This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa File: AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa (raw, json) Hash identifier: YHKQlEMTRKZ44Ezw9Vkv/ST4kDSY/aZ7S8Y4/+4q0FA= Subject key identifier: 00:C5:86:75:52:72:EA:3D:4B:A2:EB:3F:DD:6D:03:A7:C8:1A:E4:12 Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B7910E02EE0DE4224C3EA728C9BADED62 Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 85.192.48.0/24 maxlen: 24 85.192.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e0:2e:e0:de:42:24:c3:ea:72:8c:9b:ad:ed:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00c586755272ea3d4ba2eb3fdd6d03a7c81ae412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:81:54:97:71:d2:c3:ca:5f:da:9a:06:c3: f8:fd:f8:35:dd:c7:a1:2a:7f:49:30:b6:5f:eb:fa: f4:a5:33:74:98:de:67:e0:3d:1f:47:02:f4:f8:71: 37:9f:34:6f:c8:b9:01:f3:41:40:0a:27:9f:30:8a: c3:fc:d1:14:1b:9c:dd:db:3c:f3:ce:46:ea:e5:10: bb:18:6c:03:fa:10:bd:91:cc:63:3a:7f:eb:e1:d5: 81:b4:4d:69:34:e2:87:b2:4d:ae:22:ca:c9:d2:6a: 9d:c2:f4:d2:8c:70:18:83:59:3f:83:7e:02:86:b4: 70:97:3d:c4:98:9d:e7:e1:f1:af:29:4a:57:da:b0: 68:1a:3b:c3:45:dc:74:da:42:29:0a:fc:9d:4f:e9: 5a:ed:1e:ee:bc:1c:ec:70:25:84:e3:f1:67:4f:d9: 29:1f:24:17:fd:e6:59:2c:1e:52:34:42:44:45:9e: 2c:c3:4d:df:12:dd:69:41:d2:e5:30:52:af:98:04: 44:f4:86:e2:43:f6:f4:c6:fa:29:63:51:e5:3d:79: 5c:e2:8b:9a:36:04:5c:63:a6:bf:62:01:fa:99:46: f6:4c:f2:ea:9d:0b:29:40:10:2e:27:a9:ea:9b:aa: f7:d7:d3:ec:37:7e:86:ca:c0:8a:be:be:93:06:4c: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:86:75:52:72:EA:3D:4B:A2:EB:3F:DD:6D:03:A7:C8:1A:E4:12 X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.192.48.0/23 Signature Algorithm: sha256WithRSAEncryption cc:bc:29:50:a9:d1:f9:72:08:23:0c:ab:f3:8d:bb:61:c3:13: 2c:56:7b:f8:28:e5:e4:8b:25:d8:4c:a7:11:57:f6:e1:0f:63: 74:6a:5d:19:0d:91:fd:93:b1:31:b0:35:76:19:a4:fe:df:8a: 89:be:32:77:52:24:12:e2:82:97:2e:14:d4:ad:9a:37:2b:0b: c4:99:0f:b7:12:23:5c:4f:0f:1a:ea:b8:fe:00:4b:0e:ef:7d: 40:7f:3e:e0:8c:0a:2d:92:18:6c:57:c7:00:40:d3:67:b3:14: 3d:c3:41:ec:37:d7:9f:fc:9b:29:fa:55:97:f2:24:73:84:a4: 53:c7:05:f7:11:90:0c:88:f7:d7:0a:af:4e:0b:34:9b:e1:1b: 01:02:90:3c:75:5e:6f:16:ca:71:48:60:ca:f1:a2:bf:64:a7: c3:1e:6e:d7:14:9f:e8:83:f5:04:a2:c3:57:25:f4:64:b2:f6: 35:5a:82:8e:05:bd:4a:04:2e:5f:80:3e:dc:e5:75:0a:8f:ac: f9:98:f1:1c:09:df:95:93:29:d6:5d:62:6a:f3:65:d5:6d:67: db:bd:e2:1c:e3:33:4d:16:c6:f4:31:f7:56:93:ff:bd:d7:79: a5:10:ee:c5:23:42:31:9c:30:e3:4b:d1:93:9d:9c:e0:19:05: f7:7d:95:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOAu4N5CJMPqcoybre1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGM1ODY3NTUyNzJlYTNkNGJhMmViM2ZkZDZkMDNhN2M4MWFlNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IGBVJdx0sPKX9qaBsP4/fg13ceh Kn9JMLZf6/r0pTN0mN5n4D0fRwL0+HE3nzRvyLkB80FACiefMIrD/NEUG5zd2zzz zkbq5RC7GGwD+hC9kcxjOn/r4dWBtE1pNOKHsk2uIsrJ0mqdwvTSjHAYg1k/g34C hrRwlz3EmJ3n4fGvKUpX2rBoGjvDRdx02kIpCvydT+la7R7uvBzscCWE4/FnT9kp HyQX/eZZLB5SNEJERZ4sw03fEt1pQdLlMFKvmARE9IbiQ/b0xvopY1HlPXlc4oua NgRcY6a/YgH6mUb2TPLqnQspQBAuJ6nqm6r319PsN36GysCKvr6TBkx1HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADFhnVScuo9S6LrP91tA6fIGuQSMB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEvQU1XR2RWSnk2ajFMb3VzXzNXMERwOGdhNUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVcAwMA0G CSqGSIb3DQEBCwUAA4IBAQDMvClQqdH5cggjDKvzjbthwxMsVnv4KOXkiyXYTKcR V/bhD2N0al0ZDZH9k7ExsDV2GaT+34qJvjJ3UiQS4oKXLhTUrZo3KwvEmQ+3EiNc Tw8a6rj+AEsO731Afz7gjAotkhhsV8cAQNNnsxQ9w0HsN9ef/Jsp+lWX8iRzhKRT xwX3EZAMiPfXCq9OCzSb4RsBApA8dV5vFspxSGDK8aK/ZKfDHm7XFJ/og/UEosNX JfRksvY1WoKOBb1KBC5fgD7c5XUKj6z5mPEcCd+VkynWXWJq82XVbWfbveIc4zNN Fsb0MfdWk/+913mlEO7FI0IxnDDjS9GTnZzgGQX3fZUE -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:10 2026 by rpki-client