This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i5OUhm2_Gjdjhx1GQ2vMVHdviJo.roa File: i5OUhm2_Gjdjhx1GQ2vMVHdviJo.roa (raw, json) Hash identifier: 1vt3bMepV0HJxDIWN6JkSHayFIXa5krLXC68W4Mcy5U= Subject key identifier: 8B:93:94:86:6D:BF:1A:37:63:87:1D:46:43:6B:CC:54:77:6F:88:9A Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839C3E4D309397E076F22E5DDF6918 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i5OUhm2_Gjdjhx1GQ2vMVHdviJo.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48275 IP address blocks: 37.18.11.0/24 maxlen: 24 37.18.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9c:3e:4d:30:93:97:e0:76:f2:2e:5d:df:69:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b9394866dbf1a3763871d46436bcc54776f889a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:bb:69:a8:75:d6:ce:a2:64:93:3c:af:1c: d7:37:3f:84:d8:a3:8e:66:a6:41:ef:cc:10:db:d4: eb:50:ec:57:73:06:c7:c4:fc:78:84:07:bb:ef:45: 5b:b9:16:93:b5:d8:56:aa:79:e6:ac:b6:6a:80:17: 86:ba:56:11:ff:7e:b6:54:6e:c4:a4:40:b5:81:11: fd:49:ef:96:f7:df:f9:51:06:aa:71:6b:17:11:56: a8:95:a1:ba:2f:f5:52:e9:52:2d:f3:a3:4b:d9:18: 3a:41:fb:19:2f:bf:ad:8b:ed:f5:56:47:de:15:99: 2a:e3:9e:47:15:a9:1c:15:93:f7:67:5e:96:05:a8: 7d:e8:75:0b:9e:92:a2:20:2e:e9:ac:a6:e1:45:98: ef:96:f5:e5:de:16:c2:b6:fe:b3:d3:10:d9:61:42: 3a:bf:58:74:6f:0d:39:f2:7f:12:74:ca:7f:f9:a4: 42:04:3b:0d:7c:d1:07:a9:30:e8:d8:c2:b7:6b:c3: bf:ae:10:60:16:94:82:b2:1f:a1:e8:ad:7a:c8:85: ca:e4:9c:55:9e:6d:7b:d2:17:bf:ab:66:5a:11:33: 96:52:53:c7:22:5e:98:b5:95:b7:5a:e4:26:76:b0: 0b:4b:60:1b:ad:9e:26:38:5c:9a:8e:db:17:ca:1a: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:93:94:86:6D:BF:1A:37:63:87:1D:46:43:6B:CC:54:77:6F:88:9A X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i5OUhm2_Gjdjhx1GQ2vMVHdviJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.11.0-37.18.12.255 Signature Algorithm: sha256WithRSAEncryption 74:ea:01:bb:d4:ec:d2:a8:ea:f5:38:74:60:fb:04:ee:43:85: 5f:96:3e:32:de:da:46:77:76:57:2b:94:4d:8b:23:00:46:9d: b9:bf:f0:2e:74:6f:5e:fa:83:1d:d4:17:a1:cd:6d:b3:86:cf: 9f:bf:30:06:5b:d4:13:1d:9f:a3:49:bf:42:27:ef:bb:69:16: c2:bc:20:40:d1:9f:fd:94:ff:d6:69:d8:5d:b7:02:c0:ad:2a: b9:a4:01:a9:39:81:ce:35:8c:85:cc:5f:9a:09:b2:d0:28:4a: 26:91:b4:1b:47:43:d5:20:33:ec:8a:81:91:ac:59:ac:eb:91: 3c:d1:1f:ef:1d:72:71:c9:22:4e:dc:24:b8:06:75:55:3d:db: 27:df:1d:eb:34:13:2f:b2:e7:25:a3:eb:3f:39:44:2b:83:f4: 6a:cd:63:98:24:48:24:f1:78:b4:45:15:a2:c5:5c:72:76:9c: ab:a3:11:39:8f:11:14:cb:b1:9b:9a:5d:54:8f:b7:51:24:c0: e5:b2:96:62:ac:84:c4:32:c5:0f:15:29:51:c9:2c:72:95:7d: 3e:2e:23:2e:b7:3e:07:76:eb:31:9e:5c:77:24:00:8a:fc:ce: 0b:13:8f:e3:85:47:e9:e6:1c:3f:f3:68:91:c0:6f:44:99:96: 77:ae:c6:0f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/g5w+TTCTl+B28i5d32kYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjkzOTQ4NjZkYmYxYTM3NjM4NzFkNDY0MzZiY2M1NDc3NmY4ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxm7aah11s6iZJM8rxzXNz+E2KOO ZqZB78wQ29TrUOxXcwbHxPx4hAe770VbuRaTtdhWqnnmrLZqgBeGulYR/362VG7E pEC1gRH9Se+W99/5UQaqcWsXEVaolaG6L/VS6VIt86NL2Rg6QfsZL7+ti+31Vkfe FZkq455HFakcFZP3Z16WBah96HULnpKiIC7prKbhRZjvlvXl3hbCtv6z0xDZYUI6 v1h0bw058n8SdMp/+aRCBDsNfNEHqTDo2MK3a8O/rhBgFpSCsh+h6K16yIXK5JxV nm170he/q2ZaETOWUlPHIl6YtZW3WuQmdrALS2AbrZ4mOFyajtsXyhrVGQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIuTlIZtvxo3Y4cdRkNrzFR3b4iaMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvaTVPVWhtMl9HamRqaHgxR1Eydk1WSGR2aUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlEgsD BAAlEgwwDQYJKoZIhvcNAQELBQADggEBAHTqAbvU7NKo6vU4dGD7BO5DhV+WPjLe 2kZ3dlcrlE2LIwBGnbm/8C50b176gx3UF6HNbbOGz5+/MAZb1BMdn6NJv0In77tp FsK8IEDRn/2U/9Zp2F23AsCtKrmkAak5gc41jIXMX5oJstAoSiaRtBtHQ9UgM+yK gZGsWazrkTzRH+8dcnHJIk7cJLgGdVU92yffHes0Ey+y5yWj6z85RCuD9GrNY5gk SCTxeLRFFaLFXHJ2nKujETmPERTLsZuaXVSPt1EkwOWylmKshMQyxQ8VKVHJLHKV fT4uIy63Pgd26zGeXHckAIr8zgsTj+OFR+nmHD/zaJHAb0SZlneuxg8= -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:37 2026 by rpki-client