This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mso1UQvbhwsYkm7Luyr_sE3wNBg.roa File: mso1UQvbhwsYkm7Luyr_sE3wNBg.roa (raw, json) Hash identifier: CVYD+sOdIoyw/dmZ6n2SpfIVR2cBdyobuxJi+PggJLA= Subject key identifier: 9A:CA:35:51:0B:DB:87:0B:18:92:6E:CB:BB:2A:FF:B0:4D:F0:34:18 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E32A2F09BA421FF2F68A897C8FB87 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mso1UQvbhwsYkm7Luyr_sE3wNBg.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131477 IP address blocks: 185.188.5.0/24 maxlen: 32 185.255.152.0/23 maxlen: 32 185.255.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:32:a2:f0:9b:a4:21:ff:2f:68:a8:97:c8:fb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aca35510bdb870b18926ecbbb2affb04df03418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:ef:59:c8:75:d8:26:4a:68:21:86:19:bb: 94:b0:d0:df:c5:b4:bc:13:d4:99:24:91:0d:f6:8d: 31:7e:5d:4a:e9:37:23:fc:ae:18:9a:c2:2b:cd:0e: 36:09:f0:a3:5a:12:6d:7c:67:60:cb:1e:f5:e2:4f: 0d:c3:41:33:59:62:af:73:67:a1:81:27:20:a6:66: 22:b4:4c:07:b4:2c:79:94:9a:56:6b:0e:e1:22:73: 3a:8d:65:81:d8:a0:2a:53:e1:51:32:64:5e:de:3f: 72:5f:29:be:26:d1:59:03:c8:49:ce:69:21:d3:14: bc:e0:c3:76:97:29:0d:b7:92:c7:a9:14:91:ad:c6: 0f:23:b4:bc:34:04:da:0e:53:d9:9c:91:6f:97:ac: 6b:44:04:88:5d:4b:40:25:69:0d:cf:8c:d1:c2:00: 82:f4:6a:db:56:c8:c0:65:8b:6f:ba:77:16:fa:7c: 9a:c1:43:59:5b:40:1c:cd:76:21:19:fa:a1:b5:d5: 44:d4:fc:28:3e:50:1d:6e:9e:2e:2e:c0:79:92:bb: f6:f0:e7:bc:f1:d0:3f:71:d6:f2:62:f8:62:5d:a0: 8d:c8:36:82:cc:5f:d3:4b:30:f8:fc:c1:2f:f8:2c: 32:9a:55:cc:28:d3:d0:a6:41:6e:83:20:78:6e:0f: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:35:51:0B:DB:87:0B:18:92:6E:CB:BB:2A:FF:B0:4D:F0:34:18 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mso1UQvbhwsYkm7Luyr_sE3wNBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.5.0/24 185.255.152.0/23 Signature Algorithm: sha256WithRSAEncryption 41:54:83:42:7e:22:44:81:07:d8:0d:dd:87:be:09:cb:6c:17: c4:9b:2c:8d:e2:74:58:9b:b2:e8:34:0c:e1:7f:14:c5:95:b5: a2:88:4c:f7:59:7d:bc:15:16:e9:13:aa:a6:ff:20:eb:fa:2d: 7c:c3:4d:e1:97:2c:2d:17:f9:c2:10:40:b8:84:98:aa:f4:15: da:e6:dd:09:09:c3:d5:c6:9e:63:8a:17:f2:2e:0f:c1:5d:50: 57:12:7c:5e:83:bb:5a:d8:e8:a0:22:48:13:f8:88:43:01:30: 15:37:f7:6f:5f:c2:a7:90:dd:dd:c8:2c:d2:fa:1e:57:09:01: 85:81:0e:5a:18:02:e0:92:d2:2e:a5:13:d5:2e:fd:a6:bd:d9: 08:dd:d6:f9:35:91:e9:57:26:e2:e2:9d:2f:e2:eb:3a:57:28: 76:6a:05:8a:7f:ad:03:f1:0d:4d:ff:a5:af:45:29:5d:db:0b: 4b:29:30:d8:32:d9:6c:df:89:82:72:da:1a:6f:ae:46:e0:1c: 2b:4c:23:52:f2:cd:a4:fb:f5:75:e0:0c:ab:e3:73:9b:f6:88: c1:58:d3:15:64:08:12:de:f2:e4:1b:ca:ff:86:d2:83:c4:16: d8:d6:fa:a9:e3:05:2f:27:63:f2:55:75:6d:3c:ce:7c:ef:6c: ee:93:d1:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fjKi8JukIf8vaKiXyPuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWNhMzU1MTBiZGI4NzBiMTg5MjZlY2JiYjJhZmZiMDRkZjAzNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRvvWch12CZKaCGGGbuUsNDfxbS8 E9SZJJEN9o0xfl1K6Tcj/K4YmsIrzQ42CfCjWhJtfGdgyx714k8Nw0EzWWKvc2eh gScgpmYitEwHtCx5lJpWaw7hInM6jWWB2KAqU+FRMmRe3j9yXym+JtFZA8hJzmkh 0xS84MN2lykNt5LHqRSRrcYPI7S8NATaDlPZnJFvl6xrRASIXUtAJWkNz4zRwgCC 9GrbVsjAZYtvuncW+nyawUNZW0AczXYhGfqhtdVE1PwoPlAdbp4uLsB5krv28Oe8 8dA/cdbyYvhiXaCNyDaCzF/TSzD4/MEv+CwymlXMKNPQpkFugyB4bg8nfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJrKNVEL24cLGJJuy7sq/7BN8DQYMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvbXNvMVVRdmJod3NZa203THV5cl9zRTN3TkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubwFAwQB uf+YMA0GCSqGSIb3DQEBCwUAA4IBAQBBVINCfiJEgQfYDd2HvgnLbBfEmyyN4nRY m7LoNAzhfxTFlbWiiEz3WX28FRbpE6qm/yDr+i18w03hlywtF/nCEEC4hJiq9BXa 5t0JCcPVxp5jihfyLg/BXVBXEnxeg7ta2OigIkgT+IhDATAVN/dvX8KnkN3dyCzS +h5XCQGFgQ5aGALgktIupRPVLv2mvdkI3db5NZHpVybi4p0v4us6Vyh2agWKf60D 8Q1N/6WvRSld2wtLKTDYMtls34mCctoab65G4BwrTCNS8s2k+/V14Ayr43Ob9ojB WNMVZAgS3vLkG8r/htKDxBbY1vqp4wUvJ2PyVXVtPM5872zuk9FM -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:04 2026 by rpki-client