This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa File: MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa (raw, json) Hash identifier: CYemttRlGhgSSYTCSRhcvIusMWg/eXfKm4LjWS1ETGs= Subject key identifier: 30:E5:50:16:4E:B0:E5:54:D6:D6:64:DA:03:23:3D:5F:21:69:DC:0E Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019B7910D5EFBD229A9B89FA1E08B245F77B Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401293 IP address blocks: 84.247.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d5:ef:bd:22:9a:9b:89:fa:1e:08:b2:45:f7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30e550164eb0e554d6d664da03233d5f2169dc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:b6:b8:d9:88:8d:cf:da:c7:c2:a3:08:ce: 0e:02:28:99:4d:fb:06:38:bc:dc:a4:bc:9a:bc:c7: 9b:bf:19:75:7f:f3:c3:cb:12:37:a8:3c:05:35:23: 94:e3:fb:79:44:e5:c4:b0:ee:f4:3f:37:07:19:f8: 31:95:a1:21:7d:6f:ba:79:f5:a8:b6:37:0d:01:5c: 21:11:b3:e4:12:55:77:b1:e9:07:1f:5a:fe:55:d2: 3d:15:3b:f7:3a:70:ff:ce:15:6d:1d:bc:3b:74:dd: 71:fc:1d:52:c2:ec:3b:5f:5d:0f:5c:a8:f2:a4:da: b5:f7:7e:78:40:09:ce:6a:b9:96:4e:2f:e6:ad:32: e6:13:e6:9d:cf:22:24:fa:64:cb:fc:a8:6b:6d:1a: 1c:b3:de:e6:ac:d2:fc:c1:9a:6a:d4:0b:bb:80:f0: 13:ab:7e:79:f5:88:07:5b:cc:ed:2f:10:7a:73:ee: 5a:50:3b:1a:8d:13:70:08:9d:33:73:a4:47:7b:b2: 41:a4:e6:3e:51:f7:c8:46:9e:0a:4a:a4:5e:6c:e6: 29:33:46:8a:2d:13:c5:5d:1d:db:7d:43:99:a5:74: 5b:58:ee:38:79:e4:8b:e3:4d:82:d9:69:16:4e:15: e6:67:10:ad:b5:6d:b8:0f:be:d6:c8:11:b6:09:d5: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E5:50:16:4E:B0:E5:54:D6:D6:64:DA:03:23:3D:5F:21:69:DC:0E X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.119.0/24 Signature Algorithm: sha256WithRSAEncryption 20:de:d1:9c:2b:b8:3e:17:a8:7e:98:84:52:e7:e9:16:ee:5c: 50:55:16:a4:b9:9f:b9:be:7a:18:4e:38:3b:99:65:a4:93:6b: 81:99:97:f0:85:20:84:4f:f7:d4:95:fd:d8:fd:a9:d6:71:79: 39:e0:98:e6:33:29:0b:40:36:e8:f6:b8:c2:90:e9:5f:82:6a: 8e:8e:f6:6d:4f:14:dd:63:42:53:cd:94:86:8a:78:d5:b5:58: 7b:82:95:ac:57:c2:dc:ab:92:80:7a:1e:a3:b7:a0:f6:b1:b7: cd:5b:0f:29:93:72:5d:95:8f:14:80:e3:7d:4e:12:08:c8:00: 68:6f:fa:14:5a:eb:14:82:de:6f:ed:25:f9:17:ac:2d:37:92: 33:e6:0b:d6:9c:3e:49:8a:6b:20:3a:98:07:2d:6c:80:b8:9e: e0:8b:00:3e:94:25:11:8e:8f:62:3e:26:65:ed:ec:45:40:f1: 37:dc:94:ec:8e:ba:5b:f6:32:b9:fb:a6:51:39:c5:65:f4:fc: d7:5c:1e:a9:35:4e:5a:b6:3d:63:96:65:ac:9f:36:81:fd:89: 3c:48:68:af:07:2f:2a:ff:20:2f:2f:3b:a1:08:c0:04:2c:24: 7a:62:79:65:67:bd:b2:94:f6:93:fb:2d:30:15:cf:08:08:d4: c2:ac:ca:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENXvvSKam4n6HgiyRfd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGU1NTAxNjRlYjBlNTU0ZDZkNjY0ZGEwMzIzM2Q1ZjIxNjlkYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1O2uNmIjc/ax8KjCM4OAiiZTfsG OLzcpLyavMebvxl1f/PDyxI3qDwFNSOU4/t5ROXEsO70PzcHGfgxlaEhfW+6efWo tjcNAVwhEbPkElV3sekHH1r+VdI9FTv3OnD/zhVtHbw7dN1x/B1Swuw7X10PXKjy pNq19354QAnOarmWTi/mrTLmE+adzyIk+mTL/KhrbRocs97mrNL8wZpq1Au7gPAT q3559YgHW8ztLxB6c+5aUDsajRNwCJ0zc6RHe7JBpOY+UffIRp4KSqRebOYpM0aK LRPFXR3bfUOZpXRbWO44eeSL402C2WkWThXmZxCttW24D77WyBG2CdW1yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDlUBZOsOVU1tZk2gMjPV8hadwOMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvTU9WUUZrNnc1VlRXMW1UYUF5TTlYeUZwM0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPd3MA0G CSqGSIb3DQEBCwUAA4IBAQAg3tGcK7g+F6h+mIRS5+kW7lxQVRakuZ+5vnoYTjg7 mWWkk2uBmZfwhSCET/fUlf3Y/anWcXk54JjmMykLQDbo9rjCkOlfgmqOjvZtTxTd Y0JTzZSGinjVtVh7gpWsV8Lcq5KAeh6jt6D2sbfNWw8pk3JdlY8UgON9ThIIyABo b/oUWusUgt5v7SX5F6wtN5Iz5gvWnD5JimsgOpgHLWyAuJ7giwA+lCURjo9iPiZl 7exFQPE33JTsjrpb9jK5+6ZROcVl9PzXXB6pNU5atj1jlmWsnzaB/Yk8SGivBy8q /yAvLzuhCMAELCR6YnllZ72ylPaT+y0wFc8ICNTCrMop -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:22 2026 by rpki-client