This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/O9-Yx1n4az0B44VaXbiUOyjTN28.roa File: O9-Yx1n4az0B44VaXbiUOyjTN28.roa (raw, json) Hash identifier: QiXaHeIIjIddUZ8ZmEoXsOzbLq1nddE/bHonpiClb78= Subject key identifier: 3B:DF:98:C7:59:F8:6B:3D:01:E3:85:5A:5D:B8:94:3B:28:D3:37:6F Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B287A9FECB93066B2BE37AB82EC1 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/O9-Yx1n4az0B44VaXbiUOyjTN28.roa Signing time: Fri 02 Jan 2026 16:21:35 +0000 ROA not before: Fri 02 Jan 2026 16:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204231 IP address blocks: 37.18.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b2:87:a9:fe:cb:93:06:6b:2b:e3:7a:b8:2e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bdf98c759f86b3d01e3855a5db8943b28d3376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cf:29:49:98:c3:1f:03:3f:31:b7:bd:df:46: 28:49:7a:06:ed:8d:28:b1:32:27:2c:2b:29:27:74: d5:e1:ad:1e:7a:9f:cb:41:77:e3:7c:a6:3f:e9:46: 0c:d6:13:e4:3c:ae:d8:16:04:39:ea:b4:58:2e:fd: 86:aa:d1:a0:cb:85:f9:8f:89:74:3c:76:57:25:c3: 17:46:17:90:92:90:04:a9:f5:d7:63:6d:48:21:88: f0:13:6a:24:61:99:07:60:f7:b8:8f:1b:01:ff:20: e4:b1:e6:1a:9d:af:ee:0f:01:ba:31:6c:28:20:ad: f1:da:09:4e:2d:94:c1:b1:5f:e3:a2:b5:33:a0:cd: 33:20:bf:07:11:89:0c:97:a4:9b:e4:93:df:5f:b2: e6:34:eb:1c:3e:34:43:e2:ec:bf:91:9d:26:cb:4c: 71:44:c3:f0:42:48:35:59:85:45:57:62:89:e4:e0: 91:c6:1c:61:fd:89:da:3c:28:86:f0:4a:72:bb:32: 05:80:c0:9a:02:49:c9:a3:50:e3:4d:fe:d7:b3:ab: 79:d1:a0:59:c5:0c:7a:5b:d2:32:b7:0f:9c:4a:da: 31:8a:8b:86:f5:c6:5d:b2:89:26:83:db:f2:6e:38: cb:3d:b1:97:df:31:27:10:02:27:6a:c3:24:27:dd: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DF:98:C7:59:F8:6B:3D:01:E3:85:5A:5D:B8:94:3B:28:D3:37:6F X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/O9-Yx1n4az0B44VaXbiUOyjTN28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.85.0/24 Signature Algorithm: sha256WithRSAEncryption 31:6c:58:34:41:5a:b3:7a:60:73:6d:a0:f4:0a:6c:ba:3c:4b: 1c:e9:47:b7:8a:99:d9:b5:2c:44:09:00:7a:df:4d:3b:43:55: bb:6c:64:03:81:91:9f:ec:4c:89:d5:00:58:c3:1a:53:69:b7: b8:87:5e:1c:8d:13:2e:f2:a9:80:64:00:2b:9e:28:9f:3a:19: 15:14:b9:64:82:2c:ce:be:4a:97:b8:56:7c:1b:3e:f6:b1:c4: 64:93:4a:87:20:14:30:fe:58:e7:dc:45:41:9c:21:07:8d:c3: f0:12:05:d8:99:da:88:25:72:c4:8f:b9:3a:91:51:a0:95:7d: c6:3f:e1:72:5d:43:82:24:8f:52:49:b7:3d:14:87:d6:f7:ca: 73:1e:72:f7:fe:6d:9b:4f:18:f3:86:5b:db:28:0b:b2:10:78: 7c:04:be:0b:4e:4b:dd:c9:ca:5f:fa:98:09:dc:dc:f1:ea:09: 0f:f0:12:cc:b0:9c:87:82:f1:af:67:27:d0:c3:32:55:f6:31: 97:78:96:92:d0:a6:d7:4c:3f:ee:d9:0f:d3:b4:f0:4f:71:db: 0a:76:c2:e4:3a:cb:d6:ac:52:25:0a:c5:ff:de:59:1c:a2:98: f7:31:cd:af:de:6e:5a:d8:54:76:90:bb:dc:a7:cf:cf:78:56: c1:85:af:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7KHqf7LkwZrK+N6uC7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmRmOThjNzU5Zjg2YjNkMDFlMzg1NWE1ZGI4OTQzYjI4ZDMzNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c8pSZjDHwM/Mbe930YoSXoG7Y0o sTInLCspJ3TV4a0eep/LQXfjfKY/6UYM1hPkPK7YFgQ56rRYLv2GqtGgy4X5j4l0 PHZXJcMXRheQkpAEqfXXY21IIYjwE2okYZkHYPe4jxsB/yDkseYana/uDwG6MWwo IK3x2glOLZTBsV/jorUzoM0zIL8HEYkMl6Sb5JPfX7LmNOscPjRD4uy/kZ0my0xx RMPwQkg1WYVFV2KJ5OCRxhxh/YnaPCiG8EpyuzIFgMCaAknJo1DjTf7Xs6t50aBZ xQx6W9Iytw+cStoxiouG9cZdsokmg9vybjjLPbGX3zEnEAInasMkJ938AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDvfmMdZ+Gs9AeOFWl24lDso0zdvMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvTzktWXgxbjRhejBCNDRWYVhiaVVPeWpUTjI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRJVMA0G CSqGSIb3DQEBCwUAA4IBAQAxbFg0QVqzemBzbaD0Cmy6PEsc6Ue3ipnZtSxECQB6 3007Q1W7bGQDgZGf7EyJ1QBYwxpTabe4h14cjRMu8qmAZAArniifOhkVFLlkgizO vkqXuFZ8Gz72scRkk0qHIBQw/ljn3EVBnCEHjcPwEgXYmdqIJXLEj7k6kVGglX3G P+FyXUOCJI9SSbc9FIfW98pzHnL3/m2bTxjzhlvbKAuyEHh8BL4LTkvdycpf+pgJ 3Nzx6gkP8BLMsJyHgvGvZyfQwzJV9jGXeJaS0KbXTD/u2Q/TtPBPcdsKdsLkOsvW rFIlCsX/3lkcopj3Mc2v3m5a2FR2kLvcp8/PeFbBha/e -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:37 2026 by rpki-client