This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/m9o4a-Sp907mkuh7yKVYLJl1LEA.roa File: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (raw, json) Hash identifier: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc= Subject key identifier: 9B:DA:38:6B:E4:A9:F7:4E:E6:92:E8:7B:C8:A5:58:2C:99:75:2C:40 Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B78A31068478B1ED63152F4AD481AE0A5 Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/m9o4a-Sp907mkuh7yKVYLJl1LEA.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 2.59.244.0/22 maxlen: 22 89.38.216.0/21 maxlen: 21 103.95.124.0/22 maxlen: 22 103.115.182.0/23 maxlen: 23 103.132.4.0/22 maxlen: 22 103.204.220.0/23 maxlen: 23 185.124.100.0/22 maxlen: 22 185.250.76.0/22 maxlen: 22 193.36.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:10:68:47:8b:1e:d6:31:52:f4:ad:48:1a:e0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bda386be4a9f74ee692e87bc8a5582c99752c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:33:16:f6:08:8f:22:91:76:cd:52:7f:6f: 42:b4:bf:d8:b5:f0:3d:2e:78:e0:a3:b0:33:61:b4: 27:2f:9d:95:97:af:b1:5a:27:2d:b5:29:5a:69:cd: e9:81:54:0c:d2:d2:03:d6:7f:96:b4:91:6d:c1:99: 51:c3:30:3d:02:54:2e:14:3e:90:c1:3c:f6:af:14: e8:38:8c:93:49:b6:ce:e1:0e:c8:49:0c:02:59:38: 86:31:89:77:a6:27:ba:c6:97:01:14:7a:75:6b:a3: 5c:65:21:eb:b2:f3:f5:d9:1e:23:69:51:fa:3a:fc: fb:90:22:29:be:c7:a7:7a:17:21:28:79:93:02:4f: c2:1f:a1:c0:50:2e:1f:90:a0:27:18:8c:e3:d9:b0: c5:75:3f:fd:0f:48:7f:51:6f:c4:d0:a1:26:cb:74: 51:17:52:39:46:b2:10:31:f9:af:22:70:11:48:38: 4a:0a:0d:0a:82:13:c6:72:06:ab:a6:55:0b:cc:af: 3d:21:92:2c:50:cf:35:07:5d:af:7a:1a:2c:c6:f0: a2:a4:e5:4e:40:33:ba:0b:7d:e6:b2:08:f6:0c:e2: a1:e8:99:fa:48:04:53:e9:f1:ab:0f:28:35:ff:13: 48:7f:e0:bb:53:90:fa:c0:de:3a:84:f4:00:2c:ec: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:38:6B:E4:A9:F7:4E:E6:92:E8:7B:C8:A5:58:2C:99:75:2C:40 X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/m9o4a-Sp907mkuh7yKVYLJl1LEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.244.0/22 89.38.216.0/21 103.95.124.0/22 103.115.182.0/23 103.132.4.0/22 103.204.220.0/23 185.124.100.0/22 185.250.76.0/22 193.36.96.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:55:df:bc:74:6f:71:cf:ec:8c:1e:c2:00:1b:0f:f4:65:61: 2c:d9:54:7b:e5:23:f7:2e:be:90:b4:94:32:66:87:08:19:ba: ca:48:d8:c0:d9:f3:cd:9e:01:0c:80:60:63:d7:3c:9c:4d:78: 80:dd:56:84:33:b8:fb:4e:d2:1b:a2:4b:66:6f:7e:07:4e:f4: 56:45:d5:e5:f1:7e:e5:b1:ba:d5:24:92:c4:c6:f8:66:8a:79: a1:c0:ba:07:24:d2:39:4a:4d:67:99:4c:65:46:9e:d7:f3:67: b1:da:a4:31:66:06:c2:1d:b2:92:d7:3e:d7:fb:3f:74:aa:cd: c5:7f:a8:8a:f9:a5:19:53:18:b8:30:0a:5c:a4:8d:b8:3b:e9: 9a:6d:27:a2:b7:89:97:0a:84:c3:c7:fb:c5:f9:ee:b7:8c:c8: 30:96:d3:11:df:0d:80:9c:c7:26:47:c9:61:9f:bf:9d:bc:5f: 77:fc:00:42:79:83:da:7e:b7:3d:f8:1d:dd:77:0c:0e:ce:39: bf:05:69:45:67:ef:5b:54:68:da:17:30:9b:97:da:47:f8:9e: 6b:41:d4:cb:2a:6e:b9:20:1f:d4:0a:f2:7d:6e:56:ac:c3:41: e1:7e:66:b9:4c:02:1b:18:23:2c:fe:09:88:32:97:88:ae:e8: 07:45:09:94 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt4oxBoR4se1jFS9K1IGuClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmRhMzg2YmU0YTlmNzRlZTY5MmU4N2JjOGE1NTgyYzk5NzUyYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeszFvYIjyKRds1Sf29CtL/YtfA9 Lnjgo7AzYbQnL52Vl6+xWicttSlaac3pgVQM0tID1n+WtJFtwZlRwzA9AlQuFD6Q wTz2rxToOIyTSbbO4Q7ISQwCWTiGMYl3pie6xpcBFHp1a6NcZSHrsvP12R4jaVH6 Ovz7kCIpvsenehchKHmTAk/CH6HAUC4fkKAnGIzj2bDFdT/9D0h/UW/E0KEmy3RR F1I5RrIQMfmvInARSDhKCg0KghPGcgarplULzK89IZIsUM81B12vehosxvCipOVO QDO6C33msgj2DOKh6Jn6SART6fGrDyg1/xNIf+C7U5D6wN46hPQALOyUOQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFJvaOGvkqfdO5pLoe8ilWCyZdSxAMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvbTlvNGEtU3A5MDdta3VoN3lLVllMSmwxTEVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCAjv0AwQD WSbYAwQCZ198AwQBZ3O2AwQCZ4QEAwQBZ8zcAwQCuXxkAwQCufpMAwQCwSRgMA0G CSqGSIb3DQEBCwUAA4IBAQCaVd+8dG9xz+yMHsIAGw/0ZWEs2VR75SP3Lr6QtJQy ZocIGbrKSNjA2fPNngEMgGBj1zycTXiA3VaEM7j7TtIboktmb34HTvRWRdXl8X7l sbrVJJLExvhminmhwLoHJNI5Sk1nmUxlRp7X82ex2qQxZgbCHbKS1z7X+z90qs3F f6iK+aUZUxi4MApcpI24O+mabSeit4mXCoTDx/vF+e63jMgwltMR3w2AnMcmR8lh n7+dvF93/ABCeYPafrc9+B3ddwwOzjm/BWlFZ+9bVGjaFzCbl9pH+J5rQdTLKm65 IB/UCvJ9blasw0Hhfma5TAIbGCMs/gmIMpeIrugHRQmU -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:34 2026 by rpki-client