb3DQEBCwUAA4IBAQB6nKNM61ukR8HjVUr4nmkGhasUJTD7lxU23Mh8dngx N6YoGkrtpK53sjQGCoMlyHSHS3yEbh6vVz0mmCxO5jqp5bFVhVxnMllkQaQIEfYU c8mFVVo7F2jb2ZBzLD4AT12jmP0ilS4TZlGrWNUC/RmM7Nf6NJFAgun18LCdVUVV +IALuHPH184kKPHIaSTGz6m6faUwabHx7pDhHT63Zu4o00SEgzVPO5R+RrxG8A2O fw4Gmd5bNxNv76UeHhiKGgwgct/da3WMhEJ+9pGBcLx+mqE3uAgLddr7W2QkDJJR mcxhLsB3zE1YUHwnPMtUIODxtiac8DaJbsxOCOkeGQGg -----END CERTIFICATE-----Generated at Wed Jan 7 06:57:04 2026 by rpki-client