This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/moqgxeoXoWxB5SkymDkSLyfQjMA.roa File: moqgxeoXoWxB5SkymDkSLyfQjMA.roa (raw, json) Hash identifier: J336Q0cNTAxh7VER7cVnxYDpBUc4K8/+q/BQ2CTm1Uk= Subject key identifier: 9A:8A:A0:C5:EA:17:A1:6C:41:E5:29:32:98:39:12:2F:27:D0:8C:C0 Certificate issuer: /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Certificate serial: 019B7F81688D4C703448EBE07C84D1E1983F Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/moqgxeoXoWxB5SkymDkSLyfQjMA.roa Signing time: Fri 02 Jan 2026 16:19:05 +0000 ROA not before: Fri 02 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211625 IP address blocks: 185.75.4.0/22 maxlen: 22 185.235.9.0/24 maxlen: 24 2a10:b7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:68:8d:4c:70:34:48:eb:e0:7c:84:d1:e1:98:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Validity Not Before: Jan 2 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a8aa0c5ea17a16c41e529329839122f27d08cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6d:ad:d0:c3:08:00:8b:2b:8d:a4:bc:79:e2: 3c:c5:84:00:88:4c:16:df:cf:fa:8b:34:b3:30:ea: 93:06:5e:01:12:03:f2:c1:46:ec:9c:b3:e4:9a:36: 09:0f:1c:78:6b:e5:e2:2c:70:c3:90:02:7a:34:c5: 36:a0:f7:de:72:65:f8:76:ef:c0:37:2f:05:87:d2: ca:7d:96:c7:6b:b4:dd:a4:7b:a8:e5:55:a1:90:1f: f4:e0:6a:68:d3:2f:91:1b:9e:ba:90:b9:d0:0c:12: 83:6e:e2:06:43:b3:c7:77:70:b4:8b:4e:a7:0a:bb: ab:5c:c9:32:9d:ca:df:10:fe:46:3f:69:fa:b5:b1: fb:56:65:5a:df:3b:a7:71:25:f2:0a:20:0a:78:39: 03:70:6c:08:0c:dd:e9:22:74:ab:99:02:84:ab:02: 0a:0d:af:64:e2:d5:7b:bd:7f:37:ca:11:9b:29:07: 5a:75:e8:81:f1:1a:46:b2:d4:25:7f:5a:c6:61:4c: 55:3e:c5:07:03:ff:af:39:2a:38:34:7d:41:63:60: 16:57:2e:72:d2:be:c9:77:2c:2a:76:fa:df:21:a7: 58:c4:df:18:7a:b0:cc:71:db:73:97:63:c6:9e:31: 9c:25:b9:bd:69:5c:92:f8:c0:ee:fb:da:6a:0d:8f: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8A:A0:C5:EA:17:A1:6C:41:E5:29:32:98:39:12:2F:27:D0:8C:C0 X509v3 Authority Key Identifier: keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/moqgxeoXoWxB5SkymDkSLyfQjMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.4.0/22 185.235.9.0/24 IPv6: 2a10:b7c0::/29 Signature Algorithm: sha256WithRSAEncryption 43:67:4c:f5:99:78:0a:95:e7:0a:5b:e4:de:cf:47:d2:80:68: 20:c0:6c:34:c3:98:55:8c:9c:b6:7b:b7:de:dc:00:9e:9b:ba: 24:72:e1:92:79:36:55:7a:60:0c:03:0f:c4:39:a2:19:ff:90: ee:6e:58:e3:a1:c6:57:99:dd:d6:c8:b0:b3:a3:26:3c:24:3b: 05:16:62:de:7d:45:ac:78:10:6b:fd:4e:e2:a6:64:b6:0a:d6: aa:f7:7a:88:ed:a0:26:82:75:f1:03:3a:34:c7:3a:e5:c6:0b: ec:19:13:c6:08:31:68:66:e3:3b:da:38:96:fb:86:28:58:dd: 87:83:52:ac:98:a1:10:d7:0b:5e:ed:39:94:2b:06:e2:57:b4: 05:48:b9:93:9c:49:49:62:4f:21:86:66:46:87:b3:aa:b2:2c: ec:5e:ee:d7:79:4c:bf:5f:64:be:23:3a:07:21:d5:e4:ff:fc: 1c:b2:ef:d4:c5:c8:da:1c:eb:26:18:c4:24:15:6d:02:4e:60: 56:14:f5:41:d9:f8:52:b6:4d:72:fb:a4:b8:b7:a4:c1:03:03: f2:80:ff:78:d0:79:d2:a2:26:bd:26:b5:e7:3e:b9:7d:c6:06: 1e:21:c3:11:44:89:5f:de:7b:f5:53:f8:21:77:89:3f:5d:f6: da:71:6a:39 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gWiNTHA0SOvgfITR4Zg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZTZhNWMzMTM2YmQyZmRkMzZjODRhMGNjNzI1YmY3Y2Iw ZmVhYjUwHhcNMjYwMTAyMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YThhYTBjNWVhMTdhMTZjNDFlNTI5MzI5ODM5MTIyZjI3ZDA4Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG2t0MMIAIsrjaS8eeI8xYQAiEwW 38/6izSzMOqTBl4BEgPywUbsnLPkmjYJDxx4a+XiLHDDkAJ6NMU2oPfecmX4du/A Ny8Fh9LKfZbHa7TdpHuo5VWhkB/04Gpo0y+RG566kLnQDBKDbuIGQ7PHd3C0i06n CrurXMkyncrfEP5GP2n6tbH7VmVa3zuncSXyCiAKeDkDcGwIDN3pInSrmQKEqwIK Da9k4tV7vX83yhGbKQdadeiB8RpGstQlf1rGYUxVPsUHA/+vOSo4NH1BY2AWVy5y 0r7JdywqdvrfIadYxN8YerDMcdtzl2PGnjGcJbm9aVyS+MDu+9pqDY8iSQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJqKoMXqF6FsQeUpMpg5Ei8n0IzAMB8GA1UdIwQY MBaAFDDmpcMTa9L902yEoMxyW/fLD+q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTIt Yjc5OTY4ZTBlMTc0LzEvbW9xZ3hlb1hvV3hCNVNreW1Ea1NMeWZRak1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTItYjc5OTY4ZTBlMTc0 LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUsEAwQA uesJMA0EAgACMAcDBQMqELfAMA0GCSqGSIb3DQEBCwUAA4IBAQBDZ0z1mXgKlecK W+Tez0fSgGggwGw0w5hVjJy2e7fe3ACem7okcuGSeTZVemAMAw/EOaIZ/5Dubljj ocZXmd3WyLCzoyY8JDsFFmLefUWseBBr/U7ipmS2Ctaq93qI7aAmgnXxAzo0xzrl xgvsGRPGCDFoZuM72jiW+4YoWN2Hg1KsmKEQ1wte7TmUKwbiV7QFSLmTnElJYk8h hmZGh7OqsizsXu7XeUy/X2S+IzoHIdXk//wcsu/UxcjaHOsmGMQkFW0CTmBWFPVB 2fhStk1y+6S4t6TBAwPygP940HnSoia9JrXnPrl9xgYeIcMRRIlf3nv1U/ghd4k/ XfbacWo5 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:34 2026 by rpki-client