This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/N-AM4196SXnGQPm10SOwk3Kk_fQ.roa File: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (raw, json) Hash identifier: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM= Subject key identifier: 37:E0:0C:E3:5F:7A:49:79:C6:40:F9:B5:D1:23:B0:93:72:A4:FD:F4 Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Certificate serial: 019B7CEE71573B5AD0CE92BDE47E3368E9B6 Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/N-AM4196SXnGQPm10SOwk3Kk_fQ.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43854 IP address blocks: 91.198.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:71:57:3b:5a:d0:ce:92:bd:e4:7e:33:68:e9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37e00ce35f7a4979c640f9b5d123b09372a4fdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:6f:5d:1e:5b:65:36:27:e3:1b:05:ad:16: bf:eb:ff:77:c2:68:36:0d:93:3c:32:5c:2a:a9:cc: 05:30:50:98:5e:f7:1b:47:4c:f4:c5:1b:0a:d2:c5: 7e:cb:60:12:6e:70:f2:25:7a:97:58:c8:37:7c:58: a2:1d:b0:a0:3a:12:94:73:40:64:7e:fe:cc:21:51: 4e:ac:40:38:03:dd:ac:1d:80:90:d4:a5:f0:9d:71: 76:15:cf:26:95:28:0c:78:1b:dd:fb:c4:e2:35:4b: d4:ab:c2:d7:17:a6:88:06:6f:d8:03:c8:de:77:be: b1:3c:54:73:ac:aa:d8:64:2d:b9:b2:a0:ae:31:31: ef:1b:0c:af:bb:30:f9:19:31:7a:ed:38:19:87:cb: ab:c2:8f:77:bd:cf:61:90:3d:26:05:21:9f:70:58: bb:55:a6:1b:48:19:06:7b:ec:b4:ef:57:6c:a1:1f: 18:ae:15:35:8c:38:7d:e9:0e:3c:92:85:93:e8:16: 56:cc:6a:8d:fc:c3:ec:85:82:cb:7d:8f:98:0d:26: 7e:c6:8e:92:df:5b:03:c9:7e:b6:77:a7:61:66:96: 47:f5:30:f4:14:7e:c7:3c:20:12:ef:c3:88:1b:d3: bd:41:d0:77:35:80:26:3a:95:0c:bc:35:97:95:a2: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:0C:E3:5F:7A:49:79:C6:40:F9:B5:D1:23:B0:93:72:A4:FD:F4 X509v3 Authority Key Identifier: keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/N-AM4196SXnGQPm10SOwk3Kk_fQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.190.0/24 Signature Algorithm: sha256WithRSAEncryption 62:3f:4a:89:aa:0a:b4:6e:6b:c7:2e:b8:4d:f9:5f:0e:7e:e3: e7:cc:cf:4b:c2:42:a7:23:1e:73:c9:2b:2f:2e:87:79:0b:75: 9c:8b:6e:bd:08:e4:09:16:bf:93:5f:4e:cd:5e:39:f0:b5:87: 89:50:15:fc:5a:b6:4f:2e:76:cb:9f:6c:36:59:67:3d:0f:1d: 71:cc:d0:66:20:be:4a:91:8f:70:da:89:a3:fc:41:58:4f:42: 1f:d3:34:b1:0f:d1:bb:de:d7:25:fa:d0:88:fd:33:3e:fb:a5: 1d:ec:cc:ff:58:b4:75:7f:3e:0b:1e:df:41:34:9b:34:54:32: aa:8e:30:fd:ad:74:bc:a1:cf:80:c3:fc:ab:a4:83:30:77:64: 27:2c:e7:be:1a:eb:60:16:38:35:64:e5:cc:e7:3c:bd:9e:be: 8e:f9:58:36:62:26:08:93:3e:70:a6:38:21:65:b8:ef:26:41: 6a:05:a4:07:a8:8a:6f:9d:12:89:ef:c9:11:29:cd:0e:ff:45: b1:d6:06:e4:3b:8c:27:ab:64:f0:c4:5a:7c:c8:05:03:8c:99: f1:93:6a:2e:64:8b:82:7c:84:6d:c8:4a:83:64:0d:4f:a1:65: df:08:20:e1:4a:af:05:5b:9f:fe:6e:60:a2:61:b0:e0:4d:a9: a7:ab:01:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87nFXO1rQzpK95H4zaOm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjE1NDI4YTRiNWJlNWU3M2U3ZDIyODJiNTFjODE5YWVh MzhmOWIwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2UwMGNlMzVmN2E0OTc5YzY0MGY5YjVkMTIzYjA5MzcyYTRmZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2dvXR5bZTYn4xsFrRa/6/93wmg2 DZM8MlwqqcwFMFCYXvcbR0z0xRsK0sV+y2ASbnDyJXqXWMg3fFiiHbCgOhKUc0Bk fv7MIVFOrEA4A92sHYCQ1KXwnXF2Fc8mlSgMeBvd+8TiNUvUq8LXF6aIBm/YA8je d76xPFRzrKrYZC25sqCuMTHvGwyvuzD5GTF67TgZh8urwo93vc9hkD0mBSGfcFi7 VaYbSBkGe+y071dsoR8YrhU1jDh96Q48koWT6BZWzGqN/MPshYLLfY+YDSZ+xo6S 31sDyX62d6dhZpZH9TD0FH7HPCAS78OIG9O9QdB3NYAmOpUMvDWXlaIg0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfgDONfekl5xkD5tdEjsJNypP30MB8GA1UdIwQY MBaAFA7xVCiktb5ec+fSKCtRyBmuo4+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYt OTI3NDkyMGRjYWExLzEvTi1BTTQxOTZTWG5HUVBtMTBTT3drM0trX2ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYtOTI3NDkyMGRjYWEx LzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8a+MA0G CSqGSIb3DQEBCwUAA4IBAQBiP0qJqgq0bmvHLrhN+V8OfuPnzM9LwkKnIx5zySsv Lod5C3Wci269COQJFr+TX07NXjnwtYeJUBX8WrZPLnbLn2w2WWc9Dx1xzNBmIL5K kY9w2omj/EFYT0If0zSxD9G73tcl+tCI/TM++6Ud7Mz/WLR1fz4LHt9BNJs0VDKq jjD9rXS8oc+Aw/yrpIMwd2QnLOe+GutgFjg1ZOXM5zy9nr6O+Vg2YiYIkz5wpjgh ZbjvJkFqBaQHqIpvnRKJ78kRKc0O/0Wx1gbkO4wnq2TwxFp8yAUDjJnxk2ouZIuC fIRtyEqDZA1PoWXfCCDhSq8FW5/+bmCiYbDgTamnqwG7 -----END CERTIFICATE-----Generated at Tue Jan 13 16:23:09 2026 by rpki-client