This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/MOA6z7x0Ys9Uv2Htoky-rZPjT2o.roa File: MOA6z7x0Ys9Uv2Htoky-rZPjT2o.roa (raw, json) Hash identifier: S9joa7cTMXDYAoAEOgCnk8b95etCyEJSsLPR/6iWAt8= Subject key identifier: 30:E0:3A:CF:BC:74:62:CF:54:BF:61:ED:A2:4C:BE:AD:93:E3:4F:6A Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019B0DF970089E3D149D2EA838CD09E91DED Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/MOA6z7x0Ys9Uv2Htoky-rZPjT2o.roa Signing time: Thu 11 Dec 2025 15:13:29 +0000 ROA not before: Thu 11 Dec 2025 15:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44066 IP address blocks: 62.223.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:f9:70:08:9e:3d:14:9d:2e:a8:38:cd:09:e9:1d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Dec 11 15:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30e03acfbc7462cf54bf61eda24cbead93e34f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:98:dc:22:d7:72:db:7e:80:12:df:d1:8a: 51:6f:93:10:ef:65:4f:7d:75:78:22:5b:1a:d3:98: dc:e4:dc:41:30:84:88:c2:f1:ff:66:8d:d3:85:88: f0:56:1e:30:a6:c1:27:7c:90:e4:8f:88:15:78:aa: 8a:18:6e:e6:5e:df:4b:5a:c5:21:aa:82:82:4e:38: 05:bb:46:34:1b:5c:bc:82:9c:83:de:c4:0a:53:75: d8:fd:f4:dc:0c:c7:b8:c5:98:fb:1e:d4:29:cd:9e: a0:6a:72:2c:e4:ee:1f:74:8e:77:d9:ed:b2:21:d4: 76:69:e1:84:da:18:d0:12:dd:f1:4d:66:29:6f:e7: f1:47:83:5b:72:f0:9f:7a:e6:8c:14:81:ce:1d:89: 42:a5:77:ef:f0:ff:5e:eb:7d:18:8c:39:f9:66:8c: 61:00:48:41:b1:78:dc:e3:ab:8f:59:7a:97:09:77: 9c:f2:b2:35:02:ee:7d:59:f5:a8:2c:d7:29:9a:79: 6c:9d:f4:4a:c0:39:8f:69:88:7d:42:f1:94:e7:6a: 58:50:87:b5:56:c0:91:65:e5:f5:89:01:b0:fb:df: 6f:e0:79:f7:75:ad:f7:e3:a4:2f:33:a7:7b:f6:2b: 44:d8:ae:3b:ce:ef:ee:d0:9f:79:e2:18:b5:99:02: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E0:3A:CF:BC:74:62:CF:54:BF:61:ED:A2:4C:BE:AD:93:E3:4F:6A X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/MOA6z7x0Ys9Uv2Htoky-rZPjT2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.223.44.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:5a:d8:9f:e8:fb:81:24:58:61:a2:2f:3d:98:99:0d:b1:9b: 99:66:8b:6a:f1:bd:f2:17:b4:02:a6:ba:1a:98:44:65:1e:58: c9:2e:9c:82:ff:16:f4:d8:72:00:41:42:d8:5e:4a:17:ea:02: 1b:b4:4a:1d:07:b6:5f:78:d2:b9:bf:c6:c3:60:9d:0f:35:bc: 48:88:81:38:7a:9e:e0:c1:fa:4b:bc:a7:3f:d5:46:74:f8:bf: 3f:63:32:13:ac:1e:a5:be:e5:e5:8d:5c:cb:64:8f:58:96:ce: 7c:38:bb:bd:f9:d7:c0:da:9e:c2:e2:7b:79:a0:a2:06:08:df: 83:95:c6:0b:d5:54:be:aa:a9:ea:38:d7:76:13:c3:a3:c3:15: 70:b2:49:08:62:bb:a1:e5:02:ee:47:81:b8:8a:69:e6:b0:4e: 77:d4:71:0f:0f:f9:e5:39:8e:4f:a5:e5:a9:5e:a3:60:ac:68: 51:90:a0:de:9c:12:7f:d3:77:ae:2d:6c:79:e3:48:62:2f:6c: 1d:f2:13:6e:9e:dc:ed:8a:a7:91:44:d7:cc:c4:95:a1:ce:20: c4:c0:a7:82:d5:8f:d3:57:63:36:ea:55:58:e9:08:90:d7:77: 17:e4:ca:95:c4:13:65:11:8b:bc:7d:79:7b:41:0c:e7:e1:17: 4b:22:04:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsN+XAInj0UnS6oOM0J6R3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjUxMjExMTUxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGUwM2FjZmJjNzQ2MmNmNTRiZjYxZWRhMjRjYmVhZDkzZTM0ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMCY3CLXctt+gBLf0YpRb5MQ72VP fXV4Ilsa05jc5NxBMISIwvH/Zo3ThYjwVh4wpsEnfJDkj4gVeKqKGG7mXt9LWsUh qoKCTjgFu0Y0G1y8gpyD3sQKU3XY/fTcDMe4xZj7HtQpzZ6ganIs5O4fdI532e2y IdR2aeGE2hjQEt3xTWYpb+fxR4NbcvCfeuaMFIHOHYlCpXfv8P9e630YjDn5Zoxh AEhBsXjc46uPWXqXCXec8rI1Au59WfWoLNcpmnlsnfRKwDmPaYh9QvGU52pYUIe1 VsCRZeX1iQGw+99v4Hn3da3346QvM6d79itE2K47zu/u0J954hi1mQKC2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDgOs+8dGLPVL9h7aJMvq2T409qMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvTU9BNno3eDBZczlVdjJIdG9reS1yWlBqVDJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPt8sMA0G CSqGSIb3DQEBCwUAA4IBAQAeWtif6PuBJFhhoi89mJkNsZuZZotq8b3yF7QCproa mERlHljJLpyC/xb02HIAQULYXkoX6gIbtEodB7ZfeNK5v8bDYJ0PNbxIiIE4ep7g wfpLvKc/1UZ0+L8/YzITrB6lvuXljVzLZI9Yls58OLu9+dfA2p7C4nt5oKIGCN+D lcYL1VS+qqnqONd2E8OjwxVwskkIYruh5QLuR4G4imnmsE531HEPD/nlOY5PpeWp XqNgrGhRkKDenBJ/03euLWx540hiL2wd8hNuntztiqeRRNfMxJWhziDEwKeC1Y/T V2M26lVY6QiQ13cX5MqVxBNlEYu8fXl7QQzn4RdLIgRm -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:51 2025 by rpki-client