This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/MOE6KwN-epUQMdljICsn17Njfbg.roa File: MOE6KwN-epUQMdljICsn17Njfbg.roa (raw, json) Hash identifier: iNc+kg2dbOxkcfPRJ+ToFioDzAzKbLX2bomVYrhE+a8= Subject key identifier: 30:E1:3A:2B:03:7E:7A:95:10:31:D9:63:20:2B:27:D7:B3:63:7D:B8 Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76 Certificate serial: 019B7CECDAB9F293C0096A11B0F79469BD29 Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/MOE6KwN-epUQMdljICsn17Njfbg.roa Signing time: Fri 02 Jan 2026 04:17:35 +0000 ROA not before: Fri 02 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209291 IP address blocks: 193.162.252.0/23 maxlen: 23 193.162.252.0/24 maxlen: 24 193.162.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:da:b9:f2:93:c0:09:6a:11:b0:f7:94:69:bd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76 Validity Not Before: Jan 2 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30e13a2b037e7a951031d963202b27d7b3637db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:57:67:ef:a8:e0:65:34:eb:bb:a2:31:96: 04:e2:22:8c:1a:9c:9f:3d:00:c4:5f:da:50:b2:77: b7:68:33:9c:66:0b:bc:32:b6:aa:30:72:1d:86:93: ae:bf:a1:8a:d6:d8:14:07:14:69:ae:5d:fa:23:ae: cb:45:8d:ae:a6:0d:be:b9:e1:da:40:e4:4a:93:e3: 10:c8:4d:71:16:2e:ff:dd:76:5b:f1:ac:4c:4f:a7: a5:23:11:32:96:ee:cc:3a:e5:31:fb:7c:4f:fd:39: 0e:ed:1a:89:88:4d:4b:82:1d:4d:ec:3c:17:29:a5: 0d:1a:0b:54:25:63:9f:8b:63:74:18:b2:d5:6e:18: 07:28:d4:23:6c:65:78:07:3a:c3:e0:67:2f:86:c1: 8a:c7:08:77:b1:ef:63:2a:2b:17:d8:d8:29:f7:3f: 63:7b:1e:38:7f:eb:15:cd:2e:5c:89:37:95:d1:c7: 0f:37:5a:11:04:93:83:5a:ed:3d:99:c5:36:db:27: b1:57:84:48:44:75:d2:38:ba:49:c7:eb:75:e1:d6: 57:75:be:10:83:7e:6a:10:2f:b4:34:65:34:04:14: b9:b9:86:0e:07:bb:1e:55:b6:64:ee:bc:b5:82:8b: fc:ae:c7:a6:1c:ab:58:ec:9f:04:07:8b:d6:71:30: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E1:3A:2B:03:7E:7A:95:10:31:D9:63:20:2B:27:D7:B3:63:7D:B8 X509v3 Authority Key Identifier: keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/MOE6KwN-epUQMdljICsn17Njfbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.252.0/23 Signature Algorithm: sha256WithRSAEncryption cb:02:fd:30:a7:b8:1d:39:a0:89:a1:39:cf:c7:1d:af:89:4c: 30:68:4a:04:2c:30:b5:61:fa:d6:30:19:f8:ed:7a:b1:32:79: c1:1f:ae:51:41:05:79:6b:b1:38:15:97:d1:de:a9:8a:57:a1: 26:2a:3e:8c:cb:3a:0a:4f:59:d6:ec:92:6c:62:06:e7:6d:c3: c5:a3:ea:e8:ff:93:1f:d1:fd:43:2a:d6:9e:f8:c4:43:db:56: 8d:d7:6b:95:8a:e1:2d:26:ba:f3:95:bb:81:e5:09:b4:63:0d: d1:ee:a6:c5:0f:14:e6:59:70:25:dc:b5:77:f2:21:6c:3c:39: 8d:9d:c6:4f:a2:3e:7b:c8:af:1e:0a:53:f6:14:c6:c2:f2:43: 2b:49:94:d4:8e:b1:0a:a7:6a:51:73:9f:7d:06:f5:cc:e8:6c: 7c:d0:83:b9:10:ee:df:6a:03:2d:d0:56:fa:11:0c:03:00:47: 44:a7:8b:80:2c:17:c3:9e:cf:3a:0b:35:f5:2d:72:d3:c8:ca: 05:a4:04:b8:85:0f:59:ad:ba:1e:45:70:02:d3:46:9e:1b:79: 09:2f:40:a3:5f:62:b8:f8:29:fd:8b:5e:bd:f0:58:7a:cf:74: a1:bd:38:d1:93:fe:94:47:f1:0f:92:dc:dd:37:b4:1a:39:ea: e6:85:ab:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Nq58pPACWoRsPeUab0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjY4YjExMjQ0M2E0OTZlOTY2NTFkNTgyYjZjYzY0MTNm YjVjNzYwHhcNMjYwMTAyMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGUxM2EyYjAzN2U3YTk1MTAzMWQ5NjMyMDJiMjdkN2IzNjM3ZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbNXZ++o4GU067uiMZYE4iKMGpyf PQDEX9pQsne3aDOcZgu8MraqMHIdhpOuv6GK1tgUBxRprl36I67LRY2upg2+ueHa QORKk+MQyE1xFi7/3XZb8axMT6elIxEylu7MOuUx+3xP/TkO7RqJiE1Lgh1N7DwX KaUNGgtUJWOfi2N0GLLVbhgHKNQjbGV4BzrD4GcvhsGKxwh3se9jKisX2Ngp9z9j ex44f+sVzS5ciTeV0ccPN1oRBJODWu09mcU22yexV4RIRHXSOLpJx+t14dZXdb4Q g35qEC+0NGU0BBS5uYYOB7seVbZk7ry1gov8rsemHKtY7J8EB4vWcTCLkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDhOisDfnqVEDHZYyArJ9ezY324MB8GA1UdIwQY MBaAFPFmixEkQ6SW6WZR1YK2zGQT+1x2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDkt MWZiNjY4NWE4ZDk3LzEvTU9FNkt3Ti1lcFVRTWRsaklDc24xN05qZmJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDktMWZiNjY4NWE4ZDk3 LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwaL8MA0G CSqGSIb3DQEBCwUAA4IBAQDLAv0wp7gdOaCJoTnPxx2viUwwaEoELDC1YfrWMBn4 7XqxMnnBH65RQQV5a7E4FZfR3qmKV6EmKj6MyzoKT1nW7JJsYgbnbcPFo+ro/5Mf 0f1DKtae+MRD21aN12uViuEtJrrzlbuB5Qm0Yw3R7qbFDxTmWXAl3LV38iFsPDmN ncZPoj57yK8eClP2FMbC8kMrSZTUjrEKp2pRc599BvXM6Gx80IO5EO7fagMt0Fb6 EQwDAEdEp4uALBfDns86CzX1LXLTyMoFpAS4hQ9ZrboeRXAC00aeG3kJL0CjX2K4 +Cn9i1698Fh6z3ShvTjRk/6UR/EPktzdN7QaOermhavI -----END CERTIFICATE-----Generated at Tue Jan 27 07:12:10 2026 by rpki-client