This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/MJozjNqLnPQyzg6RwUr67wJnDj0.roa File: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (raw, json) Hash identifier: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE= Subject key identifier: 30:9A:33:8C:DA:8B:9C:F4:32:CE:0E:91:C1:4A:FA:EF:02:67:0E:3D Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Certificate serial: 019B7F815C35F2CABDF86C3B5154F56F3C55 Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/MJozjNqLnPQyzg6RwUr67wJnDj0.roa Signing time: Fri 02 Jan 2026 16:19:02 +0000 ROA not before: Fri 02 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215756 IP address blocks: 194.1.176.0/24 maxlen: 24 2001:678:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:5c:35:f2:ca:bd:f8:6c:3b:51:54:f5:6f:3c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Validity Not Before: Jan 2 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=309a338cda8b9cf432ce0e91c14afaef02670e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:d9:ff:3e:91:e7:9b:c8:42:1c:d8:8c:89: 65:15:99:29:b4:5c:0a:42:43:4d:29:d3:4e:5a:dc: 21:e5:23:04:6c:b7:b9:7a:cc:40:45:e7:96:d6:2d: a4:ca:8c:10:63:c3:ff:a7:da:35:80:42:79:de:23: 76:fd:2d:db:f5:48:e4:3d:2f:4b:4e:45:b6:b8:5c: 51:da:eb:7d:06:80:d0:de:ce:c6:de:19:31:8c:a3: c8:17:f7:a2:b4:e6:8e:31:d4:ba:cd:8f:ac:f7:d1: 1d:81:c9:52:62:3b:a0:98:3e:ce:ff:62:fc:60:25: f2:0f:35:2f:c1:88:8c:24:24:97:8c:a5:8b:bd:c3: b9:2a:49:66:a1:d3:b1:4e:6c:5c:e6:9f:25:31:4c: d4:bd:f2:3e:7b:3d:ec:cb:6f:4e:75:95:63:fd:7e: 40:62:e2:7c:94:b9:bd:ba:bd:eb:c6:6d:5e:7b:f1: 02:98:d4:87:25:9e:c0:ee:ca:45:d9:83:71:a6:46: 9a:a4:52:2b:16:3a:7a:0f:ac:d5:3b:d9:b5:65:46: 9f:09:c8:31:0a:22:e7:af:86:d8:50:59:1f:dd:83: e2:da:c9:03:7d:9e:90:10:95:71:14:95:09:9c:f5: 13:32:92:2a:00:79:a1:af:81:15:37:39:b1:b4:58: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9A:33:8C:DA:8B:9C:F4:32:CE:0E:91:C1:4A:FA:EF:02:67:0E:3D X509v3 Authority Key Identifier: keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/MJozjNqLnPQyzg6RwUr67wJnDj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.176.0/24 IPv6: 2001:678:8cc::/48 Signature Algorithm: sha256WithRSAEncryption 64:b7:54:1d:d2:6f:a6:cb:61:9a:d1:c1:e0:20:9f:3a:48:4d: 0e:99:56:0d:cc:59:47:79:aa:fb:1e:5f:32:6d:ae:7a:6d:4b: 2f:9d:0a:20:d9:89:d0:55:8a:a8:43:a7:f2:0f:46:53:a2:c9: 71:99:57:34:f3:01:fd:5d:16:96:2f:a2:45:7a:a7:59:7f:d6: 50:e6:54:5b:05:6e:48:61:ee:05:56:07:66:f3:54:5f:e7:01: da:a0:13:99:7e:60:d0:78:dd:37:6d:42:87:cf:39:52:da:f8: e4:38:4d:ad:25:58:39:de:26:a7:76:ba:86:6e:a5:aa:38:a8: 7d:e5:9f:e9:03:50:ff:b8:27:a2:25:c1:9f:f0:fc:74:9b:99: 50:7f:d3:81:c1:c3:7a:18:43:f2:6d:6d:81:89:fe:63:61:d6: 6a:64:24:9e:38:83:57:33:7e:82:75:36:ba:5f:b5:73:09:ff: bb:f5:a2:52:90:1e:d9:09:e8:e6:e1:19:7c:cf:d2:61:59:cf: e7:0a:65:29:20:7c:90:19:b5:6e:fc:e2:b9:6d:20:f3:48:c5: 01:cd:00:58:6b:27:79:7c:5e:77:c8:50:30:35:d3:39:1d:67: 01:cc:2e:6f:ff:0a:f5:b8:a0:29:bf:a2:55:e7:bd:0c:37:88: be:1e:66:ee -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gVw18sq9+Gw7UVT1bzxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi M2JiZDYwHhcNMjYwMTAyMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDlhMzM4Y2RhOGI5Y2Y0MzJjZTBlOTFjMTRhZmFlZjAyNjcwZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7zZ/z6R55vIQhzYjIllFZkptFwK QkNNKdNOWtwh5SMEbLe5esxAReeW1i2kyowQY8P/p9o1gEJ53iN2/S3b9UjkPS9L TkW2uFxR2ut9BoDQ3s7G3hkxjKPIF/eitOaOMdS6zY+s99EdgclSYjugmD7O/2L8 YCXyDzUvwYiMJCSXjKWLvcO5KklmodOxTmxc5p8lMUzUvfI+ez3sy29OdZVj/X5A YuJ8lLm9ur3rxm1ee/ECmNSHJZ7A7spF2YNxpkaapFIrFjp6D6zVO9m1ZUafCcgx CiLnr4bYUFkf3YPi2skDfZ6QEJVxFJUJnPUTMpIqAHmhr4EVNzmxtFhb5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDCaM4zai5z0Ms4OkcFK+u8CZw49MB8GA1UdIwQY MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et ZGU0YmE3ODZmODcyLzEvTUpvempOcUxuUFF5emc2UndVcjY3d0puRGowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgGwMA8E AgACMAkDBwAgAQZ4CMwwDQYJKoZIhvcNAQELBQADggEBAGS3VB3Sb6bLYZrRweAg nzpITQ6ZVg3MWUd5qvseXzJtrnptSy+dCiDZidBViqhDp/IPRlOiyXGZVzTzAf1d FpYvokV6p1l/1lDmVFsFbkhh7gVWB2bzVF/nAdqgE5l+YNB43TdtQofPOVLa+OQ4 Ta0lWDneJqd2uoZupao4qH3ln+kDUP+4J6IlwZ/w/HSbmVB/04HBw3oYQ/JtbYGJ /mNh1mpkJJ44g1czfoJ1NrpftXMJ/7v1olKQHtkJ6ObhGXzP0mFZz+cKZSkgfJAZ tW784rltIPNIxQHNAFhrJ3l8XnfIUDA10zkdZwHMLm//CvW4oCm/olXnvQw3iL4e Zu4= -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:31 2026 by rpki-client