This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/MhZOe77osz5B_8Rh1NnTYFYC4RY.roa
File: MhZOe77osz5B_8Rh1NnTYFYC4RY.roa (raw, json)
Hash identifier: rhVOkCdXb2TMRwQp2v+rjEc1UOZNU4YoXtht0IE+lxo=
Subject key identifier: 32:16:4E:7B:BE:E8:B3:3E:41:FF:C4:61:D4:D9:D3:60:56:02:E1:16
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019B76EAC44FF0676FC00407F6242DAC0FDB
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/MhZOe77osz5B_8Rh1NnTYFYC4RY.roa
Signing time: Thu 01 Jan 2026 00:17:35 +0000
ROA not before: Thu 01 Jan 2026 00:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133398
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:c4:4f:f0:67:6f:c0:04:07:f6:24:2d:ac:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 00:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32164e7bbee8b33e41ffc461d4d9d3605602e116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:04:f9:a4:15:53:18:25:03:41:2e:d6:20:
fa:e3:b3:cd:48:ae:e7:81:18:c7:68:a7:7f:fa:45:
90:f5:f8:82:30:68:c3:9e:e9:c3:f2:85:7a:70:84:
00:f3:a5:97:36:dc:23:ea:c3:a3:1b:3c:08:dc:30:
eb:35:e3:76:c5:44:d3:c3:8b:5b:87:4a:3b:6f:d1:
47:7d:49:76:40:75:9e:54:72:5e:25:1e:08:e6:a8:
cc:29:83:ac:2a:6b:d1:2a:0b:7a:7b:b2:50:95:44:
b4:7f:d8:a7:56:c3:2e:7c:ee:5e:dc:28:1c:72:7d:
56:1b:88:35:ff:2e:70:8f:7c:f1:18:33:39:af:4a:
76:fb:31:2b:7a:13:66:b8:d9:c2:1d:7e:85:5f:49:
9b:e4:04:1b:b5:3c:29:f1:d0:00:74:e0:27:2a:4b:
e5:16:c1:43:db:48:67:d1:96:7d:71:9f:17:32:9c:
43:5b:5b:c5:dd:74:b2:8c:1c:71:3b:d7:93:d4:07:
a9:cd:a1:39:83:4e:96:a7:83:a6:5a:fb:17:47:16:
a1:3a:8e:2f:67:11:89:1c:25:39:ed:ae:12:87:11:
51:09:4f:18:26:43:6a:86:d4:77:1c:03:62:2d:07:
a2:a2:b4:1e:b8:07:a0:63:0a:ae:e1:c8:72:95:3c:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:4E:7B:BE:E8:B3:3E:41:FF:C4:61:D4:D9:D3:60:56:02:E1:16
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/MhZOe77osz5B_8Rh1NnTYFYC4RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5d:68:e1:f9:c0:d5:82:e8:f9:c5:fa:74:d2:c5:7f:72:23:
0b:d8:f7:e9:6c:79:ac:95:00:d9:80:6f:c5:8f:b1:01:46:a7:
4d:fc:de:c6:f4:62:c3:e5:75:de:0a:13:0e:c7:3e:1d:b4:0b:
ba:0e:53:aa:c1:5c:61:80:ff:57:5f:a7:91:24:1c:ff:07:72:
9d:83:bc:11:f7:33:24:95:c7:39:f0:46:78:37:fd:bd:d1:f1:
13:1a:8d:c2:0a:c6:55:a0:4c:f9:da:aa:67:30:0b:79:cf:c5:
a7:50:9f:c8:a4:92:b1:ce:9a:88:19:b0:96:99:f2:56:af:0f:
c5:46:9a:94:8e:22:b2:15:fa:a1:c5:f6:3e:b7:83:19:bd:d7:
6d:66:83:da:12:70:0d:ce:e5:46:72:df:a2:c2:74:4d:6c:30:
d2:77:fe:c5:b8:76:e6:0d:8b:90:a9:47:c5:d9:ec:4e:97:5b:
2a:9c:e7:5f:39:79:02:5c:76:06:9a:ee:99:db:5e:f7:e2:c0:
08:e7:61:08:2c:80:0c:2b:2a:ef:48:6d:3b:ef:31:26:19:cb:
6d:49:2f:e5:98:f0:64:3e:09:b2:5b:ad:34:48:0b:5a:85:e0:
0d:1a:22:5d:e1:83:83:86:ef:e4:a4:dd:72:76:98:ba:96:d0:
4d:36:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:07:58 2026 by rpki-client