This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Mo6sIY942w2mOqA6gHPZH1sJxvo.roa File: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (raw, json) Hash identifier: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg= Subject key identifier: 32:8E:AC:21:8F:78:DB:0D:A6:3A:A0:3A:80:73:D9:1F:5B:09:C6:FA Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD75035C13C55DB172DC4C210E8B8 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Mo6sIY942w2mOqA6gHPZH1sJxvo.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208167 IP address blocks: 194.28.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d7:50:35:c1:3c:55:db:17:2d:c4:c2:10:e8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=328eac218f78db0da63aa03a8073d91f5b09c6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:47:3e:78:b5:9a:1f:7d:b1:86:40:0a:02:e5: d8:16:dd:5d:b8:0d:b6:22:e6:a4:70:36:63:c6:85: 79:e2:03:75:7f:05:c9:0c:6f:b1:84:c2:a0:c2:85: 3f:57:a9:fc:9a:88:bf:f0:9f:0b:80:ba:6f:b2:f4: de:92:ae:5f:09:df:fd:e0:6b:90:6c:47:20:bc:e0: d0:68:3e:7a:9e:2d:de:b3:f3:7b:ad:19:40:6b:00: c1:64:93:b8:1a:60:a1:f6:44:39:60:04:0c:7a:02: d7:98:95:94:1c:40:22:ed:f5:98:4a:03:a5:8f:61: d7:c6:33:f4:aa:62:4c:8c:f0:cc:64:11:da:5a:4e: 8f:4e:39:4e:95:9f:65:34:56:ae:bb:7f:2e:dc:27: 78:99:38:d6:b5:ef:6b:2e:e6:c0:03:55:b9:60:e8: 7f:ab:c7:9d:d6:c8:93:bd:18:9c:18:94:7c:3f:fa: 79:c5:74:7e:c8:6e:bd:16:e1:9a:ac:4d:6d:72:3f: e5:d7:c0:44:0d:fd:08:4a:d8:20:e9:3a:1e:1d:26: f0:f9:47:90:09:cd:45:56:91:22:db:94:be:4c:b5: 94:0e:a6:7b:cd:17:f4:27:3b:77:ff:53:3d:e3:69: d3:4a:c1:91:77:07:bb:1b:f8:d9:0e:73:e1:c4:90: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:AC:21:8F:78:DB:0D:A6:3A:A0:3A:80:73:D9:1F:5B:09:C6:FA X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Mo6sIY942w2mOqA6gHPZH1sJxvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.227.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:c8:94:df:9f:1a:45:ed:f4:ad:74:01:3f:fd:e2:a4:ea:9d: 14:e3:75:96:64:ee:69:77:26:fe:45:ce:58:a2:9d:a8:7b:0c: b8:81:73:86:2b:06:27:4b:11:64:5b:2d:d3:d9:20:42:48:ac: 84:8d:7c:7b:59:54:ba:4a:8b:6b:0e:10:2a:af:06:49:84:72: ce:11:1a:b8:55:f8:3c:a8:f6:b0:79:99:a8:df:c2:c7:05:92: 84:7c:de:49:26:65:1f:40:a7:77:4b:f1:79:db:bf:0d:00:17: 94:ea:10:0c:be:9b:c8:c5:9e:b5:bf:8f:2c:f2:49:e7:88:49: 48:c9:74:65:7a:de:7c:a1:8f:93:50:94:4a:87:af:c1:db:ca: 89:2b:4f:82:44:be:1f:67:09:d9:7c:a5:17:4d:b0:2b:64:07: 68:fd:52:8b:20:01:1a:d3:eb:dc:0f:60:3d:7f:71:40:fe:c3: d7:c3:ed:1c:be:dc:83:a6:88:37:32:76:26:97:8f:1b:a7:26: 72:8e:0d:90:8f:bd:47:00:09:23:6d:59:75:53:f7:33:33:cd: fb:44:ee:d4:14:0f:8e:00:68:39:55:17:5a:97:18:15:83:a7: 4f:42:10:4e:19:53:84:bc:3b:b0:cb:b3:fa:13:bc:5f:06:a9: 81:21:3b:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNdQNcE8VdsXLcTCEOi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjhlYWMyMThmNzhkYjBkYTYzYWEwM2E4MDczZDkxZjViMDljNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUc+eLWaH32xhkAKAuXYFt1duA22 IuakcDZjxoV54gN1fwXJDG+xhMKgwoU/V6n8moi/8J8LgLpvsvTekq5fCd/94GuQ bEcgvODQaD56ni3es/N7rRlAawDBZJO4GmCh9kQ5YAQMegLXmJWUHEAi7fWYSgOl j2HXxjP0qmJMjPDMZBHaWk6PTjlOlZ9lNFauu38u3Cd4mTjWte9rLubAA1W5YOh/ q8ed1siTvRicGJR8P/p5xXR+yG69FuGarE1tcj/l18BEDf0IStgg6ToeHSbw+UeQ Cc1FVpEi25S+TLWUDqZ7zRf0Jzt3/1M942nTSsGRdwe7G/jZDnPhxJD2pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDKOrCGPeNsNpjqgOoBz2R9bCcb6MB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvTW82c0lZOTQydzJtT3FBNmdIUFpIMXNKeHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhzjMA0G CSqGSIb3DQEBCwUAA4IBAQCfyJTfnxpF7fStdAE//eKk6p0U43WWZO5pdyb+Rc5Y op2oewy4gXOGKwYnSxFkWy3T2SBCSKyEjXx7WVS6SotrDhAqrwZJhHLOERq4Vfg8 qPaweZmo38LHBZKEfN5JJmUfQKd3S/F5278NABeU6hAMvpvIxZ61v48s8knniElI yXRlet58oY+TUJRKh6/B28qJK0+CRL4fZwnZfKUXTbArZAdo/VKLIAEa0+vcD2A9 f3FA/sPXw+0cvtyDpog3MnYml48bpyZyjg2Qj71HAAkjbVl1U/czM837RO7UFA+O AGg5VRdalxgVg6dPQhBOGVOEvDuwy7P6E7xfBqmBITuZ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:26 2026 by rpki-client