This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/AMYHtkdmm7JS4Ofjibck2cl30Kc.roa File: AMYHtkdmm7JS4Ofjibck2cl30Kc.roa (raw, json) Hash identifier: UzWr7n7jg70LK3JVYb3K3qtMIw+QPEK/C5HkvTLOsNw= Subject key identifier: 00:C6:07:B6:47:66:9B:B2:52:E0:E7:E3:89:B7:24:D9:C9:77:D0:A7 Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Certificate serial: 019B079DA382578B514F74E8F70EE2171791 Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/AMYHtkdmm7JS4Ofjibck2cl30Kc.roa Signing time: Wed 10 Dec 2025 09:35:29 +0000 ROA not before: Wed 10 Dec 2025 09:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 680 IP address blocks: 132.252.0.0/16 maxlen: 16 134.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:9d:a3:82:57:8b:51:4f:74:e8:f7:0e:e2:17:17:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Validity Not Before: Dec 10 09:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=00c607b647669bb252e0e7e389b724d9c977d0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:d2:eb:72:28:66:aa:a0:fa:af:df:c3:7a: 32:40:0d:c5:56:a4:43:f3:50:8a:ef:22:89:2e:37: e6:d9:4b:44:4e:ce:2a:8a:45:57:54:1c:42:15:88: af:62:8d:9c:24:f3:fd:6d:c6:2f:92:6e:a8:3f:cb: 0b:65:14:e2:e2:1a:4d:8d:f9:ae:33:8f:84:85:fd: 6f:fb:d9:da:b5:08:94:f0:fd:24:e8:da:2c:ac:07: a2:3a:46:f6:8e:0c:4b:b7:ff:9a:49:a4:0a:14:b6: 4c:c6:91:c4:f7:98:cd:71:58:da:8a:2c:f4:89:b2: 3e:f2:74:9f:54:fa:6d:2a:b5:c4:90:08:a1:b5:5f: 3e:31:3c:80:f0:92:61:01:bb:c0:08:5b:a8:6e:7a: 20:39:ce:0d:97:6e:09:16:29:38:5d:05:3c:55:13: 85:e8:30:10:af:8d:d3:d1:f8:6b:e7:a7:b9:96:fb: 37:c8:e6:80:2e:fe:c8:c2:87:44:71:dd:0a:d1:f8: 1a:b2:11:f6:25:55:2d:b3:53:69:5b:b9:69:a0:15: 49:32:09:69:03:bd:7e:ed:c7:0e:6f:4d:bd:4e:d9: 71:c9:96:2f:20:59:12:99:ea:45:d5:12:47:68:73: 5d:8a:41:54:33:3b:b9:53:1c:51:dd:c7:81:8a:28: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:07:B6:47:66:9B:B2:52:E0:E7:E3:89:B7:24:D9:C9:77:D0:A7 X509v3 Authority Key Identifier: keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/AMYHtkdmm7JS4Ofjibck2cl30Kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.252.0.0/16 134.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:21:2b:1e:d6:5f:7a:15:9c:a2:7a:7b:8d:f4:64:ae:61:3d: 0e:cf:e4:0c:4e:9b:ea:53:5b:84:68:fc:d9:b7:24:7f:3f:26: 1a:f4:c7:db:50:47:9b:a6:c2:f3:12:c4:94:8b:a4:8d:e7:70: 03:03:95:c8:84:55:d7:de:07:b9:12:0c:15:12:55:71:56:ae: 36:ef:24:61:bb:e8:ed:ed:d9:70:a8:15:2f:7e:23:db:67:9d: f2:cc:f8:21:53:3f:f2:0d:ea:d5:e1:ce:75:c2:d9:26:4e:83: e3:fb:eb:e3:3f:88:95:ac:cc:eb:07:8a:a0:66:d9:39:cb:a8: 07:8f:b1:c8:0c:20:51:d0:b6:ad:12:9f:3c:05:90:bc:bb:3e: dd:5c:47:65:6b:1d:e2:d7:8a:ac:4f:0b:43:3e:f5:ae:6a:cf: d0:40:da:c5:b1:ec:91:13:f4:14:9c:b7:f1:dd:e8:40:53:c3: 7f:e9:f6:ab:03:66:78:78:a2:08:ff:fb:32:dd:6e:e3:e0:3c: 88:27:0b:8f:69:1a:cf:20:e0:76:b1:3e:7f:87:bf:fe:91:dc: 80:44:97:db:6d:9a:42:30:a4:5f:1c:f8:cc:2e:65:3e:3e:62: 4e:c2:63:e1:83:e1:49:97:3f:f7:50:e0:78:c3:d7:54:0d:07: 49:f0:10:81 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZsHnaOCV4tRT3To9w7iFxeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZGJlYTA3NTNkZjA4M2U1NzgyYmI5ZjM4MGI1ZDc5OWNi NzhhMDYwHhcNMjUxMjEwMDkzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGM2MDdiNjQ3NjY5YmIyNTJlMGU3ZTM4OWI3MjRkOWM5NzdkMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCfS63IoZqqg+q/fw3oyQA3FVqRD 81CK7yKJLjfm2UtETs4qikVXVBxCFYivYo2cJPP9bcYvkm6oP8sLZRTi4hpNjfmu M4+Ehf1v+9natQiU8P0k6NosrAeiOkb2jgxLt/+aSaQKFLZMxpHE95jNcVjaiiz0 ibI+8nSfVPptKrXEkAihtV8+MTyA8JJhAbvACFuobnogOc4Nl24JFik4XQU8VROF 6DAQr43T0fhr56e5lvs3yOaALv7IwodEcd0K0fgashH2JVUts1NpW7lpoBVJMglp A71+7ccOb029TtlxyZYvIFkSmepF1RJHaHNdikFUMzu5UxxR3ceBiihwIwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFADGB7ZHZpuyUuDn44m3JNnJd9CnMB8GA1UdIwQY MBaAFHDb6gdT3wg+V4K7nzgLXXmct4oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjkt MmEwY2YxMzE3M2Q4LzEvQU1ZSHRrZG1tN0pTNE9mamliY2syY2wzMEtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjktMmEwY2YxMzE3M2Q4 LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAhPwDAwCG WzANBgkqhkiG9w0BAQsFAAOCAQEAAyErHtZfehWconp7jfRkrmE9Ds/kDE6b6lNb hGj82bckfz8mGvTH21BHm6bC8xLElIukjedwAwOVyIRV194HuRIMFRJVcVauNu8k Ybvo7e3ZcKgVL34j22ed8sz4IVM/8g3q1eHOdcLZJk6D4/vr4z+IlazM6weKoGbZ OcuoB4+xyAwgUdC2rRKfPAWQvLs+3VxHZWsd4teKrE8LQz71rmrP0EDaxbHskRP0 FJy38d3oQFPDf+n2qwNmeHiiCP/7Mt1u4+A8iCcLj2kazyDgdrE+f4e//pHcgESX 222aQjCkXxz4zC5lPj5iTsJj4YPhSZc/91DgeMPXVA0HSfAQgQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:43 2025 by rpki-client