This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa File: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (raw, json) Hash identifier: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA= Subject key identifier: 32:84:7A:4A:4A:67:BE:C6:79:C5:44:1B:0B:FC:53:EA:21:5D:34:90 Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134 Certificate serial: 019BC65C099BD02E135193266D69548EC502 Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa Signing time: Fri 16 Jan 2026 10:31:18 +0000 ROA not before: Fri 16 Jan 2026 10:31:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202649 IP address blocks: 85.137.250.0/24 maxlen: 24 2a12:5740::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:5c:09:9b:d0:2e:13:51:93:26:6d:69:54:8e:c5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134 Validity Not Before: Jan 16 10:31:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32847a4a4a67bec679c5441b0bfc53ea215d3490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6c:58:e8:25:ed:6e:63:88:e5:f1:f9:0d:09: 9a:a4:55:b6:2a:c5:6c:fd:51:84:6b:8f:57:7c:52: 5c:f4:0d:b6:83:4c:50:c2:db:ff:14:80:db:45:e6: 1e:5d:55:16:9d:e5:a0:7c:8c:ac:0b:99:bd:d6:e3: 3f:1d:de:e6:b1:49:e7:63:ed:78:9c:8a:c7:fd:94: 81:dd:b0:e1:77:58:e4:56:91:f0:eb:4a:37:0b:98: f0:3f:94:84:db:10:72:8e:3c:21:51:69:a7:cd:1a: 25:16:3c:73:20:cd:df:61:99:2c:70:9b:ee:04:57: e1:a3:2e:4e:e0:42:cc:ff:15:6d:96:7e:a1:62:a9: 4e:07:85:5c:87:90:a8:02:5c:05:d1:d8:9f:17:17: 1d:8c:67:d7:86:c9:4b:a9:dc:c0:65:0e:e5:3c:0a: 43:52:95:68:2e:20:1f:ca:87:e0:76:6b:8e:70:4a: da:22:81:86:80:d1:35:af:b2:ab:8d:61:f8:b8:a9: ae:36:3d:f8:00:42:69:af:5b:e0:23:9b:e5:b5:e3: 63:d8:c3:ac:90:b3:fc:95:c2:6a:96:cc:27:21:e7: d3:6c:00:2d:7a:8f:86:ba:e1:cf:a8:16:ff:bb:9d: 4d:71:57:d8:55:7a:0c:43:77:46:c8:c3:73:f1:fc: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:84:7A:4A:4A:67:BE:C6:79:C5:44:1B:0B:FC:53:EA:21:5D:34:90 X509v3 Authority Key Identifier: keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.137.250.0/24 IPv6: 2a12:5740::/29 Signature Algorithm: sha256WithRSAEncryption 07:44:33:68:d1:ae:69:2d:eb:c5:18:03:c1:c9:1f:36:3e:c3: 3a:f7:6c:a9:8a:a1:4a:48:6d:1a:25:90:af:41:e9:55:47:78: e0:bf:cf:f3:e2:28:ea:2b:2d:f5:ce:fb:db:ce:9e:2f:d2:ae: 59:21:6c:d3:9b:c1:08:2f:ab:b4:0a:1b:fd:e5:33:06:11:06: 0a:4f:e4:46:47:a6:42:06:67:cf:98:97:e7:da:2a:d8:18:83: e3:9e:7a:78:da:2a:6f:54:be:f3:40:61:33:a0:ce:67:51:bd: 7f:67:77:ed:7c:5f:7c:9d:22:0b:3a:2a:44:0e:d6:d2:1e:9b: 0d:71:2a:31:03:91:4e:8c:b8:05:4d:91:af:72:0a:a2:50:2d: b7:33:63:d5:cc:ae:43:d4:6a:90:f6:d4:ba:e0:5a:18:c0:66: 26:90:ce:aa:87:da:c6:98:4b:a1:d7:ce:d7:a0:f5:a4:02:95: 35:dc:91:32:96:8e:ea:b3:34:af:06:7e:cd:52:56:c2:88:99: 0a:11:d3:1d:d4:5b:38:e2:2d:71:0d:0f:e4:ff:2e:83:db:13: 05:0a:72:06:ba:b6:51:3d:c0:3b:58:5d:ac:8f:58:e8:27:86: 43:79:59:b8:5b:7e:73:e2:b8:36:a3:19:8f:c4:da:dc:6c:5a: 63:31:6e:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvGXAmb0C4TUZMmbWlUjsUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw ODkxMzQwHhcNMjYwMTE2MTAzMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjg0N2E0YTRhNjdiZWM2NzljNTQ0MWIwYmZjNTNlYTIxNWQzNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2xY6CXtbmOI5fH5DQmapFW2KsVs /VGEa49XfFJc9A22g0xQwtv/FIDbReYeXVUWneWgfIysC5m91uM/Hd7msUnnY+14 nIrH/ZSB3bDhd1jkVpHw60o3C5jwP5SE2xByjjwhUWmnzRolFjxzIM3fYZkscJvu BFfhoy5O4ELM/xVtln6hYqlOB4Vch5CoAlwF0difFxcdjGfXhslLqdzAZQ7lPApD UpVoLiAfyofgdmuOcEraIoGGgNE1r7KrjWH4uKmuNj34AEJpr1vgI5vlteNj2MOs kLP8lcJqlswnIefTbAAteo+GuuHPqBb/u51NcVfYVXoMQ3dGyMNz8fyTRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDKEekpKZ77GecVEGwv8U+ohXTSQMB8GA1UdIwQY MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt NzE5M2UxYjA2NmMzLzEvTW9SNlNrcG52c1o1eFVRYkNfeFQ2aUZkTkpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAVYn6MA0E AgACMAcDBQMqEldAMA0GCSqGSIb3DQEBCwUAA4IBAQAHRDNo0a5pLevFGAPByR82 PsM692ypiqFKSG0aJZCvQelVR3jgv8/z4ijqKy31zvvbzp4v0q5ZIWzTm8EIL6u0 Chv95TMGEQYKT+RGR6ZCBmfPmJfn2irYGIPjnnp42ipvVL7zQGEzoM5nUb1/Z3ft fF98nSILOipEDtbSHpsNcSoxA5FOjLgFTZGvcgqiUC23M2PVzK5D1GqQ9tS64FoY wGYmkM6qh9rGmEuh187XoPWkApU13JEylo7qszSvBn7NUlbCiJkKEdMd1Fs44i1x DQ/k/y6D2xMFCnIGurZRPcA7WF2sj1joJ4ZDeVm4W35z4rg2oxmPxNrcbFpjMW4n -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:37 2026 by rpki-client