This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9M-Co0KWgz31fd4cFKRlbYXEfYs.roa File: 9M-Co0KWgz31fd4cFKRlbYXEfYs.roa (raw, json) Hash identifier: klsZ0X6HJx0G+7pu9Z0qncAZd4qvtWBsTik4haqt1Xg= Subject key identifier: F4:CF:82:A3:42:96:83:3D:F5:7D:DE:1C:14:A4:65:6D:85:C4:7D:8B Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83BC6CD24F4E64252755255361C2DD Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9M-Co0KWgz31fd4cFKRlbYXEfYs.roa Signing time: Fri 02 Jan 2026 16:21:38 +0000 ROA not before: Fri 02 Jan 2026 16:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210160 IP address blocks: 37.18.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:bc:6c:d2:4f:4e:64:25:27:55:25:53:61:c2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4cf82a34296833df57dde1c14a4656d85c47d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:cc:9e:dc:44:43:f0:af:ae:ee:00:07:63: 45:de:48:fa:b8:da:cd:4c:cd:cb:53:cd:0a:d0:c3: 33:0a:c7:3f:27:03:cc:77:c7:b0:c3:ea:55:fb:0d: 56:a3:ba:c1:ec:0c:e1:cb:13:91:4d:14:62:e2:c5: 2d:23:de:11:d0:32:6b:2f:e3:e6:b0:77:c2:ca:1f: ab:47:7a:a5:6a:d7:58:bb:37:30:b6:71:aa:e8:67: 2c:4c:02:3c:b8:89:b6:57:cf:aa:54:37:c4:f6:3a: 73:a6:2f:6b:e7:d1:1e:ec:5c:c5:c5:5a:17:bc:e0: 78:f6:a6:b6:62:5b:82:a3:8e:b9:1e:70:04:91:a3: 3a:fd:a8:2f:c6:ff:27:1c:89:11:b0:9c:1d:e2:f4: ab:ae:ce:5d:60:a9:52:e5:43:0d:a8:27:61:de:53: a9:8e:a7:16:b9:90:02:29:33:8a:68:91:50:30:6e: 46:f2:7c:6b:7b:16:27:c9:5b:2c:24:6d:6a:3d:54: 13:e7:4a:eb:ab:43:d0:7a:8a:33:7f:d9:84:3f:cb: b4:de:eb:2e:e9:43:6c:3e:4e:7b:e7:72:3a:54:33: c6:54:5f:19:35:56:e5:ea:59:fb:41:5a:9e:6a:a2: 7c:23:88:46:33:88:23:fb:14:1d:1c:d5:42:56:50: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CF:82:A3:42:96:83:3D:F5:7D:DE:1C:14:A4:65:6D:85:C4:7D:8B X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9M-Co0KWgz31fd4cFKRlbYXEfYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.95.0/24 Signature Algorithm: sha256WithRSAEncryption 00:30:cb:f2:ff:e5:f5:c1:67:04:aa:99:42:af:a1:2d:09:a4: 56:8b:09:09:07:d4:9f:d7:d1:94:7f:db:0f:94:88:5b:aa:fa: 8e:e8:38:89:b0:77:c2:c0:1a:c8:74:8b:2e:5b:9f:8c:cb:dd: ed:bb:ad:73:1d:03:25:79:b8:0d:69:d1:9f:b3:02:c6:76:13: b0:f0:86:da:b9:24:af:81:f1:14:93:64:f2:12:38:3c:f9:1e: a3:9b:7a:92:ba:bc:ca:93:84:4b:12:df:78:dc:06:42:27:e0: 16:1a:58:eb:b5:1e:de:bb:22:5b:a3:1f:c1:da:33:69:a6:fb: 5a:47:cd:67:d7:33:ba:5b:04:52:4b:46:41:d9:b7:bc:3d:95: 0c:9e:0f:1e:66:af:0d:ca:a7:62:a5:14:e4:0a:3c:4b:65:69: a2:08:a5:63:0b:04:15:21:7d:67:2d:d6:a3:9c:6d:85:b9:5b: d2:04:22:96:0c:83:bf:d4:6a:c2:af:5c:28:b3:df:82:0f:a5: 7d:dc:c3:6d:7a:66:d7:12:0f:86:bd:42:b4:53:25:12:a0:01: ed:3a:3f:66:05:99:fb:57:89:f0:ad:10:6a:19:0f:27:35:d0: 0a:52:be:d1:c8:aa:c4:55:8f:93:08:7a:7c:4c:05:eb:0a:73: 3d:00:9b:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7xs0k9OZCUnVSVTYcLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGNmODJhMzQyOTY4MzNkZjU3ZGRlMWMxNGE0NjU2ZDg1YzQ3ZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNnMntxEQ/Cvru4AB2NF3kj6uNrN TM3LU80K0MMzCsc/JwPMd8eww+pV+w1Wo7rB7AzhyxORTRRi4sUtI94R0DJrL+Pm sHfCyh+rR3qlatdYuzcwtnGq6GcsTAI8uIm2V8+qVDfE9jpzpi9r59Ee7FzFxVoX vOB49qa2YluCo465HnAEkaM6/agvxv8nHIkRsJwd4vSrrs5dYKlS5UMNqCdh3lOp jqcWuZACKTOKaJFQMG5G8nxrexYnyVssJG1qPVQT50rrq0PQeoozf9mEP8u03usu 6UNsPk5753I6VDPGVF8ZNVbl6ln7QVqeaqJ8I4hGM4gj+xQdHNVCVlDF5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTPgqNCloM99X3eHBSkZW2FxH2LMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvOU0tQ28wS1dnejMxZmQ0Y0ZLUmxiWVhFZllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRJfMA0G CSqGSIb3DQEBCwUAA4IBAQAAMMvy/+X1wWcEqplCr6EtCaRWiwkJB9Sf19GUf9sP lIhbqvqO6DiJsHfCwBrIdIsuW5+My93tu61zHQMlebgNadGfswLGdhOw8IbauSSv gfEUk2TyEjg8+R6jm3qSurzKk4RLEt943AZCJ+AWGljrtR7euyJbox/B2jNppvta R81n1zO6WwRSS0ZB2be8PZUMng8eZq8NyqdipRTkCjxLZWmiCKVjCwQVIX1nLdaj nG2FuVvSBCKWDIO/1GrCr1wos9+CD6V93MNtembXEg+GvUK0UyUSoAHtOj9mBZn7 V4nwrRBqGQ8nNdAKUr7RyKrEVY+TCHp8TAXrCnM9AJsk -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:25 2026 by rpki-client