This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/MOCPp2EklA9KiOER-D8tmFoh_tA.roa File: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (raw, json) Hash identifier: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk= Subject key identifier: 30:E0:8F:A7:61:24:94:0F:4A:88:E1:11:F8:3F:2D:98:5A:21:FE:D0 Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f Certificate serial: 019B7F852BBE724EA2B3A52F84A2277AC088 Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/MOCPp2EklA9KiOER-D8tmFoh_tA.roa Signing time: Fri 02 Jan 2026 16:23:12 +0000 ROA not before: Fri 02 Jan 2026 16:23:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197445 IP address blocks: 45.141.216.0/24 maxlen: 24 2001:3800::/29 maxlen: 48 2001:3800:c::/48 maxlen: 48 2001:3800:ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2b:be:72:4e:a2:b3:a5:2f:84:a2:27:7a:c0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f Validity Not Before: Jan 2 16:23:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30e08fa76124940f4a88e111f83f2d985a21fed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:c1:91:68:70:b8:ee:4d:b3:2a:26:93:a5: a3:60:0c:33:d8:4d:44:70:af:16:83:75:9f:2a:b2: 34:3a:06:28:54:fb:1a:62:ec:d3:b9:dd:36:7f:ce: 28:f7:3d:8a:cc:9f:fd:1a:42:f2:a3:a5:92:e9:c4: 7f:21:f5:53:af:38:03:7d:0c:a2:fe:b5:24:27:2a: a8:5a:70:58:e5:7a:48:59:11:f8:b3:75:d2:06:54: 6b:83:fb:41:b2:15:a9:83:d7:03:a0:59:02:4a:b3: 90:cd:4a:1d:88:8a:b4:87:ef:e5:48:45:2a:2b:85: b6:4a:a4:98:3d:b8:a3:55:a1:98:fd:6a:42:3f:0b: 6f:ee:a5:d7:b2:23:dc:91:4f:c8:6c:35:5a:43:28: 02:a1:95:af:2e:09:f7:d7:11:0b:38:7b:c5:74:f0: 0c:63:50:24:2a:98:e3:df:7b:52:6e:93:95:b7:6d: 1b:1b:cc:61:3e:8d:ea:4a:fd:11:fa:d2:0b:24:ef: 27:f0:65:c8:9d:ce:e2:ef:ac:f1:79:7d:1b:5c:74: 82:ee:36:92:09:b5:07:ea:c6:da:9c:e5:e3:91:46: 43:a7:6a:6b:eb:ab:de:c4:fe:8e:69:05:84:5b:f9: c0:1c:41:ec:af:4a:7b:2c:b9:9d:fd:f0:58:05:ef: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E0:8F:A7:61:24:94:0F:4A:88:E1:11:F8:3F:2D:98:5A:21:FE:D0 X509v3 Authority Key Identifier: keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/MOCPp2EklA9KiOER-D8tmFoh_tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.216.0/24 IPv6: 2001:3800::/29 Signature Algorithm: sha256WithRSAEncryption 9f:d1:0e:a8:1a:25:bd:ad:57:19:a7:a1:da:0a:d7:d6:82:59: ba:bb:93:7a:cc:2c:0b:5e:8c:da:4a:8c:91:f6:68:7c:28:e8: 86:aa:1c:5c:0d:d1:cf:d6:69:5c:e8:63:89:37:61:3f:9c:f8: fc:bc:5a:f3:7d:70:32:0e:2b:c2:49:98:b8:25:df:7d:dd:72: a0:6f:99:f8:04:60:a4:8b:e9:d8:be:5d:96:8e:a5:49:2c:da: f7:e6:df:2b:07:1a:57:bf:c0:d7:cc:e0:67:60:a8:c3:7c:20: 57:2d:a4:00:53:05:ad:02:9f:52:67:1d:c1:56:a7:1a:62:bd: 81:4d:67:c8:73:f2:00:22:d3:96:93:2c:52:2d:49:cf:bf:0f: ef:2d:0c:f1:79:24:bb:26:36:e4:0e:56:c2:d1:e8:f1:53:e8: b3:d0:f3:d5:33:15:2e:c0:36:44:00:37:37:80:0c:a3:df:7c: 5b:6e:6e:71:ed:3c:c1:81:25:aa:58:9e:4a:83:c6:36:26:08: 8b:31:3e:2e:50:48:47:5d:86:ef:c5:c6:93:da:d8:0c:54:99: 53:0f:57:cd:dd:ec:62:c0:ab:9f:5b:5b:93:62:76:f4:57:0b: bc:4a:10:f9:1a:08:f5:81:81:85:ed:3e:30:5f:a9:03:73:8f: 1d:86:9c:2f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hSu+ck6is6UvhKInesCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWM3NGRjMGI2YzJkNWI5ZDMwZWFmM2NkMjIyOTRmNzEx OTAzOWYwHhcNMjYwMTAyMTYyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGUwOGZhNzYxMjQ5NDBmNGE4OGUxMTFmODNmMmQ5ODVhMjFmZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIzBkWhwuO5Nsyomk6WjYAwz2E1E cK8Wg3WfKrI0OgYoVPsaYuzTud02f84o9z2KzJ/9GkLyo6WS6cR/IfVTrzgDfQyi /rUkJyqoWnBY5XpIWRH4s3XSBlRrg/tBshWpg9cDoFkCSrOQzUodiIq0h+/lSEUq K4W2SqSYPbijVaGY/WpCPwtv7qXXsiPckU/IbDVaQygCoZWvLgn31xELOHvFdPAM Y1AkKpjj33tSbpOVt20bG8xhPo3qSv0R+tILJO8n8GXInc7i76zxeX0bXHSC7jaS CbUH6sbanOXjkUZDp2pr66vexP6OaQWEW/nAHEHsr0p7LLmd/fBYBe+lBQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDDgj6dhJJQPSojhEfg/LZhaIf7QMB8GA1UdIwQY MBaAFAnsdNwLbC1bnTDq880iKU9xGQOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMt ZGJhZmY4MWFkY2E4LzEvTU9DUHAyRWtsQTlLaU9FUi1EOHRtRm9oX3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMtZGJhZmY4MWFkY2E4 LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALY3YMA0E AgACMAcDBQMgATgAMA0GCSqGSIb3DQEBCwUAA4IBAQCf0Q6oGiW9rVcZp6HaCtfW glm6u5N6zCwLXozaSoyR9mh8KOiGqhxcDdHP1mlc6GOJN2E/nPj8vFrzfXAyDivC SZi4Jd993XKgb5n4BGCki+nYvl2WjqVJLNr35t8rBxpXv8DXzOBnYKjDfCBXLaQA UwWtAp9SZx3BVqcaYr2BTWfIc/IAItOWkyxSLUnPvw/vLQzxeSS7JjbkDlbC0ejx U+iz0PPVMxUuwDZEADc3gAyj33xbbm5x7TzBgSWqWJ5Kg8Y2JgiLMT4uUEhHXYbv xcaT2tgMVJlTD1fN3exiwKufW1uTYnb0Vwu8ShD5Ggj1gYGF7T4wX6kDc48dhpwv -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:23 2026 by rpki-client