This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/moBOnIbdvq8-QVwwe2b5CEKfZgA.roa File: moBOnIbdvq8-QVwwe2b5CEKfZgA.roa (raw, json) Hash identifier: 2B1eVc1QZjAUpKco7izarXEMSn1SUBcrE9RYHExsfCE= Subject key identifier: 9A:80:4E:9C:86:DD:BE:AF:3E:41:5C:30:7B:66:F9:08:42:9F:66:00 Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Certificate serial: 019B04AA51F25D841415EB358DFDCCC70CCB Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/moBOnIbdvq8-QVwwe2b5CEKfZgA.roa Signing time: Tue 09 Dec 2025 19:50:29 +0000 ROA not before: Tue 09 Dec 2025 19:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214515 IP address blocks: 45.89.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:aa:51:f2:5d:84:14:15:eb:35:8d:fd:cc:c7:0c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Validity Not Before: Dec 9 19:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a804e9c86ddbeaf3e415c307b66f908429f6600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:fa:07:20:72:1e:d2:3d:ac:f6:7c:54:56: 07:f5:cc:c0:f7:1a:b7:90:cc:58:30:3a:d5:03:de: 1b:1a:6c:d6:d8:7e:46:e8:dc:36:72:8e:60:9a:7d: e5:b6:52:b1:dd:3c:2b:f0:53:78:22:e2:37:b1:00: 5b:8e:4d:f8:38:55:08:78:d1:6d:97:a2:6b:6d:e9: f4:92:da:66:65:cc:d7:68:14:26:40:c8:09:d3:95: b4:c3:80:8c:db:e4:e3:61:e7:17:84:39:98:4f:38: 77:db:6c:30:14:d6:0d:cc:bd:f2:82:b6:99:bd:5f: f2:26:1b:f2:e7:00:da:e8:cd:5a:ef:b1:a8:ad:9e: ba:7d:bd:37:45:07:3a:78:53:d7:aa:77:65:09:2e: fd:95:07:fc:39:c7:af:fc:0c:6c:f5:23:cc:3a:e9: d6:ed:bd:27:30:62:bd:63:60:d1:65:fa:08:69:68: d2:52:0e:57:3d:ed:4a:47:ce:cc:cc:bc:8d:78:c0: 13:25:44:37:83:5a:7b:05:0e:75:ba:86:2a:5a:8b: 4d:91:e5:a2:17:f2:d1:39:da:f0:78:c6:5d:58:ac: d2:86:ab:94:03:b0:a9:53:13:d3:34:9a:7f:31:cd: 1d:13:63:c3:4e:c5:db:dd:c6:72:e6:8c:64:19:64: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:80:4E:9C:86:DD:BE:AF:3E:41:5C:30:7B:66:F9:08:42:9F:66:00 X509v3 Authority Key Identifier: keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/moBOnIbdvq8-QVwwe2b5CEKfZgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.223.0/24 Signature Algorithm: sha256WithRSAEncryption 08:27:e4:ef:f8:25:19:d6:7c:cb:52:70:9c:03:9d:22:d5:b7: a4:6d:86:7e:b2:bb:79:20:bd:5b:3a:09:40:f3:cb:22:ac:34: b3:90:f4:cf:74:91:b0:0c:b6:dc:7f:08:0d:4b:eb:84:fb:c3: 2a:47:ee:89:69:3b:c5:41:bc:78:01:86:a3:c1:00:b1:d6:5f: cd:15:de:c3:5f:84:7b:47:05:8e:28:81:63:c5:07:6f:60:f3: a1:12:46:f5:5b:bc:8c:d4:3b:9c:23:67:78:30:97:a3:e9:ba: 7c:ef:12:04:01:7a:90:a1:30:4c:9f:c6:f7:fc:c6:e5:7a:e5: 1a:5d:f0:9b:5c:c0:0a:e1:66:bd:ba:f3:cd:8c:07:60:bf:0e: e0:3e:74:9e:8f:2f:f8:dc:1e:01:e0:04:a1:cb:bb:18:40:01: 9d:d6:f3:6c:0d:80:a4:2e:6d:ed:86:7d:34:27:95:fc:81:7b: 1f:63:b6:3d:c5:c4:b4:ee:5b:17:77:f7:f5:d1:1c:cf:44:bc: 3f:f5:99:21:7f:66:44:7e:12:67:9e:b1:f0:9b:6a:62:ed:8e: 45:97:5e:31:2a:27:c9:a0:a1:d0:b0:6a:19:44:78:29:3e:23: 46:53:a8:ca:56:e6:d9:5b:5d:93:0f:c3:52:24:98:99:9b:1d: aa:a7:ad:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsEqlHyXYQUFes1jf3MxwzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz NTBiY2IwHhcNMjUxMjA5MTk1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTgwNGU5Yzg2ZGRiZWFmM2U0MTVjMzA3YjY2ZjkwODQyOWY2NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC36ByByHtI9rPZ8VFYH9czA9xq3 kMxYMDrVA94bGmzW2H5G6Nw2co5gmn3ltlKx3Twr8FN4IuI3sQBbjk34OFUIeNFt l6Jrben0ktpmZczXaBQmQMgJ05W0w4CM2+TjYecXhDmYTzh322wwFNYNzL3ygraZ vV/yJhvy5wDa6M1a77GorZ66fb03RQc6eFPXqndlCS79lQf8Ocev/Axs9SPMOunW 7b0nMGK9Y2DRZfoIaWjSUg5XPe1KR87MzLyNeMATJUQ3g1p7BQ51uoYqWotNkeWi F/LROdrweMZdWKzShquUA7CpUxPTNJp/Mc0dE2PDTsXb3cZy5oxkGWSgfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJqATpyG3b6vPkFcMHtm+QhCn2YAMB8GA1UdIwQY MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt NTI4NzQ2MTFjZDIxLzEvbW9CT25JYmR2cTgtUVZ3d2UyYjVDRUtmWmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVnfMA0G CSqGSIb3DQEBCwUAA4IBAQAIJ+Tv+CUZ1nzLUnCcA50i1bekbYZ+srt5IL1bOglA 88sirDSzkPTPdJGwDLbcfwgNS+uE+8MqR+6JaTvFQbx4AYajwQCx1l/NFd7DX4R7 RwWOKIFjxQdvYPOhEkb1W7yM1DucI2d4MJej6bp87xIEAXqQoTBMn8b3/MbleuUa XfCbXMAK4Wa9uvPNjAdgvw7gPnSejy/43B4B4AShy7sYQAGd1vNsDYCkLm3thn00 J5X8gXsfY7Y9xcS07lsXd/f10RzPRLw/9Zkhf2ZEfhJnnrHwm2pi7Y5Fl14xKifJ oKHQsGoZRHgpPiNGU6jKVubZW12TD8NSJJiZmx2qp60A -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:43 2025 by rpki-client