This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/aAuRClb5ZpF-T7ovaudLIxy3Nok.roa File: aAuRClb5ZpF-T7ovaudLIxy3Nok.roa (raw, json) Hash identifier: yAT93gOevF8r1eFySwpXji5F608x6AN4AQyZBropil0= Subject key identifier: 68:0B:91:0A:56:F9:66:91:7E:4F:BA:2F:6A:E7:4B:23:1C:B7:36:89 Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Certificate serial: 019B26693CE0FC5C137D18AEF4F78FBDD603 Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/aAuRClb5ZpF-T7ovaudLIxy3Nok.roa Signing time: Tue 16 Dec 2025 09:06:29 +0000 ROA not before: Tue 16 Dec 2025 09:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1136 IP address blocks: 46.17.24.0/24 maxlen: 24 46.17.25.0/24 maxlen: 24 46.17.26.0/24 maxlen: 24 46.17.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:69:3c:e0:fc:5c:13:7d:18:ae:f4:f7:8f:bd:d6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Validity Not Before: Dec 16 09:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680b910a56f966917e4fba2f6ae74b231cb73689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:ad:10:9c:a3:5c:70:5a:72:9c:5b:5d:59: 84:01:1a:02:66:49:33:cf:fd:b2:be:b7:cc:38:ac: f6:98:95:90:a0:d4:e4:bc:cc:6e:37:a8:07:34:61: 16:c8:fe:18:ec:ab:9c:63:13:9d:fa:91:73:0b:c6: 28:8e:7d:50:f4:3a:d2:32:a1:e0:ac:89:4c:b9:a3: fb:70:0d:e6:12:d3:6d:0d:1e:64:16:47:60:62:2f: 48:d3:2c:76:01:54:4a:bd:af:36:74:6a:83:33:16: 3f:d1:e4:82:57:25:ed:36:d0:6c:da:81:66:99:d5: 3f:14:7e:55:23:7e:01:b8:2a:fe:76:cf:69:2c:31: ab:7d:5a:33:98:88:d5:8e:f0:04:ce:e7:27:ca:9c: b9:16:c6:fa:4b:86:cc:ca:07:4b:ad:73:b5:31:a1: 64:92:4a:33:c5:b4:a2:7f:57:95:f1:bf:7b:62:b9: f7:4a:14:9c:20:28:4a:cc:e0:d7:95:22:48:30:46: 62:45:c4:b2:2c:20:91:87:57:c1:f6:eb:01:a0:ec: a6:54:02:02:f8:b4:66:89:3d:b4:c4:bd:3b:23:71: e3:e6:b0:5c:48:51:60:b6:6b:52:ad:89:28:89:82: 10:04:a7:9e:7c:c6:85:08:34:df:d9:f1:21:97:69: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0B:91:0A:56:F9:66:91:7E:4F:BA:2F:6A:E7:4B:23:1C:B7:36:89 X509v3 Authority Key Identifier: keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/aAuRClb5ZpF-T7ovaudLIxy3Nok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.24.0/22 Signature Algorithm: sha256WithRSAEncryption 23:56:ad:bc:4d:a0:4f:39:1a:28:99:04:40:f6:82:4a:be:ad: 24:43:60:a7:b1:de:72:31:0c:27:e8:70:e0:12:11:63:86:ba: 39:9a:8e:5d:12:06:f8:cf:ba:ec:19:fa:47:60:57:67:7a:6a: 48:36:ae:b5:8c:78:f7:8f:d4:81:1f:71:72:fb:b0:75:9b:12: 0a:21:a9:9e:2d:bd:c2:05:da:c7:10:b9:e5:51:6d:1a:fb:fa: 27:26:be:74:95:95:08:d9:e1:d6:7a:4a:69:fa:33:a3:98:03: c9:ef:9c:9a:6b:d1:55:55:8f:75:59:bb:7e:2d:6c:ff:77:c5: d7:52:d6:a3:ef:51:30:f1:1e:ea:41:b8:c1:00:fd:4e:c2:57: 28:2a:4d:75:b1:87:a0:97:13:54:45:5b:27:82:17:22:5f:4e: 3d:d8:f5:57:2b:49:6d:b0:b0:62:75:f2:08:aa:8c:cb:28:a0: 65:9c:ff:2b:bd:25:6b:fc:56:93:27:ae:f6:61:e2:84:52:68: 93:3f:27:ff:1f:40:62:3a:54:c5:74:55:c0:52:a1:4f:9b:75: 80:a1:d4:79:5c:ba:66:73:d0:80:cc:db:fa:95:17:16:72:f8: 8f:3d:88:5c:bf:e1:c1:59:a3:c0:83:23:84:c4:9b:db:07:d9: 67:ce:8e:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsmaTzg/FwTfRiu9PePvdYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0 NmY3ZTAwHhcNMjUxMjE2MDkwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODBiOTEwYTU2Zjk2NjkxN2U0ZmJhMmY2YWU3NGIyMzFjYjczNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaOtEJyjXHBacpxbXVmEARoCZkkz z/2yvrfMOKz2mJWQoNTkvMxuN6gHNGEWyP4Y7KucYxOd+pFzC8Yojn1Q9DrSMqHg rIlMuaP7cA3mEtNtDR5kFkdgYi9I0yx2AVRKva82dGqDMxY/0eSCVyXtNtBs2oFm mdU/FH5VI34BuCr+ds9pLDGrfVozmIjVjvAEzucnypy5Fsb6S4bMygdLrXO1MaFk kkozxbSif1eV8b97Yrn3ShScIChKzODXlSJIMEZiRcSyLCCRh1fB9usBoOymVAIC +LRmiT20xL07I3Hj5rBcSFFgtmtSrYkoiYIQBKeefMaFCDTf2fEhl2mU/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgLkQpW+WaRfk+6L2rnSyMctzaJMB8GA1UdIwQY MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt YmRkYzE4YzdhM2YzLzEvYUF1UkNsYjVacEYtVDdvdmF1ZExJeHkzTm9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLhEYMA0G CSqGSIb3DQEBCwUAA4IBAQAjVq28TaBPORoomQRA9oJKvq0kQ2Cnsd5yMQwn6HDg EhFjhro5mo5dEgb4z7rsGfpHYFdnempINq61jHj3j9SBH3Fy+7B1mxIKIameLb3C BdrHELnlUW0a+/onJr50lZUI2eHWekpp+jOjmAPJ75yaa9FVVY91Wbt+LWz/d8XX Utaj71Ew8R7qQbjBAP1OwlcoKk11sYeglxNURVsnghciX0492PVXK0ltsLBidfII qozLKKBlnP8rvSVr/FaTJ672YeKEUmiTPyf/H0BiOlTFdFXAUqFPm3WAodR5XLpm c9CAzNv6lRcWcviPPYhcv+HBWaPAgyOExJvbB9lnzo53 -----END CERTIFICATE-----Generated at Thu Dec 18 17:55:16 2025 by rpki-client