This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Mt-Opg160kBARBTU28meoXARLd8.roa
File: Mt-Opg160kBARBTU28meoXARLd8.roa (raw, json)
Hash identifier: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=
Subject key identifier: 32:DF:8E:A6:0D:7A:D2:40:40:44:14:D4:DB:C9:9E:A1:70:11:2D:DF
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 019B7C11125AE986FF1A8D0978C8F41B155C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Mt-Opg160kBARBTU28meoXARLd8.roa
Signing time: Fri 02 Jan 2026 00:17:32 +0000
ROA not before: Fri 02 Jan 2026 00:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.167.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:12:5a:e9:86:ff:1a:8d:09:78:c8:f4:1b:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jan 2 00:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32df8ea60d7ad240404414d4dbc99ea170112ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:99:ee:4f:41:fc:cb:22:fc:25:47:f4:e4:
36:85:58:31:17:16:fd:6b:65:79:a2:b7:8f:40:61:
28:c6:5c:7e:fa:0e:b5:c6:35:e7:2d:d9:96:b3:1e:
9c:11:2f:a1:41:7b:67:65:d3:3e:f9:93:1c:e3:7f:
0a:3e:15:7c:6d:dd:07:8c:0e:68:d8:53:03:fb:85:
da:c2:bc:ec:ac:73:13:47:4a:b0:bf:2c:1f:52:1c:
86:94:3e:13:75:ac:12:a6:9b:06:3b:2c:d4:0c:34:
83:d2:55:d2:09:fd:c4:ad:ab:6b:60:1c:ad:cf:38:
3c:f2:c4:80:4c:e8:7f:6c:f3:b7:fd:bb:25:b5:9a:
75:f7:9e:8f:0c:f8:ae:bb:01:29:e0:06:7c:59:8c:
fb:f9:1b:d9:38:4c:b3:c0:06:64:68:20:9a:06:97:
ff:a6:75:67:2a:42:5d:c7:be:64:0e:51:fb:f7:3b:
56:e8:d0:19:c7:9e:2e:c2:5e:83:f8:5d:a7:fd:75:
7a:57:52:19:7e:b7:90:1f:c9:d3:94:0f:e8:57:8e:
b4:e5:8d:5f:ab:4b:ea:4a:4e:76:a7:8d:72:3b:51:
dd:77:5d:a3:c3:b8:8e:4a:53:84:f1:2d:ff:b0:0e:
e6:22:f8:a4:a4:d2:24:66:d6:18:60:56:dc:fe:d4:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:8E:A6:0D:7A:D2:40:40:44:14:D4:DB:C9:9E:A1:70:11:2D:DF
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Mt-Opg160kBARBTU28meoXARLd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.232.0/24
Signature Algorithm: sha256WithRSAEncryption
58:91:32:c2:c7:c8:3c:76:ae:80:48:f2:d4:90:9b:6d:86:89:
35:88:01:b6:49:7c:09:7a:31:df:d9:d1:34:09:42:aa:4f:07:
a8:6c:fc:2b:43:67:d4:bd:b5:93:19:25:7b:f7:e5:57:51:3b:
da:d5:a9:f7:a6:cd:d0:d0:8e:26:c4:a5:ba:2e:fd:19:f0:0e:
02:99:ed:3e:5a:9a:1e:66:73:84:1b:54:44:89:3e:1a:3f:1a:
7e:d5:63:f9:8c:00:b4:63:80:ac:81:13:9a:f8:e4:df:d6:6e:
8a:24:89:c5:ac:a9:cb:81:2d:38:ec:61:2c:c9:0a:f3:96:3b:
3a:dc:31:61:2d:ad:14:72:2a:ee:11:04:7c:35:92:72:e0:19:
17:8b:42:f9:a1:a8:5b:0f:4e:8a:61:07:2b:10:5c:05:2b:9a:
f3:e6:04:39:75:83:05:19:20:8b:be:e4:da:d0:0a:2f:b7:61:
a8:27:4a:7c:36:da:3e:88:5e:47:92:91:b2:c9:78:96:e9:86:
64:80:49:00:6c:df:0c:5a:10:01:60:28:35:79:d9:03:0c:bf:
63:82:00:46:c0:75:66:b9:97:1d:eb:25:b8:7d:ad:23:c5:13:
3a:e6:de:41:71:39:f7:38:26:69:2b:97:51:a4:3d:4a:9a:f5:
97:fc:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 21:42:08 2026 by rpki-client