This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/M-9YE1slxNWHLlO72hcZMN7Nnuc.roa File: M-9YE1slxNWHLlO72hcZMN7Nnuc.roa (raw, json) Hash identifier: Q8/5I5/LH/Zv0/BqVjkVb7AZhA6oBhOEW9USBu0nAUg= Subject key identifier: 33:EF:58:13:5B:25:C4:D5:87:2E:53:BB:DA:17:19:30:DE:CD:9E:E7 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37F8B1FF7AF3EAFB20CD4FB219D38F Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/M-9YE1slxNWHLlO72hcZMN7Nnuc.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209154 IP address blocks: 31.145.8.0/22 maxlen: 22 31.145.9.0/24 maxlen: 24 31.145.10.0/24 maxlen: 24 31.145.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f8:b1:ff:7a:f3:ea:fb:20:cd:4f:b2:19:d3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33ef58135b25c4d5872e53bbda171930decd9ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:6f:56:4e:72:c0:3e:e8:f7:a1:51:e6:54: 9d:60:9a:ad:55:64:cd:d2:c5:3f:11:3c:61:a8:4f: cb:68:98:2d:34:fa:98:63:16:44:61:05:75:22:d0: c2:ca:9b:8e:65:d2:64:40:4f:e5:6e:04:77:23:a6: f7:df:b7:85:19:81:fc:e0:e4:26:76:78:3f:71:b1: 18:d0:03:53:3d:21:57:31:98:9b:ca:f4:d7:85:c1: 8e:92:4e:17:4e:1e:34:57:ba:65:07:24:0c:e5:fd: 7a:61:0e:4b:b5:d7:89:f6:d5:c7:52:f4:b2:a3:0c: 51:a3:4a:66:d0:77:68:83:d3:3e:51:f3:f8:ef:07: d1:4a:9c:00:4d:8a:38:20:c9:a5:74:13:bc:de:6d: a7:31:95:66:9b:51:da:7c:7a:ba:80:46:ae:e6:3e: aa:7d:ec:58:8c:cc:7e:49:f1:bd:fe:64:7d:72:b2: 8b:a0:b7:1e:a8:92:89:c1:cf:f1:b3:11:04:9b:35: 65:e3:29:c1:8b:b3:f5:8c:56:89:c4:c7:68:a8:2e: 11:5a:d3:74:eb:57:91:dc:c6:b1:64:7c:95:0d:13: f0:bf:ac:63:74:1d:b5:5f:45:50:57:36:95:0a:18: fa:32:35:c6:1b:8a:b7:01:75:14:db:1b:64:21:ce: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EF:58:13:5B:25:C4:D5:87:2E:53:BB:DA:17:19:30:DE:CD:9E:E7 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/M-9YE1slxNWHLlO72hcZMN7Nnuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.145.8.0/22 Signature Algorithm: sha256WithRSAEncryption 65:60:9e:a1:43:7f:8e:7b:54:b9:71:e6:ca:5c:a7:45:d6:54: ed:0a:b0:da:9a:ce:de:74:da:cf:bd:78:68:2a:b4:cd:e8:8c: 1c:77:4e:be:5f:d0:13:8a:8e:78:e5:2c:c3:1d:41:77:f0:5f: 1e:fe:32:15:15:d0:35:0a:1c:67:22:ba:4a:b9:06:11:c6:8c: c2:a1:d4:1a:22:18:e6:98:e8:31:2d:c5:f2:8a:3a:d7:f2:ba: 49:2d:28:67:f6:65:92:51:6f:59:df:05:b5:54:da:d7:6a:4d: a7:9a:fa:ae:6e:a7:ba:20:ae:c5:27:e8:72:34:79:d7:fb:57: 59:bd:c5:b2:1d:f2:9f:0b:57:67:4f:e2:58:13:d9:0a:0d:53: cb:33:72:4e:65:fb:d7:a3:ab:39:af:79:27:c8:51:3c:4e:a7: 57:93:3b:c2:45:4e:7d:26:3c:2b:6e:d1:0d:af:a6:56:8b:6c: 3d:e4:56:1f:5f:0f:5b:3b:99:85:02:02:e9:4b:11:33:55:a5: da:cb:5e:2c:0e:19:a6:f7:0a:b4:97:31:ec:8c:a8:5a:b3:fc: 54:9e:e9:91:78:94:d0:e1:db:f1:84:05:97:95:6b:94:78:ea: 74:93:63:53:fb:97:53:16:b5:18:6f:fe:45:84:ba:00:f7:a1: 86:05:01:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/ix/3rz6vsgzU+yGdOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2VmNTgxMzViMjVjNGQ1ODcyZTUzYmJkYTE3MTkzMGRlY2Q5ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiexvVk5ywD7o96FR5lSdYJqtVWTN 0sU/ETxhqE/LaJgtNPqYYxZEYQV1ItDCypuOZdJkQE/lbgR3I6b337eFGYH84OQm dng/cbEY0ANTPSFXMZibyvTXhcGOkk4XTh40V7plByQM5f16YQ5LtdeJ9tXHUvSy owxRo0pm0Hdog9M+UfP47wfRSpwATYo4IMmldBO83m2nMZVmm1HafHq6gEau5j6q fexYjMx+SfG9/mR9crKLoLceqJKJwc/xsxEEmzVl4ynBi7P1jFaJxMdoqC4RWtN0 61eR3MaxZHyVDRPwv6xjdB21X0VQVzaVChj6MjXGG4q3AXUU2xtkIc7l9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPvWBNbJcTVhy5Tu9oXGTDezZ7nMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvTS05WUUxc2x4TldITGxPNzJoY1pNTjdObnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH5EIMA0G CSqGSIb3DQEBCwUAA4IBAQBlYJ6hQ3+Oe1S5cebKXKdF1lTtCrDams7edNrPvXho KrTN6Iwcd06+X9ATio545SzDHUF38F8e/jIVFdA1ChxnIrpKuQYRxozCodQaIhjm mOgxLcXyijrX8rpJLShn9mWSUW9Z3wW1VNrXak2nmvqubqe6IK7FJ+hyNHnX+1dZ vcWyHfKfC1dnT+JYE9kKDVPLM3JOZfvXo6s5r3knyFE8TqdXkzvCRU59JjwrbtEN r6ZWi2w95FYfXw9bO5mFAgLpSxEzVaXay14sDhmm9wq0lzHsjKhas/xUnumReJTQ 4dvxhAWXlWuUeOp0k2NT+5dTFrUYb/5FhLoA96GGBQH6 -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:38 2026 by rpki-client