This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/MoM66qQuhJcSL5w9TkLPi9sdoKs.roa
File: MoM66qQuhJcSL5w9TkLPi9sdoKs.roa (raw, json)
Hash identifier: /dt2y7/UKbT5EuF45pcmtQs53CRnIBBB6Rg/I22HBZM=
Subject key identifier: 32:83:3A:EA:A4:2E:84:97:12:2F:9C:3D:4E:42:CF:8B:DB:1D:A0:AB
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 019B7D5CD95F262F5F45839D335A5327B6F3
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/MoM66qQuhJcSL5w9TkLPi9sdoKs.roa
Signing time: Fri 02 Jan 2026 06:19:55 +0000
ROA not before: Fri 02 Jan 2026 06:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56466
IP address blocks: 185.162.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:d9:5f:26:2f:5f:45:83:9d:33:5a:53:27:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jan 2 06:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32833aeaa42e8497122f9c3d4e42cf8bdb1da0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:43:25:bb:18:f4:55:45:d1:b6:20:39:64:
e6:90:72:16:8e:3b:db:18:8f:ea:cd:e5:7d:dc:cf:
63:f2:32:6c:b9:41:de:57:2d:47:e1:11:53:bf:31:
07:8a:27:ad:af:c8:25:64:66:b8:d3:b6:65:5d:96:
4e:8e:51:8c:fc:ac:c5:bd:45:e4:f8:d3:d7:df:87:
43:20:24:eb:4f:c2:e0:6f:27:53:21:5a:11:9b:af:
c7:04:08:e9:f4:9e:aa:43:11:2d:2f:72:4d:a6:e2:
df:bd:4f:47:c6:7f:c7:16:fd:2d:63:cf:41:d1:65:
30:2c:7f:e0:ba:fe:b6:55:cb:65:48:1c:6d:0e:4b:
ef:33:7f:d3:3f:e7:d8:fa:c8:bc:d4:11:a8:47:a9:
c2:71:6d:3a:9a:8b:f6:20:18:9f:a0:be:d1:61:79:
b0:d2:bc:ce:fa:63:9b:4e:18:47:a0:9e:5c:03:77:
3f:76:c8:02:cd:79:60:3e:35:09:5f:70:40:52:bc:
82:6c:8f:5b:22:09:21:47:f6:21:10:f3:b5:f6:04:
b1:c6:64:68:da:d5:a5:fa:b0:52:e5:ff:34:af:89:
47:58:ec:7a:6f:29:93:c3:81:2a:bb:0c:c3:53:71:
b5:12:fc:0b:56:e7:fe:35:dc:af:9d:95:4c:b3:37:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:83:3A:EA:A4:2E:84:97:12:2F:9C:3D:4E:42:CF:8B:DB:1D:A0:AB
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/MoM66qQuhJcSL5w9TkLPi9sdoKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1c:a4:9d:b0:fd:fe:8c:e0:29:bf:95:91:9b:42:65:6a:3e:
b6:cf:46:31:bf:56:95:8f:57:3a:68:bb:62:07:61:f0:55:94:
6c:78:a5:d1:0e:48:40:a5:e2:0f:4a:01:9c:1c:4d:9b:af:a1:
14:11:3a:cb:80:03:9c:bf:bf:be:d1:08:f6:b1:86:97:b1:ac:
42:a4:a2:2b:54:be:c7:71:44:42:a9:50:0a:43:53:7a:70:5f:
06:22:5b:ff:3b:0c:93:ff:fb:8c:c5:59:f1:52:0a:cb:9f:25:
b2:d4:9b:b2:36:f9:10:c1:fc:f5:ec:35:c8:f1:0c:35:59:66:
74:2a:d0:7c:e8:0e:37:79:d6:1c:48:b6:78:49:51:fa:f9:22:
c4:bb:a6:d1:a9:3b:52:53:d5:2c:d9:b2:88:b4:6d:86:44:28:
e9:5e:2a:71:e5:58:04:1d:d8:63:5b:8a:30:4f:fd:cd:e3:e3:
41:a2:62:e7:f3:0f:be:2f:f0:ce:e8:4e:ce:6d:d3:79:87:87:
75:f6:f3:9d:8f:1c:34:80:a1:93:3e:9d:94:71:5b:f2:4b:19:
cd:24:dc:9a:2b:15:c8:fb:6b:55:3a:23:55:ed:4d:55:74:8d:
06:ac:d0:a4:7c:62:31:e5:ba:9a:b9:b2:cc:67:78:a8:f2:99:
b6:fd:fd:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XNlfJi9fRYOdM1pTJ7bzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZGYzZTljYjY5Y2NhNThhYzcwMmEyZDVlOTEzNWMzYmNh
YjcyMDAwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjgzM2FlYWE0MmU4NDk3MTIyZjljM2Q0ZTQyY2Y4YmRiMWRhMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfVDJbsY9FVF0bYgOWTmkHIWjjvb
GI/qzeV93M9j8jJsuUHeVy1H4RFTvzEHiietr8glZGa407ZlXZZOjlGM/KzFvUXk
+NPX34dDICTrT8LgbydTIVoRm6/HBAjp9J6qQxEtL3JNpuLfvU9Hxn/HFv0tY89B
0WUwLH/guv62VctlSBxtDkvvM3/TP+fY+si81BGoR6nCcW06mov2IBifoL7RYXmw
0rzO+mObThhHoJ5cA3c/dsgCzXlgPjUJX3BAUryCbI9bIgkhR/YhEPO19gSxxmRo
2tWl+rBS5f80r4lHWOx6bymTw4EquwzDU3G1EvwLVuf+NdyvnZVMszf2OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDKDOuqkLoSXEi+cPU5Cz4vbHaCrMB8GA1UdIwQY
MBaAFOjfPpy2nMpYrHAqLV6RNcO8q3IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYt
MzIxODdlMjQ4ODlmLzEvTW9NNjZxUXVoSmNTTDV3OVRrTFBpOXNkb0tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYtMzIxODdlMjQ4ODlm
LzEvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaLYMA0G
CSqGSIb3DQEBCwUAA4IBAQAMHKSdsP3+jOApv5WRm0Jlaj62z0Yxv1aVj1c6aLti
B2HwVZRseKXRDkhApeIPSgGcHE2br6EUETrLgAOcv7++0Qj2sYaXsaxCpKIrVL7H
cURCqVAKQ1N6cF8GIlv/OwyT//uMxVnxUgrLnyWy1JuyNvkQwfz17DXI8Qw1WWZ0
KtB86A43edYcSLZ4SVH6+SLEu6bRqTtSU9Us2bKItG2GRCjpXipx5VgEHdhjW4ow
T/3N4+NBomLn8w++L/DO6E7ObdN5h4d19vOdjxw0gKGTPp2UcVvySxnNJNyaKxXI
+2tVOiNV7U1VdI0GrNCkfGIx5bqaubLMZ3io8pm2/f2t
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:49:43 2026 by rpki-client