This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/mojZXrTMzMI8tc-sxL8WkZQtlqo.roa File: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (raw, json) Hash identifier: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58= Subject key identifier: 9A:88:D9:5E:B4:CC:CC:C2:3C:B5:CF:AC:C4:BF:16:91:94:2D:96:AA Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Certificate serial: 019B7BA4CFF664D617F09644B426C7224F6A Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/mojZXrTMzMI8tc-sxL8WkZQtlqo.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19551 IP address blocks: 80.244.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cf:f6:64:d6:17:f0:96:44:b4:26:c7:22:4f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a88d95eb4ccccc23cb5cfacc4bf1691942d96aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:6b:05:e6:ee:63:41:12:19:1b:3b:d3:38: 1b:ef:e3:65:01:fd:35:3b:42:dd:3b:2f:43:4a:67: 76:40:85:82:b1:ea:09:8f:ab:c3:f9:cc:79:7e:c0: aa:f5:e7:19:de:f7:6d:b3:47:b1:46:3e:ae:b4:59: 21:f8:0b:46:7c:54:44:f9:35:e3:3d:4d:95:ed:54: f9:12:64:6b:2f:1e:f0:23:38:cd:fd:51:b5:7c:e2: d8:b9:a4:46:97:01:87:3a:e8:fa:fc:c3:c1:0f:87: f6:58:40:2f:79:37:0f:d1:e6:06:bf:5f:2f:07:e0: ca:24:f5:1a:0c:b6:de:02:a6:c6:eb:a1:ab:0a:ad: 4f:8b:67:3a:ed:da:11:ec:db:b6:03:f3:18:93:ee: 9c:95:d3:36:5f:8d:6f:b8:94:97:b8:7e:70:20:b9: c0:d4:a0:12:0b:19:5e:1f:05:b6:95:e8:2d:1f:e0: 1e:cd:49:e7:0d:99:fa:7b:e5:9a:cc:c9:f3:63:b7: ae:66:7b:0a:3b:e4:02:78:2c:41:08:87:63:9b:e6: 32:e9:19:30:95:5a:56:53:7c:ec:b1:0d:a0:05:0c: da:c2:93:cd:18:d2:c1:ca:b5:a2:77:0e:15:62:83: 8b:04:aa:70:59:ac:5d:e3:9d:06:8b:00:57:15:be: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:D9:5E:B4:CC:CC:C2:3C:B5:CF:AC:C4:BF:16:91:94:2D:96:AA X509v3 Authority Key Identifier: keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/mojZXrTMzMI8tc-sxL8WkZQtlqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.170.0/24 Signature Algorithm: sha256WithRSAEncryption 89:0a:36:34:55:be:2c:d6:46:fa:39:7c:11:7c:12:5c:36:33: 41:49:f2:57:ed:36:fc:4b:29:94:72:f6:00:3a:47:1e:63:12: 7d:57:3a:44:e4:30:70:30:88:0b:25:fc:cf:02:7a:cb:14:e5: 48:18:9b:eb:be:10:b5:ed:fc:ec:ba:bb:45:a5:cb:6a:91:83: d8:74:5b:8b:12:a5:02:6e:8d:69:09:82:6f:0b:72:f4:87:94: 2e:83:a1:33:02:c5:db:78:41:9a:c0:93:6b:88:1e:e8:32:b6: e2:d0:7d:72:ba:48:ba:ce:60:d5:a9:32:cc:42:31:95:b6:27: 5c:a6:d9:d8:ab:83:4e:93:01:b0:73:96:eb:e1:fd:1d:96:d6: c3:e5:d6:3c:c8:80:a6:d8:1b:5b:35:c0:bb:bb:5a:2a:73:ad: 70:d0:5f:d0:f2:a0:e8:98:15:e0:b8:e2:78:75:af:92:67:63: 18:7a:20:de:9a:b6:84:70:7a:93:a8:6f:4d:12:8a:fa:90:88: a3:82:ab:03:48:c6:0e:30:37:07:d6:72:39:ee:b6:28:ba:09: bb:ca:d1:f4:f7:c1:eb:6c:d1:ad:e1:fb:da:8a:92:ea:f3:ee: ae:4f:d9:fd:8d:3b:c5:76:c7:47:7b:ba:24:41:24:09:f3:35: 20:b5:5f:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pM/2ZNYX8JZEtCbHIk9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl YmFjYmYwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTg4ZDk1ZWI0Y2NjY2MyM2NiNWNmYWNjNGJmMTY5MTk0MmQ5NmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC5rBebuY0ESGRs70zgb7+NlAf01 O0LdOy9DSmd2QIWCseoJj6vD+cx5fsCq9ecZ3vdts0exRj6utFkh+AtGfFRE+TXj PU2V7VT5EmRrLx7wIzjN/VG1fOLYuaRGlwGHOuj6/MPBD4f2WEAveTcP0eYGv18v B+DKJPUaDLbeAqbG66GrCq1Pi2c67doR7Nu2A/MYk+6cldM2X41vuJSXuH5wILnA 1KASCxleHwW2legtH+AezUnnDZn6e+WazMnzY7euZnsKO+QCeCxBCIdjm+Yy6Rkw lVpWU3zssQ2gBQzawpPNGNLByrWidw4VYoOLBKpwWaxd450GiwBXFb5jQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJqI2V60zMzCPLXPrMS/FpGULZaqMB8GA1UdIwQY MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt NGE3ZGRmMmQ4NmJkLzEvbW9qWlhyVE16TUk4dGMtc3hMOFdrWlF0bHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPSqMA0G CSqGSIb3DQEBCwUAA4IBAQCJCjY0Vb4s1kb6OXwRfBJcNjNBSfJX7Tb8SymUcvYA OkceYxJ9VzpE5DBwMIgLJfzPAnrLFOVIGJvrvhC17fzsurtFpctqkYPYdFuLEqUC bo1pCYJvC3L0h5Qug6EzAsXbeEGawJNriB7oMrbi0H1yuki6zmDVqTLMQjGVtidc ptnYq4NOkwGwc5br4f0dltbD5dY8yICm2BtbNcC7u1oqc61w0F/Q8qDomBXguOJ4 da+SZ2MYeiDemraEcHqTqG9NEor6kIijgqsDSMYOMDcH1nI57rYougm7ytH098Hr bNGt4fvaipLq8+6uT9n9jTvFdsdHe7okQSQJ8zUgtV+g -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:02 2026 by rpki-client