This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/mOOpQixSR_G0BkBLz_pfNJqCpPc.roa File: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (raw, json) Hash identifier: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM= Subject key identifier: 98:E3:A9:42:2C:52:47:F1:B4:06:40:4B:CF:FA:5F:34:9A:82:A4:F7 Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Certificate serial: 019B7C7FCE07BD81DA19316D5D6F9F757C45 Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/mOOpQixSR_G0BkBLz_pfNJqCpPc.roa Signing time: Fri 02 Jan 2026 02:18:29 +0000 ROA not before: Fri 02 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60476 IP address blocks: 185.30.176.0/22 maxlen: 22 2a14:25c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ce:07:bd:81:da:19:31:6d:5d:6f:9f:75:7c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Validity Not Before: Jan 2 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98e3a9422c5247f1b406404bcffa5f349a82a4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:9a:e0:5e:c7:b1:fc:4c:99:9b:6b:c3:a6: f6:2d:bd:30:c3:c3:9c:99:21:7e:3a:74:4b:48:11: 1f:69:1e:6f:01:a2:40:84:27:70:d6:1d:f1:3e:4e: 79:c7:8f:10:86:18:0d:e3:cf:72:cf:8e:bb:f1:42: ee:94:cd:3d:3a:56:7b:89:0a:b1:96:3d:d3:fe:83: d7:94:55:a5:9b:80:71:4e:19:d6:a3:00:c1:7e:24: 29:32:63:82:b1:ae:f5:91:40:57:97:19:db:cf:48: 82:43:3b:1b:17:0b:ac:97:a3:07:67:84:9a:0b:f6: 66:8f:68:4f:b8:b6:7b:48:9f:bb:86:5b:0d:6a:9c: 46:fb:c0:2a:26:ed:8f:da:58:0d:e1:66:3f:85:82: b0:35:d8:16:8f:2e:59:c2:d8:d9:23:bf:fa:b0:74: 39:16:ca:0a:f1:29:a8:a1:69:b7:ab:19:00:b8:46: b3:ef:82:47:ee:9f:06:f7:79:62:b5:4b:2f:1a:9e: ce:b2:4c:f9:95:ba:d2:da:23:9b:1b:e3:e5:c2:e9: 00:26:49:fb:0d:24:cb:db:c6:4f:b4:fa:a2:6f:b5: 6e:77:04:4f:9a:72:e5:10:52:11:04:cf:28:f7:22: 81:11:39:df:f7:c5:0d:ee:20:00:13:04:2c:5d:c4: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E3:A9:42:2C:52:47:F1:B4:06:40:4B:CF:FA:5F:34:9A:82:A4:F7 X509v3 Authority Key Identifier: keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/mOOpQixSR_G0BkBLz_pfNJqCpPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.176.0/22 IPv6: 2a14:25c1::/32 Signature Algorithm: sha256WithRSAEncryption 18:f7:06:f4:89:61:1b:96:7f:4a:29:25:81:4b:c2:13:7e:fc: bd:e9:19:48:99:33:e7:f7:5e:d8:5e:29:a3:ab:6c:1c:79:b8: e8:d8:f6:c3:c8:05:86:2a:28:92:b5:e0:d5:bb:ac:f4:f4:db: ec:c3:9f:11:f6:e7:21:54:07:a7:87:a5:89:87:ef:52:66:78: d3:5a:54:f5:93:d7:6b:3d:86:03:84:77:bd:06:29:93:5a:a8: ad:0c:30:b3:4e:92:67:12:b7:2d:03:d4:c6:8c:81:9a:e8:70: 08:d0:ae:a2:9d:f7:11:d3:b3:52:1c:fd:cf:98:af:6c:5d:8a: 33:d4:ec:34:ca:33:86:ad:ce:da:b2:52:af:9d:98:52:23:cf: dc:54:93:e1:76:01:e1:28:ee:b0:2e:37:dd:0a:ed:92:f1:1e: 99:40:d7:5d:7d:63:64:f7:41:29:0e:43:bd:f9:45:e3:ae:6d: 7e:67:62:49:a6:09:d0:ed:74:ca:77:c1:88:8f:d7:64:85:62: 67:fc:fd:f6:04:85:c7:c2:e3:1e:bc:77:23:50:55:19:73:b1: 89:17:bd:84:68:36:08:be:d1:8d:57:ca:5d:3a:6f:d5:1c:ab: ad:24:7a:f6:5b:dd:9f:80:09:a3:30:5b:f4:54:b6:2f:80:75: 57:fe:1f:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f84HvYHaGTFtXW+fdXxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0 MGMwM2IwHhcNMjYwMTAyMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGUzYTk0MjJjNTI0N2YxYjQwNjQwNGJjZmZhNWYzNDlhODJhNGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc+a4F7HsfxMmZtrw6b2Lb0ww8Oc mSF+OnRLSBEfaR5vAaJAhCdw1h3xPk55x48QhhgN489yz4678ULulM09OlZ7iQqx lj3T/oPXlFWlm4BxThnWowDBfiQpMmOCsa71kUBXlxnbz0iCQzsbFwusl6MHZ4Sa C/Zmj2hPuLZ7SJ+7hlsNapxG+8AqJu2P2lgN4WY/hYKwNdgWjy5ZwtjZI7/6sHQ5 FsoK8SmooWm3qxkAuEaz74JH7p8G93litUsvGp7Oskz5lbrS2iObG+PlwukAJkn7 DSTL28ZPtPqib7VudwRPmnLlEFIRBM8o9yKBETnf98UN7iAAEwQsXcRApQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJjjqUIsUkfxtAZAS8/6XzSagqT3MB8GA1UdIwQY MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt MDZjYTcwOWEzYzU5LzEvbU9PcFFpeFNSX0cwQmtCTHpfcGZOSnFDcFBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5 LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR6wMA0E AgACMAcDBQAqFCXBMA0GCSqGSIb3DQEBCwUAA4IBAQAY9wb0iWEbln9KKSWBS8IT fvy96RlImTPn917YXimjq2wcebjo2PbDyAWGKiiSteDVu6z09Nvsw58R9uchVAen h6WJh+9SZnjTWlT1k9drPYYDhHe9BimTWqitDDCzTpJnErctA9TGjIGa6HAI0K6i nfcR07NSHP3PmK9sXYoz1Ow0yjOGrc7aslKvnZhSI8/cVJPhdgHhKO6wLjfdCu2S 8R6ZQNddfWNk90EpDkO9+UXjrm1+Z2JJpgnQ7XTKd8GIj9dkhWJn/P32BIXHwuMe vHcjUFUZc7GJF72EaDYIvtGNV8pdOm/VHKutJHr2W92fgAmjMFv0VLYvgHVX/h8z -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:04 2026 by rpki-client