This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/orvP4nORXq0UzKjHkst8J153qic.roa File: orvP4nORXq0UzKjHkst8J153qic.roa (raw, json) Hash identifier: eMGuLib/+B5pjoOYYUaTYix8ol70cyONihtgI6VfEKE= Subject key identifier: A2:BB:CF:E2:73:91:5E:AD:14:CC:A8:C7:92:CB:7C:27:5E:77:AA:27 Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Certificate serial: 019B7DC9F8CC0F241725BEB81493B3F63743 Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/orvP4nORXq0UzKjHkst8J153qic.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 91.208.95.0/24 maxlen: 24 194.180.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f8:cc:0f:24:17:25:be:b8:14:93:b3:f6:37:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2bbcfe273915ead14cca8c792cb7c275e77aa27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:07:5b:e9:39:ba:ec:2f:7a:67:81:80:3d: f5:3f:55:a8:a1:48:34:d1:90:b4:9d:3c:df:d3:94: 29:a5:e9:9a:61:a8:26:e0:8d:d2:0c:de:79:d3:a7: 79:12:bc:70:b1:88:9d:a6:5b:6f:b7:b7:71:b2:e1: 64:f2:72:dc:ec:c2:2a:8b:34:b5:9a:4b:d3:23:a7: 8e:d0:b5:72:f7:53:1e:ab:30:a7:9c:46:0b:8f:d4: e9:e6:ee:77:30:b4:d9:03:a1:e3:54:47:dd:39:96: a5:d6:6b:ee:ac:41:a7:7b:1a:1a:18:0c:ee:54:dd: b1:29:11:0d:a1:55:ff:f6:fe:15:08:c2:1a:2d:1b: 2c:dc:78:d4:3e:34:ea:c4:ea:05:72:26:e4:6f:26: 2f:41:29:64:0c:32:5f:0a:e3:25:09:3f:82:9e:41: fa:21:ba:2b:78:96:1c:51:27:97:3b:2d:4e:18:9b: 39:07:d9:74:f2:1a:88:08:c3:4d:ce:fe:b1:15:ef: 1a:11:b4:a9:37:c3:78:4a:10:c8:b5:7b:02:3a:6a: d5:a8:20:d0:80:e5:c0:00:35:a7:76:a4:d2:51:f1: 3d:62:34:ab:9f:c0:eb:cc:9e:6d:98:f1:f9:80:79: 1f:21:4d:b0:cb:99:99:36:32:7f:92:9e:df:aa:e1: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:CF:E2:73:91:5E:AD:14:CC:A8:C7:92:CB:7C:27:5E:77:AA:27 X509v3 Authority Key Identifier: keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/orvP4nORXq0UzKjHkst8J153qic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.95.0/24 194.180.184.0/24 Signature Algorithm: sha256WithRSAEncryption 76:91:35:94:b4:97:33:14:1d:a0:62:dc:64:de:c3:a9:91:39: 0b:c0:64:96:4f:21:36:a1:b4:8f:60:06:e1:c9:64:f7:b3:24: f9:6c:41:4a:d6:dd:07:bd:83:fe:92:34:5e:a3:c0:d2:bb:8c: e0:91:ba:16:a6:e1:ee:42:91:f9:07:32:83:71:5f:e9:f9:1c: d4:be:e6:9f:7f:0f:0f:31:56:8a:7f:a0:76:a6:e6:54:8e:6a: f3:6b:ce:bb:09:35:2b:44:5c:c2:2d:9c:5f:d5:5d:37:4d:b9: 50:69:94:9f:7c:c4:e6:93:e4:4e:ac:19:dc:d4:f3:6b:ec:20: bd:a5:53:e4:e6:36:22:2b:28:eb:8d:a5:4f:4e:f0:4a:88:eb: 07:1a:16:49:7c:6b:b7:05:2d:9b:cf:d1:0a:16:cb:34:7a:ac: 58:84:11:be:39:28:92:f0:7e:8a:6d:37:1f:5b:a2:13:53:a8: e3:7f:98:79:ed:bd:6e:a2:00:d2:5f:d2:a7:af:ed:8a:a3:1d: c5:68:63:17:02:1f:07:31:08:15:45:5c:c1:5a:b5:c9:da:f9: 83:59:76:d9:eb:f2:36:9d:29:cf:3c:fe:13:1a:3a:33:b3:92: e5:d0:f3:50:33:6a:99:d6:11:06:38:b2:5c:92:a5:ea:a0:af: 63:1b:4b:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yfjMDyQXJb64FJOz9jdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm MjM3YTAwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmJiY2ZlMjczOTE1ZWFkMTRjY2E4Yzc5MmNiN2MyNzVlNzdhYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIYHW+k5uuwvemeBgD31P1WooUg0 0ZC0nTzf05QppemaYagm4I3SDN5506d5ErxwsYidpltvt7dxsuFk8nLc7MIqizS1 mkvTI6eO0LVy91MeqzCnnEYLj9Tp5u53MLTZA6HjVEfdOZal1mvurEGnexoaGAzu VN2xKRENoVX/9v4VCMIaLRss3HjUPjTqxOoFcibkbyYvQSlkDDJfCuMlCT+CnkH6 IboreJYcUSeXOy1OGJs5B9l08hqICMNNzv6xFe8aEbSpN8N4ShDItXsCOmrVqCDQ gOXAADWndqTSUfE9YjSrn8DrzJ5tmPH5gHkfIU2wy5mZNjJ/kp7fquHQjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKK7z+JzkV6tFMyox5LLfCded6onMB8GA1UdIwQY MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt ODcyNGVkNWU5MDNhLzEvb3J2UDRuT1JYcTBVektqSGtzdDhKMTUzcWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9BfAwQA wrS4MA0GCSqGSIb3DQEBCwUAA4IBAQB2kTWUtJczFB2gYtxk3sOpkTkLwGSWTyE2 obSPYAbhyWT3syT5bEFK1t0HvYP+kjReo8DSu4zgkboWpuHuQpH5BzKDcV/p+RzU vuaffw8PMVaKf6B2puZUjmrza867CTUrRFzCLZxf1V03TblQaZSffMTmk+ROrBnc 1PNr7CC9pVPk5jYiKyjrjaVPTvBKiOsHGhZJfGu3BS2bz9EKFss0eqxYhBG+OSiS 8H6KbTcfW6ITU6jjf5h57b1uogDSX9Knr+2Kox3FaGMXAh8HMQgVRVzBWrXJ2vmD WXbZ6/I2nSnPPP4TGjozs5Ll0PNQM2qZ1hEGOLJckqXqoK9jG0sY -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:23 2026 by rpki-client