This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/AM2eguci0WqAjvDa2wEEs02a9ss.roa File: AM2eguci0WqAjvDa2wEEs02a9ss.roa (raw, json) Hash identifier: HxFw3QSA2IdlaBzDSdCXTHy8cdzWxokmTf+38kzfwKI= Subject key identifier: 00:CD:9E:82:E7:22:D1:6A:80:8E:F0:DA:DB:01:04:B3:4D:9A:F6:CB Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277 Certificate serial: 019AC056F688FDC0BB897E389A1A1E70BBA5 Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/AM2eguci0WqAjvDa2wEEs02a9ss.roa Signing time: Wed 26 Nov 2025 13:25:15 +0000 ROA not before: Wed 26 Nov 2025 13:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59835 IP address blocks: 77.80.128.0/17 maxlen: 17 77.80.253.0/24 maxlen: 24 77.80.254.0/24 maxlen: 24 77.80.255.0/24 maxlen: 24 185.69.168.0/24 maxlen: 24 2a05:2240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:56:f6:88:fd:c0:bb:89:7e:38:9a:1a:1e:70:bb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277 Validity Not Before: Nov 26 13:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=00cd9e82e722d16a808ef0dadb0104b34d9af6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:27:85:76:02:67:5a:2b:bd:ea:ff:d4:aa: d9:ac:a1:e8:1e:92:60:2f:89:3e:a4:d2:a0:a4:05: 32:01:76:7d:db:77:37:0d:e7:d5:5d:50:22:53:fe: c6:4e:15:96:e6:4e:ce:05:10:18:55:20:b0:41:f2: d7:f5:79:47:f5:a0:22:7c:8e:b7:d6:57:d9:fb:9e: fd:11:8f:19:4c:80:c7:82:06:d2:a8:fd:0d:3b:ad: 0a:62:81:d3:d0:5c:99:1b:e4:51:c3:65:b9:8c:4f: e8:bf:a1:7f:b8:6c:46:01:72:71:a4:88:24:79:cf: 67:42:28:2c:22:03:b2:49:2d:7f:aa:0a:08:51:c2: 60:b8:e6:69:7b:ab:e6:66:d8:9d:52:2b:98:f9:41: 68:22:c4:92:5f:f9:f3:a1:99:3e:a2:13:1b:fb:12: 02:9c:22:77:56:2d:84:ab:8a:42:e4:0b:40:90:be: 49:1d:ee:bc:01:55:54:59:91:a5:12:e2:0e:e4:30: 7f:0f:16:1b:c3:34:b2:35:24:0a:d8:d6:8e:5f:a0: 9c:c4:f2:77:6b:08:7a:d1:37:51:e6:03:75:3d:a4: 92:ea:f5:31:c8:4b:62:a5:58:d2:ed:7e:71:74:38: 4f:f8:cf:b2:b0:3c:f1:dc:cf:6a:04:3e:13:a4:c1: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:9E:82:E7:22:D1:6A:80:8E:F0:DA:DB:01:04:B3:4D:9A:F6:CB X509v3 Authority Key Identifier: keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/AM2eguci0WqAjvDa2wEEs02a9ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.80.128.0/17 185.69.168.0/24 IPv6: 2a05:2240::/32 Signature Algorithm: sha256WithRSAEncryption ac:9e:88:2f:c3:0c:ba:03:f6:9e:17:f0:24:55:22:08:a1:bb: f0:e4:a8:c7:0b:3e:fb:04:f5:a0:81:7f:ed:51:e4:65:2d:84: 85:67:93:9c:83:d4:6b:ee:e1:41:a8:44:3c:35:ea:86:c1:75: 0e:de:82:38:64:98:ea:00:2a:70:09:c0:47:61:1b:01:c3:7b: 53:64:ff:b3:00:96:2d:63:cc:d2:b0:34:cb:cd:bc:69:97:68: 37:c9:f5:8d:d5:6a:33:60:11:36:7c:c9:95:a3:5f:8b:72:58: 38:24:39:8e:d1:4c:b5:02:3f:c6:b6:19:16:fc:59:d9:61:5c: c2:fa:37:1e:4c:98:5e:c2:1c:ad:b9:95:8c:00:56:7b:73:85: b6:f2:cd:9b:3c:16:47:93:a7:55:5a:0a:c7:27:9f:56:ca:6e: 9e:2f:04:08:ef:4f:c1:9d:b6:1a:9e:a6:81:f1:9a:82:64:ea: 66:51:04:d7:d0:8d:33:5d:1c:ed:ef:68:c0:af:69:6c:09:57: d4:9d:fc:1e:b6:3b:d5:e3:b4:91:7c:e7:8b:b0:ff:0c:24:80: 0c:e2:21:2e:dc:e6:59:b7:77:8c:7c:76:b6:30:61:be:2b:f1: 5a:27:5e:9c:e3:09:27:a1:d1:93:d6:1f:ab:a2:b3:bb:a5:ac: 81:4f:f6:13 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrAVvaI/cC7iX44mhoecLulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw M2YyNzcwHhcNMjUxMTI2MTMyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGNkOWU4MmU3MjJkMTZhODA4ZWYwZGFkYjAxMDRiMzRkOWFmNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymknhXYCZ1orver/1KrZrKHoHpJg L4k+pNKgpAUyAXZ923c3DefVXVAiU/7GThWW5k7OBRAYVSCwQfLX9XlH9aAifI63 1lfZ+579EY8ZTIDHggbSqP0NO60KYoHT0FyZG+RRw2W5jE/ov6F/uGxGAXJxpIgk ec9nQigsIgOySS1/qgoIUcJguOZpe6vmZtidUiuY+UFoIsSSX/nzoZk+ohMb+xIC nCJ3Vi2Eq4pC5AtAkL5JHe68AVVUWZGlEuIO5DB/DxYbwzSyNSQK2NaOX6CcxPJ3 awh60TdR5gN1PaSS6vUxyEtipVjS7X5xdDhP+M+ysDzx3M9qBD4TpMFCiwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFADNnoLnItFqgI7w2tsBBLNNmvbLMB8GA1UdIwQY MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt MDhkNjViMzg2MzlkLzEvQU0yZWd1Y2kwV3FBanZEYTJ3RUVzMDJhOXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHTVCAAwQA uUWoMA0EAgACMAcDBQAqBSJAMA0GCSqGSIb3DQEBCwUAA4IBAQCsnogvwwy6A/ae F/AkVSIIobvw5KjHCz77BPWggX/tUeRlLYSFZ5Ocg9Rr7uFBqEQ8NeqGwXUO3oI4 ZJjqACpwCcBHYRsBw3tTZP+zAJYtY8zSsDTLzbxpl2g3yfWN1WozYBE2fMmVo1+L clg4JDmO0Uy1Aj/GthkW/FnZYVzC+jceTJhewhytuZWMAFZ7c4W28s2bPBZHk6dV WgrHJ59Wym6eLwQI70/BnbYanqaB8ZqCZOpmUQTX0I0zXRzt72jAr2lsCVfUnfwe tjvV47SRfOeLsP8MJIAM4iEu3OZZt3eMfHa2MGG+K/FaJ16c4wknodGT1h+rorO7 payBT/YT -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:17 2025 by rpki-client