This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/MozUM6k2gbKGmyuWcwcmxebhQno.roa
File: MozUM6k2gbKGmyuWcwcmxebhQno.roa (raw, json)
Hash identifier: AgGoK2rZWkiMH9sIukOYbax2Y2ASEds9eHoxAP3Xf3E=
Subject key identifier: 32:8C:D4:33:A9:36:81:B2:86:9B:2B:96:73:07:26:C5:E6:E1:42:7A
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019B7F1505E9DA9351F9635F84B129A3F419
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/MozUM6k2gbKGmyuWcwcmxebhQno.roa
Signing time: Fri 02 Jan 2026 14:20:42 +0000
ROA not before: Fri 02 Jan 2026 14:20:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 94.131.19.0/24 maxlen: 24
185.39.31.0/24 maxlen: 24
2a06:fcc0:1::/48 maxlen: 48
2a06:fcc0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:05:e9:da:93:51:f9:63:5f:84:b1:29:a3:f4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 2 14:20:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=328cd433a93681b2869b2b96730726c5e6e1427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f5:0e:52:31:44:db:cd:90:96:be:c6:88:5d:
ac:75:e1:33:b0:13:34:ff:e8:99:9b:19:4b:f7:63:
a7:3d:6c:a1:e2:c2:0c:24:6d:3d:b0:55:fb:34:8e:
38:dc:f5:e7:b0:5f:1f:ae:05:e5:58:31:c8:6f:ec:
14:99:49:9e:36:4c:36:66:0a:1b:c3:55:f9:dc:e4:
23:95:02:40:4e:7b:8a:ca:1c:03:99:b3:94:6b:5b:
ed:73:02:a7:a0:7c:a8:67:f7:de:88:a3:42:b9:be:
61:0b:27:57:42:e5:d2:68:f6:97:00:28:0b:c7:6a:
ff:b9:d2:24:15:18:9c:89:61:63:b3:e1:36:37:33:
e0:31:0d:80:81:a1:a4:b1:7c:d4:e3:de:d1:d4:45:
71:e5:b7:0a:7b:86:4a:43:3e:c3:85:9b:e9:0f:f8:
62:63:ee:13:d8:6d:e9:f2:fa:f2:4e:a1:dd:ff:12:
c5:63:d2:73:fd:88:5d:f2:30:b9:c3:d0:ec:df:f1:
85:6a:bb:7c:b8:d7:ef:df:d2:e2:a6:4a:95:2c:6f:
97:45:63:88:7a:93:94:eb:62:52:dd:e4:2d:26:be:
7b:7e:f3:1d:13:e8:fd:f7:68:04:70:b6:41:61:94:
20:e0:c5:f0:c3:a7:45:bb:20:a2:0e:b1:4a:3e:0d:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8C:D4:33:A9:36:81:B2:86:9B:2B:96:73:07:26:C5:E6:E1:42:7A
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/MozUM6k2gbKGmyuWcwcmxebhQno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.19.0/24
185.39.31.0/24
IPv6:
2a06:fcc0:1::/48
2a06:fcc0:4::/48
Signature Algorithm: sha256WithRSAEncryption
96:d2:d8:5a:fb:95:0f:6b:45:69:5e:ec:6a:7a:97:bd:05:8d:
00:21:3b:18:11:3e:a2:34:4f:79:1f:a9:bf:05:b0:f6:ab:70:
43:6d:4b:a6:b5:40:18:44:ef:2c:7d:03:c3:97:75:5d:d3:91:
86:5d:e4:d4:d0:68:8a:49:ee:df:a0:a7:ef:a3:8f:7a:94:47:
e9:1a:75:12:06:ad:5e:62:46:11:67:89:86:fc:9e:8c:19:b0:
08:75:58:f5:ad:f6:7f:cf:61:9c:38:27:75:4c:28:8c:df:59:
6a:f8:5e:52:f4:a6:65:33:bb:cf:2c:20:72:cf:23:83:35:86:
a1:17:7c:be:23:10:8e:02:dc:6c:3c:77:e3:e3:c3:d7:32:8a:
62:dc:44:d7:01:5e:55:e1:6f:82:8a:ae:38:f6:00:5b:ae:9c:
61:21:0a:7d:cf:5f:30:85:96:4c:10:86:72:08:94:b4:29:16:
03:35:4f:41:65:d1:14:31:2f:a5:45:a8:cd:5e:b5:1c:39:91:
17:e1:a1:07:43:2c:0a:f3:56:06:c3:66:94:28:bf:ce:c1:93:
43:d8:8e:40:82:bb:f7:e7:e3:f1:a8:74:25:d5:3b:67:76:34:
c9:0c:52:29:0a:6e:b3:b9:46:1d:b3:61:6e:a2:1e:61:78:57:
11:a1:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:48 2026 by rpki-client