This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/M9VtHtBwZiyrmU9cQgJyCp9R5o4.roa File: M9VtHtBwZiyrmU9cQgJyCp9R5o4.roa (raw, json) Hash identifier: 3pDLehtqxff6QwHIJzpKnVjixMBpmhQJ+f1jqAsX7d4= Subject key identifier: 33:D5:6D:1E:D0:70:66:2C:AB:99:4F:5C:42:02:72:0A:9F:51:E6:8E Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E79754DA9D9123CBDA1289130F0C5 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/M9VtHtBwZiyrmU9cQgJyCp9R5o4.roa Signing time: Thu 01 Jan 2026 12:18:10 +0000 ROA not before: Thu 01 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 37.140.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:79:75:4d:a9:d9:12:3c:bd:a1:28:91:30:f0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33d56d1ed070662cab994f5c4202720a9f51e68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:34:74:7e:f3:6a:6d:0a:70:3f:b6:9b:39:1e: 4e:a8:ca:21:2e:75:4c:2b:f4:b2:cf:e0:5c:54:bc: d0:85:58:07:20:3f:83:02:88:e5:4d:52:77:31:a6: 80:e4:c1:cc:91:39:cb:72:92:ee:36:74:27:87:d3: f4:19:f5:00:6e:e1:c2:ad:78:24:a5:74:ab:f0:2f: 17:3d:20:9a:0c:0a:01:43:9c:fd:e2:04:ca:ff:b8: 52:ba:39:db:3e:58:5d:70:76:7c:e0:ab:ec:55:84: 0e:db:f8:d5:4f:29:dc:c4:5e:c2:c5:90:c0:c6:55: 3c:d3:07:1a:b3:f7:ef:90:95:ed:e1:0f:70:f9:7b: ec:a7:63:3a:af:fb:a2:09:d4:5f:3b:3a:6b:9d:1d: dc:ca:fa:9d:1c:2d:57:4c:06:b2:07:33:bd:cd:b1: 04:6c:fe:cd:bb:9e:c8:12:de:8a:ec:78:70:56:17: b3:29:f7:89:5a:1b:1f:b4:b0:58:d5:86:b5:4c:48: b5:8d:af:54:f4:24:5f:d0:cd:16:92:0a:af:61:43: 9c:4e:8e:7c:3f:25:68:6a:24:5b:6e:bb:af:8c:55: ae:c0:d2:e0:c7:09:6c:53:cb:5c:99:66:a0:e5:bd: 6b:87:fa:17:3b:46:59:c8:68:df:b1:10:0a:8f:b8: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D5:6D:1E:D0:70:66:2C:AB:99:4F:5C:42:02:72:0A:9F:51:E6:8E X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/M9VtHtBwZiyrmU9cQgJyCp9R5o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.250.0/24 Signature Algorithm: sha256WithRSAEncryption 27:bb:37:ac:e9:d5:66:0d:06:e9:c3:57:69:ad:57:4f:b2:07: c4:24:ab:6f:3a:0c:7a:c9:e3:fa:86:62:60:35:46:5f:8a:92: ef:88:c0:06:6e:b1:4e:d0:08:a1:11:e3:ca:d9:e8:42:a0:87: 21:63:72:42:b8:fd:db:f5:e8:58:ee:c9:22:c3:38:63:37:c6: 29:7c:b1:b4:bb:d3:7c:d3:dd:7d:d7:08:b6:04:eb:c0:99:94: c0:21:ee:c7:8c:e7:49:da:89:14:78:00:54:a6:0b:db:40:b6: 78:fa:d1:a9:ff:65:91:3f:30:17:15:6d:6b:86:77:61:e5:01: cc:80:f3:e5:80:4a:66:3c:6d:f1:f8:10:91:43:85:7e:c5:2c: 9e:f8:e1:d9:57:5d:8c:ee:4b:23:66:f5:23:78:ff:ea:c7:15: c0:68:bc:71:fb:62:a4:09:6a:3a:ad:e0:aa:4a:1c:10:13:e3: 8e:53:52:24:7c:76:78:d6:79:24:ec:98:5f:65:7d:94:e0:45: 47:66:c7:7f:9e:05:50:cf:56:a3:b3:a9:d9:6a:db:6f:84:9d: 60:a8:09:6c:21:85:e5:4b:74:f3:c2:3c:4e:a2:67:06:a1:27: c1:a5:7a:02:e3:b3:5e:a7:f7:b7:c6:1e:95:6d:be:e7:0e:8f: f2:78:37:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnl1TanZEjy9oSiRMPDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2Q1NmQxZWQwNzA2NjJjYWI5OTRmNWM0MjAyNzIwYTlmNTFlNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjR0fvNqbQpwP7abOR5OqMohLnVM K/Syz+BcVLzQhVgHID+DAojlTVJ3MaaA5MHMkTnLcpLuNnQnh9P0GfUAbuHCrXgk pXSr8C8XPSCaDAoBQ5z94gTK/7hSujnbPlhdcHZ84KvsVYQO2/jVTyncxF7CxZDA xlU80wcas/fvkJXt4Q9w+Xvsp2M6r/uiCdRfOzprnR3cyvqdHC1XTAayBzO9zbEE bP7Nu57IEt6K7HhwVhezKfeJWhsftLBY1Ya1TEi1ja9U9CRf0M0WkgqvYUOcTo58 PyVoaiRbbruvjFWuwNLgxwlsU8tcmWag5b1rh/oXO0ZZyGjfsRAKj7hFaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPVbR7QcGYsq5lPXEICcgqfUeaOMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvTTlWdEh0QndaaXlybVU5Y1FnSnlDcDlSNW80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYz6MA0G CSqGSIb3DQEBCwUAA4IBAQAnuzes6dVmDQbpw1dprVdPsgfEJKtvOgx6yeP6hmJg NUZfipLviMAGbrFO0AihEePK2ehCoIchY3JCuP3b9ehY7skiwzhjN8YpfLG0u9N8 09191wi2BOvAmZTAIe7HjOdJ2okUeABUpgvbQLZ4+tGp/2WRPzAXFW1rhndh5QHM gPPlgEpmPG3x+BCRQ4V+xSye+OHZV12M7ksjZvUjeP/qxxXAaLxx+2KkCWo6reCq ShwQE+OOU1IkfHZ41nkk7JhfZX2U4EVHZsd/ngVQz1ajs6nZattvhJ1gqAlsIYXl S3TzwjxOomcGoSfBpXoC47Nep/e3xh6Vbb7nDo/yeDfv -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:13 2026 by rpki-client