This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9cmRnO70OPiwPyGYcase3BxIAtE.roa File: 9cmRnO70OPiwPyGYcase3BxIAtE.roa (raw, json) Hash identifier: V7CT+axkmGwaRyOu1qmrmRDCeStUGs88R/K9c7+dtVc= Subject key identifier: F5:C9:91:9C:EE:F4:38:F8:B0:3F:21:98:71:AB:1E:DC:1C:48:02:D1 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B786AFB8377CEC49D3E43B4134FF Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9cmRnO70OPiwPyGYcase3BxIAtE.roa Signing time: Fri 02 Jan 2026 16:21:37 +0000 ROA not before: Fri 02 Jan 2026 16:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207676 IP address blocks: 46.243.179.0/24 maxlen: 24 141.101.197.0/24 maxlen: 24 141.101.249.0/24 maxlen: 24 178.170.249.0/24 maxlen: 24 178.170.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b7:86:af:b8:37:7c:ec:49:d3:e4:3b:41:34:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5c9919ceef438f8b03f219871ab1edc1c4802d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:03:26:f6:bd:ee:97:45:18:db:21:53:ad: c9:85:98:52:da:c3:aa:53:13:34:e5:67:f4:27:1a: 1c:a8:b8:05:1c:a5:42:03:d7:c4:7a:06:32:37:95: 3e:d9:8a:b5:6f:42:d8:58:56:bc:42:3d:17:08:bf: f9:87:cc:0e:3d:0b:c5:ff:85:c2:a6:1a:03:94:ae: 1b:25:5b:f5:ed:bc:8a:83:f8:a8:bd:19:3f:ad:90: 4f:f7:b5:58:40:3a:bf:69:d4:8c:52:16:d8:63:f6: 8e:87:0d:fd:27:21:14:5f:26:27:f1:d6:b5:a6:f6: bd:fe:12:07:36:bb:b9:dc:b6:ab:35:0a:73:aa:bc: 6d:f5:e5:58:dd:3a:86:f4:7e:f0:ec:27:0b:95:9c: f6:ab:8d:ab:e1:d2:93:44:fb:f0:da:ce:89:11:47: 46:02:76:d6:38:0c:76:bb:11:b3:b2:a2:aa:9f:b2: 25:00:1e:6f:84:c4:81:95:2f:4a:92:33:24:83:c4: 25:0c:94:94:35:22:0c:7f:eb:1f:0b:2c:20:71:35: 29:0c:25:a2:d4:da:08:b1:0c:a0:fb:4b:b9:8e:6c: 07:ef:24:a5:6b:ab:f9:6a:e9:a5:8d:c3:51:7b:ef: 9c:9a:4c:70:5d:32:bf:6b:95:c7:be:e4:bc:d1:17: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C9:91:9C:EE:F4:38:F8:B0:3F:21:98:71:AB:1E:DC:1C:48:02:D1 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9cmRnO70OPiwPyGYcase3BxIAtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.179.0/24 141.101.197.0/24 141.101.249.0/24 178.170.249.0/24 178.170.251.0/24 Signature Algorithm: sha256WithRSAEncryption c4:eb:98:25:84:f8:75:da:9d:71:70:d9:69:76:fd:23:25:ea: fe:d2:b2:c4:73:a9:9a:88:f5:53:3f:01:aa:1d:77:68:8b:f5: f4:b5:50:98:76:90:de:f2:f7:cc:cb:e5:6b:80:2d:a2:9f:95: 12:d4:48:49:3e:16:c4:f9:26:0b:8a:98:97:ab:ab:93:8c:dd: 12:79:ce:2a:45:29:bc:18:5e:b4:13:c5:87:dd:53:cc:96:68: 87:07:38:a2:03:d5:09:a2:5c:26:06:ac:a7:f1:e3:17:92:00: ef:80:08:8a:89:e9:9f:e1:f6:63:ab:49:d3:b9:2b:f8:02:d0: 19:ad:27:8d:af:56:d4:f1:c0:00:02:ab:0b:fa:c4:2b:bf:90: d7:48:90:2c:50:52:52:24:f4:40:8b:a7:fc:c9:a3:e4:aa:a6: cd:21:e4:92:0d:b2:ab:62:f7:4a:68:4a:7e:c2:ac:0a:6d:0d: 20:43:a3:c9:eb:f4:00:82:73:0b:e5:5e:d8:1d:ce:73:3e:3d: 95:4f:66:a2:f9:77:8c:3a:6a:87:73:28:10:a6:6d:6b:c3:dc: cb:25:40:22:fc:5b:c7:93:9e:84:2e:68:90:af:f1:27:9d:fb: 80:65:ef:e0:68:00:ac:5b:ce:08:58:e9:dd:4f:cf:f7:63:90: 26:f6:e3:c3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/g7eGr7g3fOxJ0+Q7QTT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWM5OTE5Y2VlZjQzOGY4YjAzZjIxOTg3MWFiMWVkYzFjNDgwMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WEDJva97pdFGNshU63JhZhS2sOq UxM05Wf0JxocqLgFHKVCA9fEegYyN5U+2Yq1b0LYWFa8Qj0XCL/5h8wOPQvF/4XC phoDlK4bJVv17byKg/iovRk/rZBP97VYQDq/adSMUhbYY/aOhw39JyEUXyYn8da1 pva9/hIHNru53LarNQpzqrxt9eVY3TqG9H7w7CcLlZz2q42r4dKTRPvw2s6JEUdG AnbWOAx2uxGzsqKqn7IlAB5vhMSBlS9KkjMkg8QlDJSUNSIMf+sfCywgcTUpDCWi 1NoIsQyg+0u5jmwH7ySla6v5aumljcNRe++cmkxwXTK/a5XHvuS80Rf4NwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPXJkZzu9Dj4sD8hmHGrHtwcSALRMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvOWNtUm5PNzBPUGl3UHlHWWNhc2UzQnhJQXRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALvOzAwQA jWXFAwQAjWX5AwQAsqr5AwQAsqr7MA0GCSqGSIb3DQEBCwUAA4IBAQDE65glhPh1 2p1xcNlpdv0jJer+0rLEc6maiPVTPwGqHXdoi/X0tVCYdpDe8vfMy+VrgC2in5US 1EhJPhbE+SYLipiXq6uTjN0Sec4qRSm8GF60E8WH3VPMlmiHBziiA9UJolwmBqyn 8eMXkgDvgAiKiemf4fZjq0nTuSv4AtAZrSeNr1bU8cAAAqsL+sQrv5DXSJAsUFJS JPRAi6f8yaPkqqbNIeSSDbKrYvdKaEp+wqwKbQ0gQ6PJ6/QAgnML5V7YHc5zPj2V T2ai+XeMOmqHcygQpm1rw9zLJUAi/FvHk56ELmiQr/EnnfuAZe/gaACsW84IWOnd T8/3Y5Am9uPD -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:24 2026 by rpki-client