This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa File: MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa (raw, json) Hash identifier: K2zRk3RmxZ15QcwuR8MLsUcx4p8qMykaf3Ogb1jzldU= Subject key identifier: 30:E9:99:28:2E:52:D6:4B:37:AF:89:61:5F:B1:02:CC:3B:34:91:51 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BA00F48E769165A943896528948B Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212985 IP address blocks: 2a13:a5c7:3300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ba:00:f4:8e:76:91:65:a9:43:89:65:28:94:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30e999282e52d64b37af89615fb102cc3b349151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:b3:1c:d7:36:7c:c9:ca:f1:ba:38:a8:03: bb:6a:19:7f:7e:a6:b5:bc:99:62:38:a0:5e:55:9e: 56:b3:53:d2:87:48:fb:46:27:51:fa:13:62:95:d3: 1d:96:6d:7a:11:34:8c:29:8f:6c:77:2c:fc:e3:7f: 6b:a9:fa:ff:e2:14:81:fd:3d:c1:ed:b3:44:63:b0: a3:63:f1:ec:f4:47:3f:b0:55:57:a3:86:46:31:fe: 35:a8:34:c8:d3:9b:25:06:a5:c6:0c:a0:73:45:1f: 2f:96:f2:ac:0b:bf:39:e2:e5:06:ab:45:99:27:41: 26:2a:69:f9:4d:99:71:28:e3:aa:40:7d:e5:e6:87: a1:66:2a:22:ff:26:9e:f8:5d:7c:8b:a7:a4:77:44: 3d:bc:bf:d5:00:0d:ae:09:5f:50:46:8c:96:94:a1: e5:28:31:e5:82:b8:32:37:38:15:cc:a0:ea:f5:1b: 85:29:06:52:2b:24:de:5a:4b:1e:35:3e:e6:c9:8e: 64:8e:23:36:2f:52:26:b6:6a:1f:2a:3f:b6:59:72: 23:bd:8e:32:07:96:c9:d0:a7:cb:7d:ec:36:e5:0d: 3a:64:36:5b:fe:54:4a:05:4f:08:8c:c0:4e:35:87: e4:49:93:07:e4:6c:17:4d:b5:25:6d:fc:84:4b:2b: f6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E9:99:28:2E:52:D6:4B:37:AF:89:61:5F:B1:02:CC:3B:34:91:51 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:3300::/40 Signature Algorithm: sha256WithRSAEncryption 7e:be:31:aa:99:c4:20:c8:c2:be:48:90:1d:40:69:a4:ca:3b: 1e:cb:3c:a0:89:8c:2b:5f:19:32:32:80:e5:25:bc:77:db:12: 0e:cf:cc:7f:d0:58:e0:71:e1:55:b0:b0:7a:cc:53:1a:98:ac: fa:18:2e:ab:78:27:d2:29:f3:f4:46:7b:cc:e2:91:58:ae:e0: 82:14:e6:d5:82:0d:54:d5:e1:36:9b:a8:37:f5:ec:cc:8e:d0: 86:2e:42:b5:cb:7c:5f:ae:d8:23:85:23:5f:85:61:62:eb:bc: dc:b5:e8:85:ea:6a:77:1c:72:1d:da:b1:24:d2:95:34:b6:9b: ef:43:56:02:78:5d:42:28:5f:cc:66:68:36:15:95:2c:c6:d2: 50:6c:70:d7:2c:4b:0a:32:20:04:bd:26:02:7d:5e:0d:be:f4: 1a:eb:1c:2c:8d:da:7d:a4:77:ed:d3:30:f8:92:72:25:e6:24: c6:fd:65:e4:90:71:f6:32:c0:b6:6c:ab:ef:54:d2:7b:2b:06: 96:50:38:08:30:d2:60:59:a1:06:df:3a:20:f1:5e:76:8b:17: 7c:3a:67:94:e8:81:c9:83:35:32:82:3a:b6:39:33:a1:12:ec: 50:cf:93:f7:fd:0d:a8:83:ba:e0:58:23:85:50:2a:04:35:d1: 23:46:8a:35 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLoA9I52kWWpQ4llKJSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGU5OTkyODJlNTJkNjRiMzdhZjg5NjE1ZmIxMDJjYzNiMzQ5MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscKzHNc2fMnK8bo4qAO7ahl/fqa1 vJliOKBeVZ5Ws1PSh0j7RidR+hNildMdlm16ETSMKY9sdyz8439rqfr/4hSB/T3B 7bNEY7CjY/Hs9Ec/sFVXo4ZGMf41qDTI05slBqXGDKBzRR8vlvKsC7854uUGq0WZ J0EmKmn5TZlxKOOqQH3l5oehZioi/yae+F18i6ekd0Q9vL/VAA2uCV9QRoyWlKHl KDHlgrgyNzgVzKDq9RuFKQZSKyTeWkseNT7myY5kjiM2L1ImtmofKj+2WXIjvY4y B5bJ0KfLfew25Q06ZDZb/lRKBU8IjMBONYfkSZMH5GwXTbUlbfyESyv2ZwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDDpmSguUtZLN6+JYV+xAsw7NJFRMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvTU9tWktDNVMxa3MzcjRsaFg3RUN6RHMwa1ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxzMw DQYJKoZIhvcNAQELBQADggEBAH6+MaqZxCDIwr5IkB1AaaTKOx7LPKCJjCtfGTIy gOUlvHfbEg7PzH/QWOBx4VWwsHrMUxqYrPoYLqt4J9Ip8/RGe8zikViu4IIU5tWC DVTV4TabqDf17MyO0IYuQrXLfF+u2COFI1+FYWLrvNy16IXqanccch3asSTSlTS2 m+9DVgJ4XUIoX8xmaDYVlSzG0lBscNcsSwoyIAS9JgJ9Xg2+9BrrHCyN2n2kd+3T MPiSciXmJMb9ZeSQcfYywLZsq+9U0nsrBpZQOAgw0mBZoQbfOiDxXnaLF3w6Z5To gcmDNTKCOrY5M6ES7FDPk/f9DaiDuuBYI4VQKgQ10SNGijU= -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:39 2026 by rpki-client