This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/orOrT8NVY4pf1QT1W-mHVHhwDL8.roa File: orOrT8NVY4pf1QT1W-mHVHhwDL8.roa (raw, json) Hash identifier: bx8FYIhx4hyq5ap/XvQzvchaRMF2JO/G6piTSSfSHKo= Subject key identifier: A2:B3:AB:4F:C3:55:63:8A:5F:D5:04:F5:5B:E9:87:54:78:70:0C:BF Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121 Certificate serial: 019B7E38617D716AF7A1581A35C007530C0A Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/orOrT8NVY4pf1QT1W-mHVHhwDL8.roa Signing time: Fri 02 Jan 2026 10:19:42 +0000 ROA not before: Fri 02 Jan 2026 10:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35485 IP address blocks: 46.254.176.0/21 maxlen: 24 93.94.32.0/21 maxlen: 24 93.94.32.0/24 maxlen: 24 93.94.33.0/24 maxlen: 24 93.94.34.0/24 maxlen: 24 93.94.35.0/24 maxlen: 24 93.94.37.0/24 maxlen: 24 93.94.38.0/24 maxlen: 24 93.174.64.0/21 maxlen: 24 158.58.136.0/21 maxlen: 24 185.84.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:61:7d:71:6a:f7:a1:58:1a:35:c0:07:53:0c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2b3ab4fc355638a5fd504f55be9875478700cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:f5:2c:b6:ab:cc:4f:4d:de:79:3f:35:63: d0:5b:14:41:8e:c8:aa:b3:bb:18:df:75:0a:59:47: e6:69:2f:c7:c0:81:36:d4:28:ef:f6:68:86:20:a3: 2a:39:38:dc:db:df:5c:25:a9:2f:a6:e5:17:eb:c9: 6e:d3:8f:9c:e3:94:ec:dc:21:fc:cc:07:87:6a:d8: b9:17:ac:0e:ea:f9:e0:02:66:5c:24:e5:37:51:a2: d4:ab:47:b7:f6:70:2a:14:78:1c:75:87:08:5b:6d: 6c:9e:1e:b4:61:81:3f:49:fd:79:48:f0:82:0c:07: c9:ff:a0:b3:d0:70:cd:fe:ce:37:0c:ca:9d:14:b7: 80:ae:ce:11:d8:7b:7a:d0:0b:46:c4:32:a3:f5:7f: 63:37:20:6c:af:ad:d8:72:30:2e:7d:46:69:cb:6d: b3:e5:19:a2:91:3a:11:a0:fa:48:23:dd:c8:d7:53: d3:4f:cc:10:08:e0:41:dd:7e:d9:6f:57:1a:36:81: 37:d6:3a:25:1c:15:a2:07:58:c8:ab:22:ae:0e:6e: 1d:14:e6:12:62:7b:29:04:a0:6b:04:4e:d5:f2:0d: d7:08:e2:9e:92:0f:c5:6c:25:41:37:d9:dd:e2:65: 6f:2d:36:63:93:d8:67:0a:dd:f1:4b:d6:ff:e6:80: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:AB:4F:C3:55:63:8A:5F:D5:04:F5:5B:E9:87:54:78:70:0C:BF X509v3 Authority Key Identifier: keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/orOrT8NVY4pf1QT1W-mHVHhwDL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.176.0/21 93.94.32.0/21 93.174.64.0/21 158.58.136.0/21 185.84.176.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:02:89:b0:0d:6b:ce:27:e7:44:a1:f2:e2:ec:bc:0b:d8:36: 47:c8:55:b5:00:5f:d3:2f:6c:46:eb:ec:1d:4c:cd:02:e3:b5: 03:b2:3d:14:28:8f:ea:16:1d:94:11:cf:3c:73:9e:c2:17:78: ac:87:c3:6d:07:a8:69:37:e8:dd:eb:25:71:dd:98:4c:b5:84: c4:b8:ce:33:ae:b8:4f:a1:19:f8:0d:0e:05:4f:cf:65:77:a4: 1f:f8:b5:b3:c1:55:48:6a:2c:c3:60:e8:ee:a7:14:e4:0e:be: bd:1b:bf:7d:5d:92:70:59:f8:ad:b6:f4:8d:31:78:b2:3d:15: 26:e0:6f:e2:4d:ba:b0:48:9d:5e:22:24:a3:2d:f9:0b:e3:35: d1:c9:fc:62:f3:53:e6:ae:be:1b:19:22:93:8f:ec:02:86:46: c5:e5:55:85:05:b2:ae:ee:51:64:20:18:fc:5a:fa:d5:58:8d: 13:22:3c:82:1d:ac:59:30:f4:61:77:39:9a:10:54:d5:21:60: f7:4a:54:22:33:25:64:19:c6:c8:ce:15:56:3f:3a:a5:67:5c: 30:60:20:b0:a5:60:58:67:53:79:ce:19:22:6e:7f:e7:d2:80: 4e:13:34:80:0e:1a:b0:b9:a1:79:66:e2:0f:e4:f2:61:0c:c2: ba:89:14:9a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+OGF9cWr3oVgaNcAHUwwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODg4NDlhMmViNWU5ZGQ1NzFhOGU3NDNiZWQ3Yjk1MTNk N2ExMjEwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmIzYWI0ZmMzNTU2MzhhNWZkNTA0ZjU1YmU5ODc1NDc4NzAwY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xz1LLarzE9N3nk/NWPQWxRBjsiq s7sY33UKWUfmaS/HwIE21Cjv9miGIKMqOTjc299cJakvpuUX68lu04+c45Ts3CH8 zAeHati5F6wO6vngAmZcJOU3UaLUq0e39nAqFHgcdYcIW21snh60YYE/Sf15SPCC DAfJ/6Cz0HDN/s43DMqdFLeArs4R2Ht60AtGxDKj9X9jNyBsr63YcjAufUZpy22z 5RmikToRoPpII93I11PTT8wQCOBB3X7Zb1caNoE31jolHBWiB1jIqyKuDm4dFOYS YnspBKBrBE7V8g3XCOKekg/FbCVBN9nd4mVvLTZjk9hnCt3xS9b/5oDifQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKKzq0/DVWOKX9UE9Vvph1R4cAy/MB8GA1UdIwQY MBaAFL+IhJoutendVxqOdDvte5UT16EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYt MjM3MzliNWZkODRjLzEvb3JPclQ4TlZZNHBmMVFUMVctbUhWSGh3REw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYtMjM3MzliNWZkODRj LzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDLv6wAwQD XV4gAwQDXa5AAwQDnjqIAwQCuVSwMA0GCSqGSIb3DQEBCwUAA4IBAQALAomwDWvO J+dEofLi7LwL2DZHyFW1AF/TL2xG6+wdTM0C47UDsj0UKI/qFh2UEc88c57CF3is h8NtB6hpN+jd6yVx3ZhMtYTEuM4zrrhPoRn4DQ4FT89ld6Qf+LWzwVVIaizDYOju pxTkDr69G799XZJwWfittvSNMXiyPRUm4G/iTbqwSJ1eIiSjLfkL4zXRyfxi81Pm rr4bGSKTj+wChkbF5VWFBbKu7lFkIBj8WvrVWI0TIjyCHaxZMPRhdzmaEFTVIWD3 SlQiMyVkGcbIzhVWPzqlZ1wwYCCwpWBYZ1N5zhkibn/n0oBOEzSADhqwuaF5ZuIP 5PJhDMK6iRSa -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:19 2026 by rpki-client