This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/moJoOoCEp6i4rNXDBpdCecf1vUE.roa File: moJoOoCEp6i4rNXDBpdCecf1vUE.roa (raw, json) Hash identifier: yzZ6AlnxTcd9qO7N+pXUGy5T+fxEAbb4GZT4tVfsc3o= Subject key identifier: 9A:82:68:3A:80:84:A7:A8:B8:AC:D5:C3:06:97:42:79:C7:F5:BD:41 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019AD0F4FFEE591E5BFBB8169D7F3C3A127B Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/moJoOoCEp6i4rNXDBpdCecf1vUE.roa Signing time: Sat 29 Nov 2025 18:51:48 +0000 ROA not before: Sat 29 Nov 2025 18:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401783 IP address blocks: 195.216.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:f4:ff:ee:59:1e:5b:fb:b8:16:9d:7f:3c:3a:12:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Nov 29 18:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a82683a8084a7a8b8acd5c306974279c7f5bd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:7f:9a:a3:7f:10:d8:01:2c:9a:68:b3:ff: ca:6f:29:a0:42:e5:51:cb:44:42:1d:a2:d0:f5:5b: 5b:c9:b1:5f:44:01:9c:e1:3f:d1:94:64:f5:43:b0: 67:9c:f9:55:57:a9:ba:c8:d5:59:c1:5c:ee:bc:97: 45:64:20:25:84:d4:86:16:26:e4:89:a5:5a:9f:14: 05:9b:87:1b:ed:a8:45:6c:60:2b:e6:b8:50:ac:a3: f6:5d:75:c1:7d:35:9a:cf:86:8c:a3:0a:d1:64:3e: 71:77:2a:9e:5c:19:6a:3e:a6:c5:2b:89:64:76:38: a6:55:0e:0e:b5:8f:63:96:c6:f4:f2:9d:42:16:65: 2e:be:1a:89:32:bd:d0:47:c5:34:72:75:35:11:4a: 3e:14:d0:df:95:0c:fa:8b:99:fe:44:d7:5f:23:f5: c6:1a:78:d0:d0:5c:71:57:22:26:91:19:a0:a5:6b: 6c:38:f8:b3:c7:35:04:b5:97:52:c8:b8:55:97:53: db:90:6e:42:a2:91:fb:bb:7a:27:c5:f2:e9:85:f6: 05:88:0f:35:3e:73:b6:e2:14:28:4e:c8:4f:e3:fd: 9c:88:9b:6a:be:1d:81:c1:62:c7:00:8a:ef:be:a5: d2:19:1d:bb:fd:48:98:65:38:ea:12:66:5f:df:c7: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:82:68:3A:80:84:A7:A8:B8:AC:D5:C3:06:97:42:79:C7:F5:BD:41 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/moJoOoCEp6i4rNXDBpdCecf1vUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.174.0/24 Signature Algorithm: sha256WithRSAEncryption 02:10:80:c3:e9:e8:32:05:92:31:1b:60:a9:f7:00:87:e7:a8: 6b:de:66:66:e9:cb:68:f4:5f:94:17:33:58:69:e9:95:c4:17: 62:77:63:6d:c6:a5:85:e1:d3:07:d7:42:fa:e0:ab:96:5a:0a: 09:a3:40:0c:7e:aa:04:d9:96:b3:0d:55:09:94:9f:6e:bf:e8: 15:31:71:9c:f4:8c:e1:bc:35:1a:39:14:3c:24:ae:a8:17:fc: ad:f4:74:7d:f2:79:a4:f6:c5:51:9c:d6:f3:fc:2c:fc:7e:c7: be:97:75:e0:28:eb:07:44:34:54:14:bd:4c:a7:4a:11:82:81: 36:25:f4:ff:7c:ca:fd:72:e8:48:0e:df:d2:95:92:67:10:11: fc:cf:cc:67:83:95:65:ad:10:bd:ba:f3:b2:d9:ee:f7:ee:f0: 14:09:96:69:00:df:48:33:cd:d9:ee:b2:bd:59:7f:3d:82:80: 71:ec:b9:40:5b:5d:40:ee:f6:1d:70:00:a4:af:17:f3:ce:3c: 01:56:7b:e8:f2:b7:43:8a:cf:c4:81:b8:6c:39:ab:3d:2d:94: 14:2b:51:d0:64:2c:1f:9d:e9:56:6f:56:e5:ed:20:18:15:a8: 95:a2:60:ec:f1:b4:73:62:6a:9a:89:a4:7d:a7:cc:7a:25:d7: 05:77:6e:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrQ9P/uWR5b+7gWnX88OhJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUxMTI5MTg1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTgyNjgzYTgwODRhN2E4YjhhY2Q1YzMwNjk3NDI3OWM3ZjViZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiB/mqN/ENgBLJpos//KbymgQuVR y0RCHaLQ9VtbybFfRAGc4T/RlGT1Q7BnnPlVV6m6yNVZwVzuvJdFZCAlhNSGFibk iaVanxQFm4cb7ahFbGAr5rhQrKP2XXXBfTWaz4aMowrRZD5xdyqeXBlqPqbFK4lk djimVQ4OtY9jlsb08p1CFmUuvhqJMr3QR8U0cnU1EUo+FNDflQz6i5n+RNdfI/XG GnjQ0FxxVyImkRmgpWtsOPizxzUEtZdSyLhVl1PbkG5CopH7u3onxfLphfYFiA81 PnO24hQoTshP4/2ciJtqvh2BwWLHAIrvvqXSGR27/UiYZTjqEmZf38d/7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJqCaDqAhKeouKzVwwaXQnnH9b1BMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvbW9Kb09vQ0VwNmk0ck5YREJwZENlY2YxdlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9iuMA0G CSqGSIb3DQEBCwUAA4IBAQACEIDD6egyBZIxG2Cp9wCH56hr3mZm6cto9F+UFzNY aemVxBdid2NtxqWF4dMH10L64KuWWgoJo0AMfqoE2ZazDVUJlJ9uv+gVMXGc9Izh vDUaORQ8JK6oF/yt9HR98nmk9sVRnNbz/Cz8fse+l3XgKOsHRDRUFL1Mp0oRgoE2 JfT/fMr9cuhIDt/SlZJnEBH8z8xng5VlrRC9uvOy2e737vAUCZZpAN9IM83Z7rK9 WX89goBx7LlAW11A7vYdcACkrxfzzjwBVnvo8rdDis/EgbhsOas9LZQUK1HQZCwf nelWb1bl7SAYFaiVomDs8bRzYmqaiaR9p8x6JdcFd25j -----END CERTIFICATE-----Generated at Thu Dec 4 21:23:46 2025 by rpki-client