This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/bIXByjX6LuW26aekk-7LgPK4WBo.roa File: bIXByjX6LuW26aekk-7LgPK4WBo.roa (raw, json) Hash identifier: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I= Subject key identifier: 6C:85:C1:CA:35:FA:2E:E5:B6:E9:A7:A4:93:EE:CB:80:F2:B8:58:1A Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Certificate serial: 019B7758BD667B5A28D897590975D652845C Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/bIXByjX6LuW26aekk-7LgPK4WBo.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.83.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bd:66:7b:5a:28:d8:97:59:09:75:d6:52:84:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c85c1ca35fa2ee5b6e9a7a493eecb80f2b8581a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:ae:1f:f2:17:a5:8b:ac:b1:af:79:b5:02: c9:c8:10:19:6a:32:f2:bc:89:ae:8b:d0:53:80:a0: 32:ad:7c:cd:de:43:2d:21:2d:f0:41:63:e5:df:63: b6:c3:2a:04:d9:89:47:e6:99:99:fe:55:9c:96:12: f0:bc:6d:5d:f0:43:4b:ed:32:a6:36:6d:27:6a:cd: 27:4f:21:d7:29:ac:60:55:00:d1:ac:ad:3c:b4:5e: 21:e3:7a:ab:17:59:79:a2:fe:fb:af:25:cd:d1:ce: e3:a2:ec:d0:77:27:b8:00:1f:a3:71:05:6a:94:3a: c2:6f:f0:c9:f4:e7:b0:93:3b:cf:89:ec:15:43:7e: be:74:56:dc:d2:36:0b:41:c9:e0:9f:d7:5c:71:83: 01:84:e8:9d:4c:19:8d:83:f6:15:80:6e:51:9d:be: df:4d:a5:67:f7:e8:0e:38:f5:09:95:2e:24:6e:aa: 62:3d:92:31:35:78:2a:9f:98:40:9b:6b:fe:be:54: 3b:53:c0:58:e0:4d:2f:cd:92:86:9d:2b:b0:fc:4f: 5d:c7:6c:d3:b1:bd:12:01:33:d5:de:e0:b7:43:21: 02:09:a3:32:fb:3b:97:6c:77:a5:96:9d:bc:7a:7a: 9a:d6:d5:dc:8a:03:e4:cb:28:43:34:f5:28:f9:13: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:85:C1:CA:35:FA:2E:E5:B6:E9:A7:A4:93:EE:CB:80:F2:B8:58:1A X509v3 Authority Key Identifier: keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/bIXByjX6LuW26aekk-7LgPK4WBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.83.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:a1:52:ea:c7:cd:0f:72:d9:86:ea:cf:9f:5e:42:0b:51:81: 18:fa:50:29:92:ac:b5:e1:e3:e6:3e:8f:4a:53:d9:0e:62:32: f8:3a:c3:15:09:1d:d4:28:92:09:f5:a5:a4:2d:f9:1e:59:1a: 60:f6:4d:fd:8f:1f:f2:9d:28:30:03:2f:f0:53:fa:f7:ae:18: d5:89:3a:ea:e2:6b:ac:49:bb:52:af:e4:f5:3b:71:a7:70:69: 12:13:a9:f5:ab:c3:a4:a3:4f:8b:fa:1e:bf:ab:0a:5e:e6:6b: c7:74:9e:8f:ba:2f:a4:72:81:07:f4:d1:a6:37:77:1a:0f:6e: 24:2c:29:60:0c:3a:cc:29:d7:37:cf:63:06:29:90:9a:b9:0e: 23:86:0b:1d:66:81:b2:4a:77:02:79:de:d6:10:6a:74:7b:89: 83:fc:f1:41:c8:c8:77:14:47:6b:7f:7b:ea:14:16:e6:d8:b5: d2:60:80:66:09:9f:31:f7:db:f1:75:fc:d0:41:e4:2e:db:75: 9c:29:ca:b0:d4:5b:7b:9f:76:a3:f6:60:2b:fe:1c:54:7d:d3: f8:66:5f:d6:8e:6c:76:51:ef:49:61:e6:4a:12:7c:a6:34:22: 15:11:6a:a5:d8:ca:2b:06:51:02:0a:6b:81:20:7b:8c:e0:f2: 94:c6:47:77 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WL1me1oo2JdZCXXWUoRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm ZDc0NDEwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yzg1YzFjYTM1ZmEyZWU1YjZlOWE3YTQ5M2VlY2I4MGYyYjg1ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYWuH/IXpYussa95tQLJyBAZajLy vImui9BTgKAyrXzN3kMtIS3wQWPl32O2wyoE2YlH5pmZ/lWclhLwvG1d8ENL7TKm Nm0nas0nTyHXKaxgVQDRrK08tF4h43qrF1l5ov77ryXN0c7jouzQdye4AB+jcQVq lDrCb/DJ9OewkzvPiewVQ36+dFbc0jYLQcngn9dccYMBhOidTBmNg/YVgG5Rnb7f TaVn9+gOOPUJlS4kbqpiPZIxNXgqn5hAm2v+vlQ7U8BY4E0vzZKGnSuw/E9dx2zT sb0SATPV3uC3QyECCaMy+zuXbHellp28enqa1tXcigPkyyhDNPUo+ROSeQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFGyFwco1+i7ltumnpJPuy4DyuFgaMB8GA1UdIwQY MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt ODQ0OGRjZmIyN2FhLzEvYklYQnlqWDZMdVcyNmFla2stN0xnUEs0V0JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjVMwDQYJ KoZIhvcNAQELBQADggEBAEOhUurHzQ9y2Ybqz59eQgtRgRj6UCmSrLXh4+Y+j0pT 2Q5iMvg6wxUJHdQokgn1paQt+R5ZGmD2Tf2PH/KdKDADL/BT+veuGNWJOuria6xJ u1Kv5PU7cadwaRITqfWrw6SjT4v6Hr+rCl7ma8d0no+6L6RygQf00aY3dxoPbiQs KWAMOswp1zfPYwYpkJq5DiOGCx1mgbJKdwJ53tYQanR7iYP88UHIyHcUR2t/e+oU FubYtdJggGYJnzH32/F1/NBB5C7bdZwpyrDUW3ufdqP2YCv+HFR90/hmX9aObHZR 70lh5koSfKY0IhURaqXYyisGUQIKa4Ege4zg8pTGR3c= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:56 2026 by rpki-client