This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa File: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (raw, json) Hash identifier: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk= Subject key identifier: 30:E0:B6:7F:84:6F:25:1E:91:9D:19:AA:9D:F5:B9:3E:AB:64:36:0E Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019B7BA5204B6396995099D537EF87D00E16 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201304 IP address blocks: 212.18.248.0/24 maxlen: 24 2a04:2b00:13ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:4b:63:96:99:50:99:d5:37:ef:87:d0:0e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30e0b67f846f251e919d19aa9df5b93eab64360e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:65:e9:b8:78:93:88:1b:13:f0:72:1a:f3: 26:31:ca:be:98:d3:05:75:ba:95:b3:c4:ee:5a:cb: 8a:6f:67:f6:7d:48:34:8a:15:66:3d:75:fb:90:02: a7:da:22:48:bc:7d:b8:09:70:2b:19:62:3f:32:f1: e2:e1:4d:ad:d4:cd:92:5d:65:8e:e6:3d:33:70:61: 53:73:58:e0:be:02:86:cb:a0:7d:1d:10:1c:c2:a7: 84:11:59:2e:71:ce:8c:d3:e7:64:26:4b:80:e6:2c: 9d:9b:3f:58:a1:b2:2a:65:6a:71:01:3f:bf:2d:43: de:f9:68:c1:a7:e1:a1:17:4a:91:83:17:7f:87:7a: 63:a3:4e:09:38:50:47:e2:5d:93:19:7e:f1:d1:24: 7d:38:47:6b:f9:5b:86:95:02:73:17:7e:fb:e0:91: 5e:3b:21:08:f6:47:5b:d3:2c:24:00:d8:ea:f1:3b: a8:62:f2:1f:2a:ea:7a:07:da:de:87:56:26:ae:fb: 29:3c:5f:a0:e3:74:9d:26:34:f0:89:04:af:0c:1f: f6:8e:5d:76:ae:f0:dc:fc:f9:99:30:55:92:6d:cd: 2b:15:17:a6:6d:d8:cc:82:4f:65:2c:35:55:f1:49: 5e:9f:34:18:62:9c:97:64:fd:a4:ee:a8:1c:f6:38: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E0:B6:7F:84:6F:25:1E:91:9D:19:AA:9D:F5:B9:3E:AB:64:36:0E X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.18.248.0/24 IPv6: 2a04:2b00:13ee::/48 Signature Algorithm: sha256WithRSAEncryption 25:fc:f4:c6:68:7d:22:6c:54:3c:1e:08:64:41:b2:b8:93:ed: d9:b2:9e:d3:db:0a:de:3e:36:06:84:45:c7:3c:4b:46:90:e4: 66:e4:13:4a:29:b6:f2:ed:b4:7c:e8:a0:82:3f:55:53:48:db: cc:45:8c:1c:fe:32:28:d8:74:b2:2a:2a:78:9d:67:b2:be:24: 7c:16:dd:e4:c4:30:aa:b4:57:9a:35:51:8e:f6:bf:87:b3:41: 6c:c4:65:b2:54:82:81:35:55:af:75:48:b8:c8:d5:59:df:09: 6f:b6:4c:15:02:6c:be:86:73:37:c6:59:63:7b:6e:5d:58:e4: 25:a3:35:ce:38:f8:56:2f:b9:4d:77:76:3d:4c:0e:9c:05:09: 55:72:e2:ac:33:a5:b3:97:82:d7:3c:56:e9:fb:ee:0b:44:9e: 8b:d4:2b:05:85:0f:16:58:ef:6d:1e:15:2d:20:99:9f:b4:81: 79:ef:16:70:18:7d:68:8f:c5:c3:f9:fd:07:44:df:0b:a2:6e: bf:77:65:a4:bc:85:4b:f7:c1:dc:33:bf:72:f7:36:5c:4b:48: 56:76:61:44:44:64:0b:7a:79:ad:48:c7:ce:6e:ae:0e:37:51: d0:51:70:88:3e:96:54:17:e2:16:0f:ee:19:d3:1e:76:ad:de: c1:e2:87:cb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pSBLY5aZUJnVN++H0A4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGUwYjY3Zjg0NmYyNTFlOTE5ZDE5YWE5ZGY1YjkzZWFiNjQzNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3pl6bh4k4gbE/ByGvMmMcq+mNMF dbqVs8TuWsuKb2f2fUg0ihVmPXX7kAKn2iJIvH24CXArGWI/MvHi4U2t1M2SXWWO 5j0zcGFTc1jgvgKGy6B9HRAcwqeEEVkucc6M0+dkJkuA5iydmz9YobIqZWpxAT+/ LUPe+WjBp+GhF0qRgxd/h3pjo04JOFBH4l2TGX7x0SR9OEdr+VuGlQJzF3774JFe OyEI9kdb0ywkANjq8TuoYvIfKup6B9reh1YmrvspPF+g43SdJjTwiQSvDB/2jl12 rvDc/PmZMFWSbc0rFRembdjMgk9lLDVV8UlenzQYYpyXZP2k7qgc9jih3QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDDgtn+EbyUekZ0Zqp31uT6rZDYOMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvTU9DMmY0UnZKUjZSblJtcW5mVzVQcXRrTmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1BL4MA8E AgACMAkDBwAqBCsAE+4wDQYJKoZIhvcNAQELBQADggEBACX89MZofSJsVDweCGRB sriT7dmyntPbCt4+NgaERcc8S0aQ5GbkE0optvLttHzooII/VVNI28xFjBz+MijY dLIqKnidZ7K+JHwW3eTEMKq0V5o1UY72v4ezQWzEZbJUgoE1Va91SLjI1VnfCW+2 TBUCbL6GczfGWWN7bl1Y5CWjNc44+FYvuU13dj1MDpwFCVVy4qwzpbOXgtc8Vun7 7gtEnovUKwWFDxZY720eFS0gmZ+0gXnvFnAYfWiPxcP5/QdE3wuibr93ZaS8hUv3 wdwzv3L3NlxLSFZ2YUREZAt6ea1Ix85urg43UdBRcIg+llQX4hYP7hnTHnat3sHi h8s= -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:38 2026 by rpki-client