This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/MoJrBXKuH1WW-h36SgH6MXEtMuw.roa File: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (raw, json) Hash identifier: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8= Subject key identifier: 32:82:6B:05:72:AE:1F:55:96:FA:1D:FA:4A:01:FA:31:71:2D:32:EC Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697 Certificate serial: 019B77C67D07579331ED07866CFF4A4CA6DB Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/MoJrBXKuH1WW-h36SgH6MXEtMuw.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55532 IP address blocks: 2.58.104.0/24 maxlen: 24 2.58.105.0/24 maxlen: 24 2.58.106.0/24 maxlen: 24 2.58.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7d:07:57:93:31:ed:07:86:6c:ff:4a:4c:a6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32826b0572ae1f5596fa1dfa4a01fa31712d32ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a3:81:62:58:86:1a:f5:db:e0:68:85:bf:91: 66:f8:33:8e:29:da:bc:06:11:0f:84:ba:0f:a6:94: 38:eb:86:09:40:cb:ba:ac:9e:b1:61:bd:70:55:88: 16:bc:a5:77:a2:d9:87:2b:ca:f5:e1:2e:83:c4:29: f3:0e:90:9c:aa:a7:7c:ce:19:84:c1:d9:6e:42:50: 1f:77:2e:75:11:f4:0a:4f:9b:ea:4c:c9:49:a6:3e: b2:16:84:23:d6:cd:e7:e1:77:d0:97:0c:27:12:08: 53:0c:9b:bf:55:9f:2d:db:db:27:37:9a:23:cd:8a: b2:49:9d:ff:32:5f:51:5c:56:25:4f:57:0c:2b:1f: 3a:95:88:29:c7:c0:bb:94:ca:b5:c6:01:ff:74:74: 4a:9b:3e:d9:f6:7d:40:0f:fe:ca:d6:86:3c:77:63: c5:15:e6:12:38:5c:74:cb:b1:fe:aa:59:b8:cf:d7: 17:2f:3e:31:79:c0:89:1b:70:a5:53:96:7d:7d:21: 03:ae:61:48:e0:62:55:5f:d7:86:24:41:6d:f0:73: 24:df:f1:d3:de:a3:9b:78:7e:64:07:95:73:aa:d4: a7:f1:00:55:d4:fe:58:7f:da:f3:c1:42:1b:60:9a: 12:65:82:49:ca:e5:c1:3e:cd:a7:53:55:ed:c9:81: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:82:6B:05:72:AE:1F:55:96:FA:1D:FA:4A:01:FA:31:71:2D:32:EC X509v3 Authority Key Identifier: keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/MoJrBXKuH1WW-h36SgH6MXEtMuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.104.0/22 Signature Algorithm: sha256WithRSAEncryption 23:95:c2:99:5d:5e:55:f3:f7:07:2e:93:01:ea:2c:69:6d:6f: c4:dc:6c:36:6a:b5:56:28:66:7f:36:56:e1:26:5d:0f:7b:af: fb:24:87:87:e5:ed:af:e8:f9:1f:bc:54:c7:06:70:85:25:5b: 5d:b7:7b:5c:0a:49:ff:c3:d7:70:b6:12:34:75:21:92:a7:f0: 0f:ab:c3:21:11:67:16:c3:6a:94:0d:c8:62:53:de:b2:fe:dc: d0:94:84:8f:03:55:28:e9:23:ef:0b:26:86:9c:d3:7f:57:b1: c6:7a:ec:c3:18:4d:6c:96:60:d8:26:e9:26:ff:71:c4:0a:6e: 82:b3:e1:2f:55:f5:02:1d:53:1d:be:60:ea:f1:a0:cf:78:9e: 59:4c:d9:f4:a7:99:5a:a3:a9:57:2e:1c:b4:29:e1:f4:9d:6b: ea:62:00:b3:57:f6:ce:76:58:f2:ff:e6:0b:90:bd:55:0c:a2: a8:06:04:36:ba:4d:57:53:4c:1f:5e:6d:f9:91:05:6e:92:c4: 7a:2b:0d:07:6e:5a:75:9f:62:ac:4e:b5:97:8a:6f:24:48:1d: bc:fd:8c:d6:80:32:95:09:87:9b:da:8e:3e:e8:4d:7d:0b:7a: 5b:fc:91:f5:66:2b:b9:91:02:94:84:06:23:ae:63:50:0c:31: 6d:b5:e0:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xn0HV5Mx7QeGbP9KTKbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDZhZjgwNGVmNWE2MzZmNDY0ZTcxYThkNDFlOGQ0MDFh N2Y2OTcwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjgyNmIwNTcyYWUxZjU1OTZmYTFkZmE0YTAxZmEzMTcxMmQzMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aOBYliGGvXb4GiFv5Fm+DOOKdq8 BhEPhLoPppQ464YJQMu6rJ6xYb1wVYgWvKV3otmHK8r14S6DxCnzDpCcqqd8zhmE wdluQlAfdy51EfQKT5vqTMlJpj6yFoQj1s3n4XfQlwwnEghTDJu/VZ8t29snN5oj zYqySZ3/Ml9RXFYlT1cMKx86lYgpx8C7lMq1xgH/dHRKmz7Z9n1AD/7K1oY8d2PF FeYSOFx0y7H+qlm4z9cXLz4xecCJG3ClU5Z9fSEDrmFI4GJVX9eGJEFt8HMk3/HT 3qObeH5kB5VzqtSn8QBV1P5Yf9rzwUIbYJoSZYJJyuXBPs2nU1XtyYHOUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDKCawVyrh9Vlvod+koB+jFxLTLsMB8GA1UdIwQY MBaAFFQGr4BO9aY29GTnGo1B6NQBp/aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQt MWNhOWQyNTllMmFkLzEvTW9KckJYS3VIMVdXLWgzNlNnSDZNWEV0TXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQtMWNhOWQyNTllMmFk LzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjpoMA0G CSqGSIb3DQEBCwUAA4IBAQAjlcKZXV5V8/cHLpMB6ixpbW/E3Gw2arVWKGZ/Nlbh Jl0Pe6/7JIeH5e2v6PkfvFTHBnCFJVtdt3tcCkn/w9dwthI0dSGSp/APq8MhEWcW w2qUDchiU96y/tzQlISPA1Uo6SPvCyaGnNN/V7HGeuzDGE1slmDYJukm/3HECm6C s+EvVfUCHVMdvmDq8aDPeJ5ZTNn0p5lao6lXLhy0KeH0nWvqYgCzV/bOdljy/+YL kL1VDKKoBgQ2uk1XU0wfXm35kQVuksR6Kw0Hblp1n2KsTrWXim8kSB28/YzWgDKV CYeb2o4+6E19C3pb/JH1Ziu5kQKUhAYjrmNQDDFtteAX -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:50 2026 by rpki-client