This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/m2iSJFXrSMffknc75dt6nX4q_Ew.roa File: m2iSJFXrSMffknc75dt6nX4q_Ew.roa (raw, json) Hash identifier: PpUMfeh4JgwhVE55OoPUjweIHDdfcBKVjcHcumEVNd8= Subject key identifier: 9B:68:92:24:55:EB:48:C7:DF:92:77:3B:E5:DB:7A:9D:7E:2A:FC:4C Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa Certificate serial: 019B79ECA358EE84F0AF93A227EE6FCF42F7 Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/m2iSJFXrSMffknc75dt6nX4q_Ew.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47787 IP address blocks: 176.221.32.0/21 maxlen: 32 185.99.232.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a3:58:ee:84:f0:af:93:a2:27:ee:6f:cf:42:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b68922455eb48c7df92773be5db7a9d7e2afc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3b:de:c2:01:e8:d9:a6:9b:30:f3:ba:16:5e: cd:78:cf:e3:ba:ef:16:19:7a:65:04:3b:ed:ef:a6: 4d:37:fb:4d:92:50:13:8f:91:90:14:7c:f9:62:c6: fc:cb:39:1d:fa:88:aa:d1:0d:35:55:a2:43:df:4b: 0c:c1:b9:91:08:1c:4a:4b:12:d4:cf:ad:21:76:b8: f2:85:d1:6e:17:eb:00:0c:3e:87:7d:bc:0a:40:16: b6:16:f9:c3:6e:f6:4f:8e:a6:7a:cb:fe:c0:6f:05: 46:af:10:94:69:c1:4a:32:fc:5d:40:46:1a:d0:e1: bb:57:72:18:53:fb:42:5b:92:5e:8f:cb:a5:c7:db: 1e:f6:4b:c3:4b:36:ae:df:ae:c8:f9:a0:b9:26:1b: db:50:85:71:fc:e8:3d:a8:cd:11:b2:b3:f4:2e:a7: e8:51:ad:a5:06:9f:e5:80:f9:42:e8:1d:6b:87:15: 58:f5:1d:96:b2:4e:e0:ba:b0:83:bf:ea:02:23:e6: 90:07:1c:93:75:1c:af:f0:e0:71:e3:20:60:4a:21: 2c:91:5f:f9:45:35:c8:5a:48:7a:10:8c:a9:36:62: 03:68:c9:19:f2:a1:5f:77:87:35:b6:95:42:7b:33: ff:31:e4:6e:2e:ee:70:1c:cf:f2:e8:3d:ec:83:d7: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:68:92:24:55:EB:48:C7:DF:92:77:3B:E5:DB:7A:9D:7E:2A:FC:4C X509v3 Authority Key Identifier: keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/m2iSJFXrSMffknc75dt6nX4q_Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.221.32.0/21 185.99.232.0/22 Signature Algorithm: sha256WithRSAEncryption 01:6b:f0:1a:58:94:76:ec:6b:74:10:cd:c8:27:f1:d2:57:a4: 4a:29:2a:10:16:f8:4e:d1:45:44:aa:58:a9:a2:d6:ed:00:fe: 19:e2:a7:96:75:50:5d:fa:79:c4:3e:20:78:9f:9d:ba:22:c1: a6:37:c4:23:71:8d:68:89:0f:36:ad:0d:3c:1f:4a:fe:6e:84: f7:4f:17:cc:cf:b6:2a:7b:5d:66:c5:2d:b5:93:29:ec:fd:93: ba:ea:a0:e5:72:32:03:ad:9c:4b:7a:01:43:da:d0:68:53:20: 4d:83:47:9f:03:08:7b:54:5a:4e:56:69:a7:3d:9f:ff:f8:b1: cc:eb:73:7f:e5:da:4c:ab:16:f4:65:78:71:cb:b3:2c:cf:b3: 3a:9a:53:51:3c:2e:76:d4:5d:05:78:ea:46:bf:45:20:fc:0e: ac:c2:5c:bf:66:3e:16:68:1d:7b:b0:da:66:f4:b9:8a:67:06: ff:c7:e4:4c:b6:06:15:00:0b:4d:51:e0:8f:64:ce:aa:79:af: 27:51:bd:a2:a3:e5:cf:fd:1b:14:24:49:53:e2:32:86:57:a8: d0:14:79:de:64:49:1f:bd:29:07:7f:9a:0f:89:8a:c5:f8:c8: ba:86:45:69:de:d5:18:01:d7:27:4b:e8:e9:12:e2:87:44:51: 2d:8f:99:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57KNY7oTwr5OiJ+5vz0L3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZGVkZjQ3ODIyYWVlMjdkYTI4ZDM0ZGFiMWZlN2EzYzYw YTZhYWEwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjY4OTIyNDU1ZWI0OGM3ZGY5Mjc3M2JlNWRiN2E5ZDdlMmFmYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zvewgHo2aabMPO6Fl7NeM/juu8W GXplBDvt76ZNN/tNklATj5GQFHz5Ysb8yzkd+oiq0Q01VaJD30sMwbmRCBxKSxLU z60hdrjyhdFuF+sADD6HfbwKQBa2FvnDbvZPjqZ6y/7AbwVGrxCUacFKMvxdQEYa 0OG7V3IYU/tCW5Jej8ulx9se9kvDSzau367I+aC5JhvbUIVx/Og9qM0RsrP0Lqfo Ua2lBp/lgPlC6B1rhxVY9R2Wsk7gurCDv+oCI+aQBxyTdRyv8OBx4yBgSiEskV/5 RTXIWkh6EIypNmIDaMkZ8qFfd4c1tpVCezP/MeRuLu5wHM/y6D3sg9cUXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJtokiRV60jH35J3O+Xbep1+KvxMMB8GA1UdIwQY MBaAFJ7e30eCKu4n2ijTTasf56PGCmqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUt ZDczOTkyOTIwMTlhLzEvbTJpU0pGWHJTTWZma25jNzVkdDZuWDRxX0V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUtZDczOTkyOTIwMTlh LzEvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsN0gAwQC uWPoMA0GCSqGSIb3DQEBCwUAA4IBAQABa/AaWJR27Gt0EM3IJ/HSV6RKKSoQFvhO 0UVEqlipotbtAP4Z4qeWdVBd+nnEPiB4n526IsGmN8QjcY1oiQ82rQ08H0r+boT3 TxfMz7Yqe11mxS21kyns/ZO66qDlcjIDrZxLegFD2tBoUyBNg0efAwh7VFpOVmmn PZ//+LHM63N/5dpMqxb0ZXhxy7Msz7M6mlNRPC521F0FeOpGv0Ug/A6swly/Zj4W aB17sNpm9LmKZwb/x+RMtgYVAAtNUeCPZM6qea8nUb2io+XP/RsUJElT4jKGV6jQ FHneZEkfvSkHf5oPiYrF+Mi6hkVp3tUYAdcnS+jpEuKHRFEtj5mf -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:39 2026 by rpki-client