This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/bMpmoetZ6thuISe4pMSH_gzG5_0.roa File: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (raw, json) Hash identifier: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c= Subject key identifier: 6C:CA:66:A1:EB:59:EA:D8:6E:21:27:B8:A4:C4:87:FE:0C:C6:E7:FD Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019B7F8510DEF5B6B7A8C8BF2C224817EBAB Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/bMpmoetZ6thuISe4pMSH_gzG5_0.roa Signing time: Fri 02 Jan 2026 16:23:05 +0000 ROA not before: Fri 02 Jan 2026 16:23:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 195.66.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:10:de:f5:b6:b7:a8:c8:bf:2c:22:48:17:eb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cca66a1eb59ead86e2127b8a4c487fe0cc6e7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:0d:a7:2a:36:00:70:ef:0c:80:d2:f7:22: f6:36:db:79:ba:35:60:69:0a:9e:a8:5d:69:a8:78: 8e:d5:d0:11:26:68:f7:bc:40:7e:17:36:82:03:37: 78:3a:b8:b2:50:16:83:7b:2a:a3:be:7c:db:9d:0e: 96:5c:10:a5:18:f0:2e:53:e1:13:e1:aa:85:46:22: 77:6b:7f:f1:71:bd:f4:c5:2a:a9:a7:ee:0f:3e:d0: a8:c9:80:06:df:7b:49:d6:b2:c4:d7:a2:2b:37:d9: af:65:79:04:c6:a1:ce:4d:3f:18:4a:92:cf:0d:23: 50:d9:98:72:fc:83:8f:d2:b2:4c:9f:77:d6:9f:8e: 7a:bf:44:39:6f:ad:ca:7e:e1:66:5e:66:43:00:92: 4c:07:ec:93:c5:09:fc:9a:d8:a6:33:36:5d:70:7b: 85:a1:c4:96:04:f6:10:cf:b8:0b:b3:06:a8:7e:ad: f9:6f:2a:e2:c5:6a:9f:21:2d:03:4d:75:b5:25:d1: 9b:73:c9:1c:cb:3a:2b:da:a6:be:eb:58:89:4e:fe: 45:fb:01:5e:79:d7:e7:47:7b:77:71:3c:9a:ba:43: bd:68:c8:e0:bc:db:52:3a:27:57:95:19:c9:2d:20: b2:a5:54:71:9a:89:0b:b7:df:2a:6c:59:17:46:f2: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CA:66:A1:EB:59:EA:D8:6E:21:27:B8:A4:C4:87:FE:0C:C6:E7:FD X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/bMpmoetZ6thuISe4pMSH_gzG5_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.107.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:72:94:4b:7e:73:11:59:c8:21:82:fe:37:3e:9f:44:1a:44: 29:98:db:fe:09:04:f1:01:d3:a5:d5:80:f6:73:99:50:6e:03: 8d:df:ab:65:bb:2c:4e:72:b7:84:00:b1:7d:7f:81:7e:3b:31: 98:af:b0:1b:ea:5c:0a:d5:a3:5b:46:38:c3:c8:4c:ad:e3:39: f2:03:a7:6d:82:4d:a6:2b:2d:3d:c8:cb:68:50:f2:eb:d6:2e: 9d:5e:a3:47:66:72:32:d8:f0:ea:e4:ca:39:3a:f1:55:79:59: a0:8b:68:9f:14:cb:0e:ac:87:25:18:b4:ea:80:32:fa:c3:24: d0:f8:13:4e:03:c2:0e:bb:18:17:18:5a:08:48:c7:72:a2:a3: 16:5c:44:cd:87:d3:b2:74:08:61:13:cf:8a:20:bd:9e:ab:e6: c0:32:9b:12:c9:b7:9d:ed:b2:51:7a:e6:91:41:a2:fb:fe:d6: 2d:17:5c:9c:82:58:64:d1:5e:2a:03:70:43:3e:4e:0a:7e:68: f6:ee:77:05:9b:30:9e:ad:4b:e0:29:40:73:7e:aa:1f:14:ae: 23:25:95:26:37:1e:14:86:ca:54:e8:fc:0a:a9:71:f2:03:c2: 67:2c:7d:f1:78:38:75:19:89:6c:1b:c0:d6:6f:cf:f4:56:18: 94:5a:46:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRDe9ba3qMi/LCJIF+urMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2NhNjZhMWViNTllYWQ4NmUyMTI3YjhhNGM0ODdmZTBjYzZlN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9QNpyo2AHDvDIDS9yL2Ntt5ujVg aQqeqF1pqHiO1dARJmj3vEB+FzaCAzd4OriyUBaDeyqjvnzbnQ6WXBClGPAuU+ET 4aqFRiJ3a3/xcb30xSqpp+4PPtCoyYAG33tJ1rLE16IrN9mvZXkExqHOTT8YSpLP DSNQ2Zhy/IOP0rJMn3fWn456v0Q5b63KfuFmXmZDAJJMB+yTxQn8mtimMzZdcHuF ocSWBPYQz7gLswaofq35byrixWqfIS0DTXW1JdGbc8kcyzor2qa+61iJTv5F+wFe edfnR3t3cTyaukO9aMjgvNtSOidXlRnJLSCypVRxmokLt98qbFkXRvJo7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzKZqHrWerYbiEnuKTEh/4Mxuf9MB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvYk1wbW9ldFo2dGh1SVNlNHBNU0hfZ3pHNV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0G CSqGSIb3DQEBCwUAA4IBAQAvcpRLfnMRWcghgv43Pp9EGkQpmNv+CQTxAdOl1YD2 c5lQbgON36tluyxOcreEALF9f4F+OzGYr7Ab6lwK1aNbRjjDyEyt4znyA6dtgk2m Ky09yMtoUPLr1i6dXqNHZnIy2PDq5Mo5OvFVeVmgi2ifFMsOrIclGLTqgDL6wyTQ +BNOA8IOuxgXGFoISMdyoqMWXETNh9OydAhhE8+KIL2eq+bAMpsSybed7bJReuaR QaL7/tYtF1ycglhk0V4qA3BDPk4Kfmj27ncFmzCerUvgKUBzfqofFK4jJZUmNx4U hspU6PwKqXHyA8JnLH3xeDh1GYlsG8DWb8/0VhiUWka7 -----END CERTIFICATE-----Generated at Fri Jan 23 16:01:57 2026 by rpki-client