This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/AmIZuqZHHcgk1I4Yv8Fksq54gtA.roa File: AmIZuqZHHcgk1I4Yv8Fksq54gtA.roa (raw, json) Hash identifier: mhM5ldARRyjeVhdq5E0o5t3UQw03298D0WnHzkHtCeE= Subject key identifier: 02:62:19:BA:A6:47:1D:C8:24:D4:8E:18:BF:C1:64:B2:AE:78:82:D0 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 019BEA173F85363E32F85C17C59EE140509F Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/AmIZuqZHHcgk1I4Yv8Fksq54gtA.roa Signing time: Fri 23 Jan 2026 09:02:30 +0000 ROA not before: Fri 23 Jan 2026 09:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64444 IP address blocks: 62.56.137.0/24 maxlen: 24 81.199.62.0/24 maxlen: 24 81.199.83.0/24 maxlen: 24 81.199.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:17:3f:85:36:3e:32:f8:5c:17:c5:9e:e1:40:50:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jan 23 09:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=026219baa6471dc824d48e18bfc164b2ae7882d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6a:aa:f6:a6:75:f2:93:de:3c:c7:09:9a:ea: 09:77:c4:08:a6:58:8d:ca:8f:a6:8d:e2:52:11:bd: 92:13:f7:88:69:08:2a:3d:a0:d7:08:bf:38:20:69: 7a:7e:58:5c:3c:a3:9a:0f:73:45:45:85:ff:23:62: d1:9b:32:04:74:e9:82:17:e5:0e:fd:7c:c2:b6:55: 44:81:70:57:a8:ff:0f:a7:4d:93:57:b2:af:17:d7: ec:80:3b:30:7b:5f:68:06:53:35:e0:6e:01:82:5c: 45:5e:75:b3:86:9d:6b:8a:5a:85:69:39:e5:0c:fa: 2b:f4:49:f7:7b:03:63:53:64:dc:d0:d2:4a:69:11: 8b:ed:c5:52:8c:22:ca:6e:79:88:7b:e1:80:0b:f4: e2:6d:c5:c9:cf:24:c8:da:d6:37:7a:3b:09:a6:c9: a8:2b:cd:4d:ca:96:7b:e7:5e:7a:63:af:6c:98:f8: b8:08:89:4a:03:25:71:08:de:bd:0b:4c:b2:44:43: 94:f7:ba:04:db:6d:48:9c:65:cf:e7:8d:cc:4c:df: 1d:06:c9:a8:18:a1:e2:98:80:36:c6:ee:21:2b:bc: 56:b2:6f:b5:fb:bb:d7:5a:07:81:81:c3:8b:9f:ef: cb:5a:90:8b:68:66:f1:d3:31:09:60:2b:2d:83:53: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:62:19:BA:A6:47:1D:C8:24:D4:8E:18:BF:C1:64:B2:AE:78:82:D0 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/AmIZuqZHHcgk1I4Yv8Fksq54gtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.56.137.0/24 81.199.62.0/24 81.199.83.0/24 81.199.94.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d1:f5:77:5b:01:3e:4a:8a:3a:ff:58:b0:3c:1f:72:ed:70: 1b:e9:c0:88:05:b8:59:12:13:89:2c:de:92:a1:a3:a8:31:13: e0:75:cd:71:5b:51:ea:43:c8:6a:87:38:5d:7b:a7:63:8b:18: 5e:d5:8c:b6:40:b2:a3:69:dc:b3:da:43:44:41:7b:9b:ee:bd: 8c:c6:28:9a:9f:8c:73:2d:d8:4e:dd:29:0b:0e:38:e0:2d:0a: 54:4d:84:f3:79:0d:31:24:15:0b:cc:1a:82:78:3d:c5:f6:ab: 1a:ab:e2:5d:e4:a2:25:5d:04:5a:09:ec:91:74:ee:21:21:0d: 2e:db:e4:71:62:37:19:11:53:df:51:60:ed:17:01:1f:7d:38: 5d:91:f9:f9:39:f7:f9:22:2f:a4:8d:1f:fa:31:3e:c3:f1:fc: a5:42:ab:2f:b5:a0:4b:d0:b6:3e:e1:40:6d:13:57:2c:84:40: a3:e4:c4:ad:65:ef:00:5c:3e:fb:bb:8c:aa:d5:ce:2f:60:1e: 26:a9:f7:b8:dc:13:87:9a:38:bf:95:0d:ce:e7:8d:bc:66:17: 16:43:0a:9c:0b:cc:46:f9:84:3d:b4:22:d4:6e:e7:b9:67:a0: 9b:79:ba:e7:92:e0:f0:ca:24:85:8f:e9:46:56:20:c0:88:fe: 84:86:7a:d8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvqFz+FNj4y+FwXxZ7hQFCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjYwMTIzMDkwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjYyMTliYWE2NDcxZGM4MjRkNDhlMThiZmMxNjRiMmFlNzg4MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gqq9qZ18pPePMcJmuoJd8QIpliN yo+mjeJSEb2SE/eIaQgqPaDXCL84IGl6flhcPKOaD3NFRYX/I2LRmzIEdOmCF+UO /XzCtlVEgXBXqP8Pp02TV7KvF9fsgDswe19oBlM14G4BglxFXnWzhp1rilqFaTnl DPor9En3ewNjU2Tc0NJKaRGL7cVSjCLKbnmIe+GAC/TibcXJzyTI2tY3ejsJpsmo K81NypZ75156Y69smPi4CIlKAyVxCN69C0yyREOU97oE221InGXP543MTN8dBsmo GKHimIA2xu4hK7xWsm+1+7vXWgeBgcOLn+/LWpCLaGbx0zEJYCstg1OWKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAJiGbqmRx3IJNSOGL/BZLKueILQMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvQW1JWnVxWkhIY2drMUk0WXY4RmtzcTU0Z3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPjiJAwQA Ucc+AwQAUcdTAwQAUcdeMA0GCSqGSIb3DQEBCwUAA4IBAQCo0fV3WwE+Soo6/1iw PB9y7XAb6cCIBbhZEhOJLN6SoaOoMRPgdc1xW1HqQ8hqhzhde6djixhe1Yy2QLKj adyz2kNEQXub7r2Mxiian4xzLdhO3SkLDjjgLQpUTYTzeQ0xJBULzBqCeD3F9qsa q+Jd5KIlXQRaCeyRdO4hIQ0u2+RxYjcZEVPfUWDtFwEffThdkfn5Off5Ii+kjR/6 MT7D8fylQqsvtaBL0LY+4UBtE1cshECj5MStZe8AXD77u4yq1c4vYB4mqfe43BOH mji/lQ3O5428ZhcWQwqcC8xG+YQ9tCLUbue5Z6CbebrnkuDwyiSFj+lGViDAiP6E hnrY -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:16 2026 by rpki-client