This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/aMebyeYsCSmSS_1lFCfJ1iL_LRc.roa File: aMebyeYsCSmSS_1lFCfJ1iL_LRc.roa (raw, json) Hash identifier: JMJQMDh4awwPLboVZjlFyeGOEIJWV3eJSMK2QvujR/0= Subject key identifier: 68:C7:9B:C9:E6:2C:09:29:92:4B:FD:65:14:27:C9:D6:22:FF:2D:17 Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de Certificate serial: 019B7AC9542EA0AB2336E33DF41654E22FBC Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/aMebyeYsCSmSS_1lFCfJ1iL_LRc.roa Signing time: Thu 01 Jan 2026 18:19:33 +0000 ROA not before: Thu 01 Jan 2026 18:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20724 IP address blocks: 80.244.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:54:2e:a0:ab:23:36:e3:3d:f4:16:54:e2:2f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de Validity Not Before: Jan 1 18:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68c79bc9e62c0929924bfd651427c9d622ff2d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:09:20:1f:35:26:97:d2:33:aa:2a:8d:bf: 57:51:d0:6c:2f:18:36:a4:cc:12:40:29:07:eb:36: 91:e5:bb:f4:4d:e6:75:d1:be:8c:21:5e:27:78:32: d3:0f:87:91:50:61:d3:3e:8f:50:8b:40:ba:af:7e: 55:ae:2b:f6:aa:7b:7e:e1:aa:95:11:fc:16:3c:49: f5:92:5f:b8:5b:e4:1d:4a:f4:a3:c1:8d:65:80:78: 28:ec:d9:bf:9c:b2:d3:a8:17:7c:1a:14:27:c1:3f: ed:cf:c7:3d:53:7e:75:c2:bd:c4:2d:1e:3d:a6:f8: ea:13:f4:3c:ce:3a:b1:e3:cd:d2:42:b0:52:cb:e6: c4:a7:a5:79:ed:39:29:3f:7c:b2:1d:27:64:aa:97: 35:31:2c:37:83:14:1d:05:6f:92:db:41:0a:86:d5: de:17:db:f2:af:af:4c:eb:9f:3d:34:80:e9:ed:ef: 34:26:20:b7:8c:6c:1c:72:37:c4:b7:ec:c1:77:90: 90:a6:0a:4e:5f:d5:40:ae:11:c4:f1:3e:47:fd:dc: 6d:d1:af:25:3d:a7:c5:a1:9e:c7:b9:78:27:67:98: 70:d9:c6:63:2b:0d:40:36:19:ba:70:51:a1:18:82: f7:d9:e1:ab:c0:fc:0b:93:a5:c4:cc:11:ef:c0:32: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C7:9B:C9:E6:2C:09:29:92:4B:FD:65:14:27:C9:D6:22:FF:2D:17 X509v3 Authority Key Identifier: keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/aMebyeYsCSmSS_1lFCfJ1iL_LRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.13.0/24 Signature Algorithm: sha256WithRSAEncryption c8:82:fd:ed:85:cd:a9:d7:5e:25:15:bb:18:65:f5:8f:fd:cf: 2c:9b:52:47:7d:8e:18:76:8c:91:c7:f9:70:e4:c8:f7:3b:04: 8d:c6:ff:ce:4a:94:23:54:eb:2b:87:d6:e5:e2:53:fb:77:72: 3b:09:52:81:42:57:39:6b:e2:06:51:e2:95:4f:5d:71:fe:7f: 54:05:c6:72:48:5c:4d:30:dc:87:57:3b:31:ad:c6:e9:6a:47: 87:75:76:44:25:af:c9:f3:0d:4b:17:d6:a2:22:e0:8f:df:0c: 49:0d:8b:d1:d1:a0:79:55:68:78:bd:5e:d4:42:95:6f:57:cf: c8:81:85:63:0c:7b:db:c4:55:36:22:17:ba:a6:fd:69:03:c3: 84:0b:4c:de:00:25:6f:3b:d1:9e:36:3f:34:ee:1b:de:9e:fb: 5a:a4:07:97:fc:55:9e:0d:83:33:6b:ba:16:16:ec:2a:8b:65: 5e:9a:d9:a9:7f:cd:c6:8f:f7:ea:16:47:79:14:d8:9c:2b:70: 3a:12:c4:9e:7c:e3:3d:c7:f8:56:6f:58:78:39:31:06:00:1e: 89:a2:d6:9e:7e:29:19:ee:23:de:6a:19:87:83:7b:66:d3:20: ed:6a:5d:8f:65:a4:c1:5c:10:c3:ac:12:2b:ad:34:eb:67:84: 60:76:ca:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVQuoKsjNuM99BZU4i+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWM5NzEwNzYyNjNiZGRiMGVlY2Y1YmVhNjU3NGE0MDVi OTg1ZGUwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGM3OWJjOWU2MmMwOTI5OTI0YmZkNjUxNDI3YzlkNjIyZmYyZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpsJIB81JpfSM6oqjb9XUdBsLxg2 pMwSQCkH6zaR5bv0TeZ10b6MIV4neDLTD4eRUGHTPo9Qi0C6r35Vriv2qnt+4aqV EfwWPEn1kl+4W+QdSvSjwY1lgHgo7Nm/nLLTqBd8GhQnwT/tz8c9U351wr3ELR49 pvjqE/Q8zjqx483SQrBSy+bEp6V57TkpP3yyHSdkqpc1MSw3gxQdBW+S20EKhtXe F9vyr69M6589NIDp7e80JiC3jGwccjfEt+zBd5CQpgpOX9VArhHE8T5H/dxt0a8l PafFoZ7HuXgnZ5hw2cZjKw1ANhm6cFGhGIL32eGrwPwLk6XEzBHvwDKdgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjHm8nmLAkpkkv9ZRQnydYi/y0XMB8GA1UdIwQY MBaAFL+slxB2JjvdsO7PW+pldKQFuYXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZ5WEVIWW1POTJ3N3M5YjZtVjBwQVc1aGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjc4MzctYmFhMC00MDg1LWFhMjMt ODAyM2Q5NDU0OTdhLzEvYU1lYnllWXNDU21TU18xbEZDZkoxaUxfTFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNjc4MzctYmFhMC00MDg1LWFhMjMtODAyM2Q5NDU0OTdh LzEvdjZ5WEVIWW1POTJ3N3M5YjZtVjBwQVc1aGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQNMA0G CSqGSIb3DQEBCwUAA4IBAQDIgv3thc2p114lFbsYZfWP/c8sm1JHfY4YdoyRx/lw 5Mj3OwSNxv/OSpQjVOsrh9bl4lP7d3I7CVKBQlc5a+IGUeKVT11x/n9UBcZySFxN MNyHVzsxrcbpakeHdXZEJa/J8w1LF9aiIuCP3wxJDYvR0aB5VWh4vV7UQpVvV8/I gYVjDHvbxFU2Ihe6pv1pA8OEC0zeACVvO9GeNj807hvenvtapAeX/FWeDYMza7oW Fuwqi2Vemtmpf83Gj/fqFkd5FNicK3A6EsSefOM9x/hWb1h4OTEGAB6JotaefikZ 7iPeahmHg3tm0yDtal2PZaTBXBDDrBIrrTTrZ4Rgdsrc -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:51 2026 by rpki-client