This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/AM8wqrVen9abV5PnuP0fFkgYh4s.roa File: AM8wqrVen9abV5PnuP0fFkgYh4s.roa (raw, json) Hash identifier: 00YdS+/flhKRH8HANRVEUHvN1iN5BPyjtlDWahcZik0= Subject key identifier: 00:CF:30:AA:B5:5E:9F:D6:9B:57:93:E7:B8:FD:1F:16:48:18:87:8B Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4 Certificate serial: 019B79EBAF479FAFFBD1B892847FE4C824CE Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/AM8wqrVen9abV5PnuP0fFkgYh4s.roa Signing time: Thu 01 Jan 2026 14:17:27 +0000 ROA not before: Thu 01 Jan 2026 14:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59463 IP address blocks: 78.108.248.0/23 maxlen: 23 78.108.248.0/24 maxlen: 24 78.108.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:af:47:9f:af:fb:d1:b8:92:84:7f:e4:c8:24:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4 Validity Not Before: Jan 1 14:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00cf30aab55e9fd69b5793e7b8fd1f164818878b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:89:95:b6:50:33:e5:f9:e6:5e:49:2f:63: 85:c6:ee:79:7b:27:b5:1d:ce:73:d1:e3:c5:2f:58: 97:11:fc:f3:4a:90:f0:2c:be:9e:b2:64:5d:97:5a: 6a:72:cf:ef:11:8b:d7:14:ba:a1:fa:bd:77:44:8b: 74:4c:bc:23:98:20:76:3e:1c:d8:1d:fc:83:b6:78: 3c:9d:a9:2b:dc:a5:30:28:a0:24:b5:0f:f7:36:7b: 40:a5:49:35:00:88:01:30:0f:8a:92:0e:c3:ad:0b: 57:4c:3b:b1:92:82:0a:d9:5e:9b:f6:9c:e9:16:e2: cf:fd:90:d9:3e:c3:50:99:2c:13:26:cd:15:bb:06: f3:4f:78:e6:57:14:2b:41:d6:8c:e1:37:60:71:9a: 16:32:ba:8d:7d:1c:a2:4a:cc:8b:7d:59:d2:3d:09: d0:26:b3:22:06:11:b6:f6:ec:dd:17:c3:f5:08:d1: dc:1c:1e:9f:54:41:e6:bb:da:e6:02:98:da:00:ba: 92:f3:8c:7f:11:6b:1a:16:86:89:7b:e5:f6:f8:54: 2f:b8:e1:7c:80:a1:5d:95:4b:f6:fa:9b:d1:92:78: d8:93:89:44:97:a5:58:a2:1c:dc:d6:41:33:d7:16: c5:21:8e:7e:99:51:f1:67:f2:be:1b:87:64:4f:c9: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:30:AA:B5:5E:9F:D6:9B:57:93:E7:B8:FD:1F:16:48:18:87:8B X509v3 Authority Key Identifier: keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/AM8wqrVen9abV5PnuP0fFkgYh4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.248.0/23 Signature Algorithm: sha256WithRSAEncryption b5:17:06:c0:5a:c8:9f:22:05:42:9e:85:e5:c5:9c:6e:7b:bc: a1:2e:8c:a6:0a:bc:3b:16:8a:fe:09:50:2a:b0:40:7f:ea:06: e4:55:cd:a9:3c:57:d4:75:d6:50:41:09:7e:5c:ca:1b:f6:bc: b7:69:c2:7e:5c:81:a7:fc:22:45:1e:2f:ed:3b:d8:4b:f2:12: e9:e6:06:b1:6c:2f:0f:6e:28:b6:4c:db:e3:dc:88:1f:f5:70: 75:56:0e:9a:7f:da:fa:0c:78:ca:2b:16:97:6a:c7:74:cf:d7: b2:2b:a6:6e:28:7f:5c:67:98:e0:9a:2c:c5:ca:5b:5e:ad:8b: c7:34:c8:51:0c:aa:85:45:4c:dd:70:25:20:e4:98:dd:64:01: c0:19:ae:3b:34:28:3e:c9:fc:63:64:4b:62:84:02:b6:fa:19: 94:a6:80:9f:d3:f3:d2:cc:ee:41:6c:ec:57:f7:97:c3:bd:c1: 40:0c:ad:bf:de:92:3b:38:c2:42:de:33:c4:a4:bf:fc:4a:21: 26:10:33:df:21:25:37:f3:18:83:e0:43:87:df:a7:d8:67:8c: 13:67:b9:69:e8:6f:7f:5e:34:e8:8d:d4:96:1b:d5:a7:57:65: 97:b0:60:f9:de:c3:00:a7:14:d1:fa:29:b9:21:17:df:45:5a: cd:4c:40:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5669Hn6/70biShH/kyCTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFkZDk0NTViYzEzMmI3MzBlNzI3MDUxZjBiNjRiYTQ1 ZmNkYTQwHhcNMjYwMTAxMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGNmMzBhYWI1NWU5ZmQ2OWI1NzkzZTdiOGZkMWYxNjQ4MTg4NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a6JlbZQM+X55l5JL2OFxu55eye1 Hc5z0ePFL1iXEfzzSpDwLL6esmRdl1pqcs/vEYvXFLqh+r13RIt0TLwjmCB2PhzY HfyDtng8nakr3KUwKKAktQ/3NntApUk1AIgBMA+Kkg7DrQtXTDuxkoIK2V6b9pzp FuLP/ZDZPsNQmSwTJs0VuwbzT3jmVxQrQdaM4TdgcZoWMrqNfRyiSsyLfVnSPQnQ JrMiBhG29uzdF8P1CNHcHB6fVEHmu9rmApjaALqS84x/EWsaFoaJe+X2+FQvuOF8 gKFdlUv2+pvRknjYk4lEl6VYohzc1kEz1xbFIY5+mVHxZ/K+G4dkT8nFiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADPMKq1Xp/Wm1eT57j9HxZIGIeLMB8GA1UdIwQY MBaAFEEq3ZRVvBMrcw5ycFHwtkukX82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTkt YmM5ODg3YTdiNTUzLzEvQU04d3FyVmVuOWFiVjVQbnVQMGZGa2dZaDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTktYmM5ODg3YTdiNTUz LzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTmz4MA0G CSqGSIb3DQEBCwUAA4IBAQC1FwbAWsifIgVCnoXlxZxue7yhLoymCrw7For+CVAq sEB/6gbkVc2pPFfUddZQQQl+XMob9ry3acJ+XIGn/CJFHi/tO9hL8hLp5gaxbC8P bii2TNvj3Igf9XB1Vg6af9r6DHjKKxaXasd0z9eyK6ZuKH9cZ5jgmizFylterYvH NMhRDKqFRUzdcCUg5JjdZAHAGa47NCg+yfxjZEtihAK2+hmUpoCf0/PSzO5BbOxX 95fDvcFADK2/3pI7OMJC3jPEpL/8SiEmEDPfISU38xiD4EOH36fYZ4wTZ7lp6G9/ XjTojdSWG9WnV2WXsGD53sMApxTR+im5IRffRVrNTECl -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:19 2026 by rpki-client