This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mfvvA1199_WOJmaFnNL1EC1wssc.roa File: mfvvA1199_WOJmaFnNL1EC1wssc.roa (raw, json) Hash identifier: Yblok2z2DGWLy2+mBA5P4CJ/kScrpc6lS7zS9e/mD3I= Subject key identifier: 99:FB:EF:03:5D:7D:F7:F5:8E:26:66:85:9C:D2:F5:10:2D:70:B2:C7 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C800976DBBBD3A3237B2778D886F630 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mfvvA1199_WOJmaFnNL1EC1wssc.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9180 IP address blocks: 194.3.190.0/24 maxlen: 24 194.206.120.0/24 maxlen: 24 194.250.118.0/24 maxlen: 24 195.101.64.0/24 maxlen: 24 195.101.188.0/24 maxlen: 24 195.101.189.0/24 maxlen: 24 217.109.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:09:76:db:bb:d3:a3:23:7b:27:78:d8:86:f6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99fbef035d7df7f58e2666859cd2f5102d70b2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:81:ff:34:16:47:22:8e:2a:ab:fb:93:81: 62:58:d8:72:70:23:ea:7c:f7:52:33:7f:a4:04:91: 3a:c7:7a:2a:f7:18:40:7d:f6:58:e5:a8:30:05:80: 49:6c:45:0c:49:96:89:8d:b5:19:7b:88:c5:cc:46: 69:0e:54:b0:07:09:84:bd:1a:09:6a:37:c6:62:25: 1e:43:87:bc:06:be:94:6f:e9:1b:e3:05:c9:08:48: a8:cb:db:15:36:53:f1:e1:94:36:0b:64:84:81:b5: d9:dc:af:8c:d6:0c:b0:0b:d8:9b:35:2f:03:76:ac: 1c:e9:ad:90:0a:f6:56:6f:96:1d:aa:32:d2:50:27: d8:bb:42:25:cc:70:3d:d5:60:9f:01:2a:09:63:a7: 79:fd:06:72:68:f3:d0:2e:d6:38:6d:29:a3:5f:7f: 51:b8:94:90:a0:b4:80:41:18:4e:dc:92:7d:c3:80: 63:3a:db:23:46:15:ec:e8:ce:5d:fe:12:81:08:3b: 38:05:c4:af:f8:2a:a3:0d:7a:cc:a2:57:04:47:7e: 1c:7c:e4:17:90:0c:70:dd:b7:2b:88:40:a2:f8:b0: ba:ca:db:e6:a9:96:93:e2:6f:41:e0:9d:6d:8f:be: b8:39:54:bf:16:f5:f1:3c:f1:bf:c2:44:10:dc:0f: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FB:EF:03:5D:7D:F7:F5:8E:26:66:85:9C:D2:F5:10:2D:70:B2:C7 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mfvvA1199_WOJmaFnNL1EC1wssc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.3.190.0/24 194.206.120.0/24 194.250.118.0/24 195.101.64.0/24 195.101.188.0/23 217.109.127.0/24 Signature Algorithm: sha256WithRSAEncryption 61:3e:a3:a6:9c:9e:c7:8d:d7:cc:4f:db:5f:37:de:87:ef:d3: 09:b4:6b:b2:f3:13:b9:f1:f8:b0:2f:a6:24:f1:e3:10:d9:47: d5:3f:01:fc:da:cc:e8:92:df:ea:7c:46:43:ad:91:33:4b:3b: 17:35:c0:92:66:b2:ba:47:a9:e8:00:99:24:76:0e:74:3b:07: cb:9d:38:47:c1:5c:81:97:a0:ae:f8:77:d0:6d:7c:22:07:af: 0d:88:04:6a:79:68:f4:9d:cc:57:e3:ca:d0:2a:e4:2a:83:8a: cd:8c:7e:11:0d:67:48:a2:fa:fd:3a:f8:b5:23:bf:ad:e4:88: 03:5d:6c:d3:4d:85:f5:ef:04:8e:dd:03:1f:65:b8:a1:77:14: bb:bd:59:7d:ca:42:fd:c3:57:01:ae:80:37:57:9e:bb:ac:00: 4c:88:05:de:b0:15:1d:e6:a0:6b:c7:da:86:d5:c6:0c:89:87: f9:0f:f6:fb:94:48:ae:33:ca:70:27:13:cf:61:c6:d1:e4:98: 7f:cb:8f:a2:45:e5:c9:60:36:dd:60:45:c1:a8:de:d9:c4:a5: 32:b2:06:2e:cb:32:1d:6b:a5:b7:d9:f2:53:43:ee:05:74:89: 9b:44:38:e5:56:1d:68:92:11:7e:05:d4:63:f6:37:c1:38:5e: 2c:bf:92:61 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8gAl227vToyN7J3jYhvYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWZiZWYwMzVkN2RmN2Y1OGUyNjY2ODU5Y2QyZjUxMDJkNzBiMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SB/zQWRyKOKqv7k4FiWNhycCPq fPdSM3+kBJE6x3oq9xhAffZY5agwBYBJbEUMSZaJjbUZe4jFzEZpDlSwBwmEvRoJ ajfGYiUeQ4e8Br6Ub+kb4wXJCEioy9sVNlPx4ZQ2C2SEgbXZ3K+M1gywC9ibNS8D dqwc6a2QCvZWb5YdqjLSUCfYu0IlzHA91WCfASoJY6d5/QZyaPPQLtY4bSmjX39R uJSQoLSAQRhO3JJ9w4BjOtsjRhXs6M5d/hKBCDs4BcSv+CqjDXrMolcER34cfOQX kAxw3bcriECi+LC6ytvmqZaT4m9B4J1tj764OVS/FvXxPPG/wkQQ3A+uZwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJn77wNdfff1jiZmhZzS9RAtcLLHMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvbWZ2dkExMTk5X1dPSm1hRm5OTDFFQzF3c3NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwgO+AwQA ws54AwQAwvp2AwQAw2VAAwQBw2W8AwQA2W1/MA0GCSqGSIb3DQEBCwUAA4IBAQBh PqOmnJ7HjdfMT9tfN96H79MJtGuy8xO58fiwL6Yk8eMQ2UfVPwH82szokt/qfEZD rZEzSzsXNcCSZrK6R6noAJkkdg50OwfLnThHwVyBl6Cu+HfQbXwiB68NiARqeWj0 ncxX48rQKuQqg4rNjH4RDWdIovr9Ovi1I7+t5IgDXWzTTYX17wSO3QMfZbihdxS7 vVl9ykL9w1cBroA3V567rABMiAXesBUd5qBrx9qG1cYMiYf5D/b7lEiuM8pwJxPP YcbR5Jh/y4+iReXJYDbdYEXBqN7ZxKUysgYuyzIda6W32fJTQ+4FdImbRDjlVh1o khF+BdRj9jfBOF4sv5Jh -----END CERTIFICATE-----Generated at Wed Jan 21 21:01:29 2026 by rpki-client