This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/k2hVczUytlMTlC7CthfEzA0_AVM.roa File: k2hVczUytlMTlC7CthfEzA0_AVM.roa (raw, json) Hash identifier: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk= Subject key identifier: 93:68:55:73:35:32:B6:53:13:94:2E:C2:B6:17:C4:CC:0D:3F:01:53 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019BEC1271CF81E2BC2D588A07A2451AB0CF Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/k2hVczUytlMTlC7CthfEzA0_AVM.roa Signing time: Fri 23 Jan 2026 18:16:30 +0000 ROA not before: Fri 23 Jan 2026 18:16:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 5.182.184.0/24 maxlen: 24 104.232.37.0/24 maxlen: 24 162.218.92.0/24 maxlen: 24 185.187.213.0/24 maxlen: 24 185.230.120.0/24 maxlen: 24 2a0a:8f40:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:12:71:cf:81:e2:bc:2d:58:8a:07:a2:45:1a:b0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 23 18:16:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=936855733532b65313942ec2b617c4cc0d3f0153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:ad:fa:af:d2:f1:7a:87:2d:54:59:80:79: 2a:ba:38:07:c3:eb:5d:91:03:97:f6:2d:7f:70:e6: 6a:64:5f:34:79:53:95:15:45:f8:02:81:b4:88:67: ce:4a:bf:e5:86:70:58:f0:44:51:d5:da:b2:8b:c1: 18:db:d1:17:58:15:49:d8:ea:5e:a0:c4:69:8c:c8: 30:ee:3f:f4:91:e7:c7:cf:ee:bd:37:bf:11:a6:ad: 8b:a5:c7:89:68:cb:5b:b4:2a:6d:cc:06:e3:1d:73: da:34:a0:5b:b0:16:6c:93:87:ac:29:31:20:46:9e: 97:9d:ee:c3:c5:28:c9:d5:58:7a:92:6e:24:bc:5a: c1:cf:99:c4:6e:48:f1:23:10:66:fb:cb:84:9f:22: c3:d8:a1:6d:17:ba:08:e2:06:2e:d7:60:eb:b8:d6: 00:f7:ed:e3:ba:c5:c3:ca:ec:3e:66:29:57:21:7d: f9:5b:2b:8d:2f:bb:e0:1a:72:69:fc:5f:88:25:33: d5:21:d6:a5:49:53:f4:3e:fd:c9:2c:8e:7a:80:a4: 51:3f:85:28:f4:f6:95:60:81:5a:1f:2d:d6:d8:57: ae:f5:54:d2:f4:95:e0:88:05:65:de:15:16:54:b3: 57:01:64:d4:3f:54:b6:52:b0:d7:d8:1d:12:8e:cb: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:68:55:73:35:32:B6:53:13:94:2E:C2:B6:17:C4:CC:0D:3F:01:53 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/k2hVczUytlMTlC7CthfEzA0_AVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.184.0/24 104.232.37.0/24 162.218.92.0/24 185.187.213.0/24 185.230.120.0/24 IPv6: 2a0a:8f40:31::/48 Signature Algorithm: sha256WithRSAEncryption 3e:89:38:4d:57:40:42:1b:88:65:d2:3d:da:2d:9c:e1:e5:42: a7:47:11:49:b8:b6:49:16:82:ea:0d:02:26:92:e8:b1:f0:95: 17:a8:46:3a:9f:bb:92:73:7c:27:c5:93:26:4a:33:a1:f3:43: ed:98:a8:99:5e:6e:33:b5:1e:a0:b9:e7:9c:4d:e4:a1:22:2b: b4:59:dd:91:59:e7:df:e4:2d:d6:66:19:b5:1e:9f:96:43:ce: e1:f1:e2:24:5c:3b:0a:f1:a1:59:59:e5:2c:95:65:84:eb:a7: a6:7a:ac:f7:e5:f9:5f:5b:b4:51:e2:b4:52:0a:90:d8:e5:3c: d4:0d:2b:b5:20:bd:c6:22:cd:78:35:15:c3:22:40:a3:55:d0: 4d:6c:9b:1c:ab:85:81:a7:b0:50:74:92:22:63:89:4a:a1:6d: 96:fe:8f:9a:72:f9:fd:db:13:84:79:02:bc:2a:cb:cc:c1:84: 04:8f:ac:e7:80:fb:96:5d:3e:4e:5c:69:a2:67:ea:ab:c7:e3: 58:71:ae:0d:df:3a:7b:4a:29:db:ee:46:d7:d8:b2:f7:8b:2e: 66:6e:c8:d6:5b:79:5c:f8:df:33:cb:b2:d0:0e:2d:43:94:3f: 9e:5e:0a:f3:4b:53:c2:f7:25:e0:00:ec:b1:62:1f:60:0f:b4: 4c:cb:8b:16 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZvsEnHPgeK8LViKB6JFGrDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTIzMTgxNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzY4NTU3MzM1MzJiNjUzMTM5NDJlYzJiNjE3YzRjYzBkM2YwMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSSt+q/S8XqHLVRZgHkqujgHw+td kQOX9i1/cOZqZF80eVOVFUX4AoG0iGfOSr/lhnBY8ERR1dqyi8EY29EXWBVJ2Ope oMRpjMgw7j/0kefHz+69N78Rpq2LpceJaMtbtCptzAbjHXPaNKBbsBZsk4esKTEg Rp6Xne7DxSjJ1Vh6km4kvFrBz5nEbkjxIxBm+8uEnyLD2KFtF7oI4gYu12DruNYA 9+3jusXDyuw+ZilXIX35WyuNL7vgGnJp/F+IJTPVIdalSVP0Pv3JLI56gKRRP4Uo 9PaVYIFaHy3W2Feu9VTS9JXgiAVl3hUWVLNXAWTUP1S2UrDX2B0Sjsuj5QIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFJNoVXM1MrZTE5QuwrYXxMwNPwFTMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvazJoVmN6VXl0bE1UbEM3Q3RoZkV6QTBfQVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQABba4AwQA aOglAwQAotpcAwQAubvVAwQAueZ4MA8EAgACMAkDBwAqCo9AADEwDQYJKoZIhvcN AQELBQADggEBAD6JOE1XQEIbiGXSPdotnOHlQqdHEUm4tkkWguoNAiaS6LHwlReo Rjqfu5JzfCfFkyZKM6HzQ+2YqJlebjO1HqC555xN5KEiK7RZ3ZFZ59/kLdZmGbUe n5ZDzuHx4iRcOwrxoVlZ5SyVZYTrp6Z6rPfl+V9btFHitFIKkNjlPNQNK7UgvcYi zXg1FcMiQKNV0E1smxyrhYGnsFB0kiJjiUqhbZb+j5py+f3bE4R5Arwqy8zBhASP rOeA+5ZdPk5caaJn6qvH41hxrg3fOntKKdvuRtfYsveLLmZuyNZbeVz43zPLstAO LUOUP55eCvNLU8L3JeAA7LFiH2APtEzLixY= -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:10 2026 by rpki-client