This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa
File: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (raw, json)
Hash identifier: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=
Subject key identifier: 9A:8A:3B:4F:E2:99:39:97:11:A9:04:8D:50:FE:F1:78:AC:61:FD:6B
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019B7EA51F21393006FA8175F0CAFBF95C9C
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa
Signing time: Fri 02 Jan 2026 12:18:29 +0000
ROA not before: Fri 02 Jan 2026 12:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207782
IP address blocks: 45.11.200.0/24 maxlen: 24
45.11.202.0/24 maxlen: 24
45.11.203.0/24 maxlen: 24
45.81.100.0/24 maxlen: 24
45.81.101.0/24 maxlen: 24
45.81.102.0/24 maxlen: 24
45.81.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:1f:21:39:30:06:fa:81:75:f0:ca:fb:f9:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Jan 2 12:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a8a3b4fe299399711a9048d50fef178ac61fd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:c8:0b:37:51:b8:bc:23:a1:40:fd:c1:d6:
ca:8e:86:50:ed:db:af:8f:02:91:27:98:3a:de:e1:
de:a0:f0:82:93:36:93:ff:27:26:80:85:46:6c:a1:
e3:88:72:8e:01:d4:7c:1b:88:60:12:2c:fa:b6:19:
9a:e7:b2:65:a1:d8:ac:74:2b:08:1e:ac:86:c3:33:
84:0b:52:73:5f:cc:d6:b1:da:dd:29:08:aa:c4:80:
17:ac:b3:72:88:ed:c2:33:76:8b:35:38:3c:0c:7e:
5f:3c:9f:a5:42:78:b8:11:b7:64:27:e5:c8:57:7f:
0a:4f:f8:23:ec:0d:3e:de:71:ad:f5:6f:ff:ac:d2:
bf:5e:1b:15:bc:59:b0:16:58:7f:2f:6a:15:d4:ed:
28:29:37:5b:fb:1d:a9:41:ff:78:1b:5d:37:7f:f7:
ec:fb:05:c3:f1:ba:5f:c9:86:ad:0f:ec:40:fd:d9:
a8:4e:1a:ee:3e:81:aa:a5:4b:08:d6:bb:4f:2d:5a:
a0:70:59:5a:de:4d:88:e2:5b:f8:ac:40:40:69:9e:
56:d1:5c:20:24:06:ae:82:eb:15:c4:64:fd:be:ab:
b5:0f:31:10:ad:cd:08:30:9a:fc:9f:40:d8:1c:0d:
df:b6:69:33:cc:e3:5d:65:70:d2:0a:fc:bd:a3:86:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:3B:4F:E2:99:39:97:11:A9:04:8D:50:FE:F1:78:AC:61:FD:6B
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.200.0/24
45.11.202.0/23
45.81.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:53:17:f3:26:0e:76:72:a1:37:78:e8:6c:22:f5:8a:81:89:
a8:87:0a:9f:e5:62:14:24:36:9d:15:04:64:3c:78:4d:04:78:
d3:3b:31:5e:6a:c5:8a:76:08:69:20:68:d1:ee:c1:79:4f:5e:
03:6b:5a:fa:d1:a2:f6:4f:13:60:c1:10:ae:17:d3:03:82:75:
43:74:2b:ad:34:38:6f:ea:9a:5a:75:6d:82:df:7c:2e:9f:3f:
11:0b:b7:5a:44:89:04:ac:15:82:08:fb:98:65:cb:bc:3e:fa:
1c:de:ca:a4:74:2c:6d:f5:23:28:13:77:be:e8:4e:e7:c7:89:
96:5f:9f:15:61:02:7f:f8:f5:9c:af:fd:8b:a0:1d:5c:e0:d8:
4b:37:46:e6:87:d3:8c:39:1f:06:b8:74:e0:95:22:d9:79:35:
82:ad:42:b1:0b:f1:34:92:4f:ff:e2:01:df:bf:fd:68:b5:3b:
7c:58:9a:01:1f:63:8a:26:99:06:47:86:62:79:ec:67:f2:b5:
13:44:e9:f7:19:f5:ec:c0:85:fb:34:f1:b0:c1:a7:ea:c9:bb:
e5:ba:c6:39:af:19:c6:a8:4e:32:a3:0a:d6:4d:23:d7:af:96:
37:1b:d5:a7:e0:af:32:cd:3f:78:00:1c:d5:6c:9e:6d:22:a7:
20:38:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:54 2026 by rpki-client