This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa File: Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa (raw, json) Hash identifier: kvdg8wCS9egZQzAgHG4zTvTOgP+Bu8A9k8hcSeFomOA= Subject key identifier: 32:86:FD:10:F4:60:BC:1C:E8:E0:7E:A1:6E:A4:D3:D8:77:43:DC:90 Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c Certificate serial: 019B7F83D36307110E20DB575676C6BC2E80 Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa Signing time: Fri 02 Jan 2026 16:21:44 +0000 ROA not before: Fri 02 Jan 2026 16:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30870 IP address blocks: 193.27.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d3:63:07:11:0e:20:db:57:56:76:c6:bc:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3286fd10f460bc1ce8e07ea16ea4d3d87743dc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:f4:b0:ab:bc:dd:2b:9e:31:e5:d3:c7:04: a7:5e:14:3a:2b:f7:9d:af:c6:2b:59:5b:98:db:98: d0:e6:47:47:0d:82:60:17:24:85:6f:f5:04:9c:f8: 97:cc:71:62:0a:5d:07:16:c3:f2:d5:ed:ee:bf:be: e1:49:97:1e:72:61:e6:ec:bc:45:d0:bb:db:45:1b: f6:db:e1:ab:61:50:18:d6:06:95:4d:02:b0:48:b4: 94:18:38:3a:c7:a3:d4:c0:86:65:03:98:71:28:d2: 92:b3:68:da:a7:c5:e7:64:00:c6:7c:39:2f:02:3e: f9:b6:29:9d:5c:a5:4e:ba:6f:19:da:30:a0:50:01: ff:9f:3a:a8:eb:cc:96:cf:f3:87:cd:32:3c:46:dd: f8:53:a7:3e:a7:04:f3:f8:39:3d:ae:c4:8c:61:07: c4:95:01:fa:36:df:c4:18:be:3e:c7:b9:e3:96:22: db:85:8d:51:03:60:1c:b5:1d:4e:03:13:b3:bb:13: 5a:a3:b3:2c:7c:58:b1:15:38:87:11:67:84:35:96: 88:fa:51:da:7f:51:74:6e:6c:dc:4e:05:48:e0:42: a3:36:46:bd:5b:23:79:93:5a:b8:b8:27:43:e7:af: 6c:2b:47:f0:0c:e8:26:84:d0:80:8a:c5:d4:d7:ee: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:FD:10:F4:60:BC:1C:E8:E0:7E:A1:6E:A4:D3:D8:77:43:DC:90 X509v3 Authority Key Identifier: keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.86.0/23 Signature Algorithm: sha256WithRSAEncryption 32:0e:b2:6f:08:c8:a3:f9:90:97:8f:45:7a:ad:15:da:f6:2e: 40:0f:a1:b3:9c:28:63:e8:25:e3:a5:75:11:0b:09:a5:44:5a: 1d:bc:74:54:82:7d:eb:9c:f4:48:f9:b3:99:51:90:0b:79:5f: 8d:38:da:99:27:1e:3d:eb:91:0e:21:43:5a:d2:c7:7c:d2:52: fd:d4:ff:74:ea:be:19:ca:78:35:92:6d:a4:7d:dd:f0:6e:e7: 61:36:36:6f:57:e4:53:86:b6:23:c1:f2:68:98:2c:fe:0f:b1: ce:27:a0:71:bc:8b:b3:f9:e0:96:cb:8e:26:e2:51:5f:cb:3e: f8:85:d1:d5:be:c6:68:2d:23:a3:fd:85:62:60:ea:10:bc:2d: 9a:76:48:0a:57:ba:48:1d:cf:cf:32:b5:45:da:91:46:d6:ba: a4:85:16:f3:18:e1:f1:e4:7f:1b:6c:c0:31:45:b5:f4:8f:03: 55:14:2a:ec:aa:2a:ee:de:4c:78:b6:f8:5e:e8:07:bc:cb:31: 02:6a:f9:7d:4f:ca:69:59:d3:2f:64:73:e2:22:0a:6f:29:28: e0:9a:f9:b1:09:4b:5d:fa:0c:cf:b8:9c:53:54:9f:01:6f:27: 24:b6:05:99:af:7d:2f:66:77:f1:6f:fa:99:a1:9e:e5:42:06: e4:79:80:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9NjBxEOINtXVnbGvC6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTIyZmNiNTRhMDkxZDY5MTNmZmU5ZmFmYjk4M2M1N2E0 YWMyMmMwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjg2ZmQxMGY0NjBiYzFjZThlMDdlYTE2ZWE0ZDNkODc3NDNkYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eb0sKu83SueMeXTxwSnXhQ6K/ed r8YrWVuY25jQ5kdHDYJgFySFb/UEnPiXzHFiCl0HFsPy1e3uv77hSZcecmHm7LxF 0LvbRRv22+GrYVAY1gaVTQKwSLSUGDg6x6PUwIZlA5hxKNKSs2jap8XnZADGfDkv Aj75timdXKVOum8Z2jCgUAH/nzqo68yWz/OHzTI8Rt34U6c+pwTz+Dk9rsSMYQfE lQH6Nt/EGL4+x7njliLbhY1RA2ActR1OAxOzuxNao7MsfFixFTiHEWeENZaI+lHa f1F0bmzcTgVI4EKjNka9WyN5k1q4uCdD569sK0fwDOgmhNCAisXU1+59YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDKG/RD0YLwc6OB+oW6k09h3Q9yQMB8GA1UdIwQY MBaAFKCiL8tUoJHWkT/+n6+5g8V6SsIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMt ZjkyN2U1ODJlYmY5LzEvTW9iOUVQUmd2QnpvNEg2aGJxVFQySGREM0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMtZjkyN2U1ODJlYmY5 LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRtWMA0G CSqGSIb3DQEBCwUAA4IBAQAyDrJvCMij+ZCXj0V6rRXa9i5AD6GznChj6CXjpXUR CwmlRFodvHRUgn3rnPRI+bOZUZALeV+NONqZJx4965EOIUNa0sd80lL91P906r4Z yng1km2kfd3wbudhNjZvV+RThrYjwfJomCz+D7HOJ6BxvIuz+eCWy44m4lFfyz74 hdHVvsZoLSOj/YViYOoQvC2adkgKV7pIHc/PMrVF2pFG1rqkhRbzGOHx5H8bbMAx RbX0jwNVFCrsqiru3kx4tvhe6Ae8yzECavl9T8ppWdMvZHPiIgpvKSjgmvmxCUtd +gzPuJxTVJ8BbycktgWZr30vZnfxb/qZoZ7lQgbkeYAo -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:48 2026 by rpki-client