This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/orYTbR20cEpSZCCq-0-GXQfm1kU.roa File: orYTbR20cEpSZCCq-0-GXQfm1kU.roa (raw, json) Hash identifier: XJm2m3ShW2ZmHIkoQ72i7FCm2geckwdfRmPDsXWrUok= Subject key identifier: A2:B6:13:6D:1D:B4:70:4A:52:64:20:AA:FB:4F:86:5D:07:E6:D6:45 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9ECA969687A3A918FE7799F0818B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/orYTbR20cEpSZCCq-0-GXQfm1kU.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 81.168.120.0/24 maxlen: 24 82.152.3.0/24 maxlen: 24 82.152.233.0/24 maxlen: 24 82.153.72.0/24 maxlen: 24 109.176.200.0/24 maxlen: 24 213.130.155.0/24 maxlen: 24 213.218.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9e:ca:96:96:87:a3:a9:18:fe:77:99:f0:81:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2b6136d1db4704a526420aafb4f865d07e6d645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:cc:af:90:ff:86:fb:31:47:d2:70:d3:cd: a2:ac:4e:d5:52:97:66:a3:c6:f6:85:17:cf:9e:b6: 60:11:6e:b6:25:3c:99:7f:ba:ed:a1:e2:d0:49:92: d4:86:ee:88:08:0b:67:a5:57:d3:13:96:32:26:f5: a6:20:1c:68:d4:80:13:18:b7:29:41:0e:ad:b3:4a: f9:5c:60:67:87:38:6e:d0:26:7d:50:a3:82:5e:36: 1c:1d:a2:bd:64:75:0a:2f:65:3f:d1:1a:3c:51:45: 4c:95:88:44:91:16:8b:5d:28:d5:69:e0:28:59:5f: 73:f5:50:45:18:e0:76:61:55:79:b8:24:e7:f6:58: 4b:42:12:4e:a1:3f:13:c2:3e:5c:50:a4:15:d1:e5: 2e:5f:c5:6d:bb:c8:ba:50:74:24:5c:7e:cf:3a:4f: 44:93:b2:c9:20:dd:61:7f:f7:1b:3d:a2:f4:3f:14: 4b:09:aa:50:41:29:eb:b9:53:7e:ae:8a:19:df:82: c6:3c:06:5d:09:64:48:21:3b:1c:00:3e:e7:b1:fd: e4:b3:27:68:66:61:45:78:2b:8f:0d:b6:fd:13:06: c3:9d:f3:51:06:0a:02:6d:41:0b:00:1e:a1:64:c1: 40:8a:1f:92:5d:4f:54:43:44:22:8c:57:b8:c3:94: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B6:13:6D:1D:B4:70:4A:52:64:20:AA:FB:4F:86:5D:07:E6:D6:45 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/orYTbR20cEpSZCCq-0-GXQfm1kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.120.0/24 82.152.3.0/24 82.152.233.0/24 82.153.72.0/24 109.176.200.0/24 213.130.155.0/24 213.218.213.0/24 Signature Algorithm: sha256WithRSAEncryption 71:4e:3b:24:42:69:ad:90:c7:77:fd:23:94:f7:db:36:b4:07: 85:14:bd:99:6e:69:37:c6:8c:00:29:a7:b3:19:1c:0f:ba:94: bd:f7:58:cc:7a:8c:13:ea:7e:41:39:48:e3:77:de:60:e7:f5: 67:98:c9:09:21:dc:c2:13:bd:1b:f3:10:ee:78:93:b8:3f:04: a1:4c:22:c3:4c:65:6f:4a:1c:14:05:3e:e0:1c:96:1b:46:00: 30:2d:87:69:68:3b:3a:dc:6a:0a:f1:9e:b0:48:30:5f:30:60: 5a:5e:0b:42:45:1b:3b:2f:42:28:07:7d:75:f4:4b:44:38:8d: e6:54:7a:ee:13:b1:b6:15:fd:b0:08:f9:9b:39:96:b7:7c:e5: 15:c3:f6:5c:45:f1:b8:9c:32:1d:4a:70:28:ae:fa:6a:02:83: ab:e5:65:9b:8a:29:94:eb:26:08:50:a9:0c:3e:02:73:ac:f7: f2:df:ed:27:4f:49:d8:c8:14:2e:73:99:6c:e0:53:69:f8:cc: ec:b1:bc:e6:71:0d:80:8f:e8:4c:de:78:d2:57:bb:55:d3:e0: 9c:2a:ef:3e:e2:c6:37:75:49:a2:b8:75:54:c5:20:5e:84:9f: 79:e2:06:66:18:6a:db:ad:99:d7:af:12:0d:9b:bb:75:b9:20: a4:40:e1:01 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6Wp7KlpaHo6kY/neZ8IGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmI2MTM2ZDFkYjQ3MDRhNTI2NDIwYWFmYjRmODY1ZDA3ZTZkNjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJDMr5D/hvsxR9Jw082irE7VUpdm o8b2hRfPnrZgEW62JTyZf7rtoeLQSZLUhu6ICAtnpVfTE5YyJvWmIBxo1IATGLcp QQ6ts0r5XGBnhzhu0CZ9UKOCXjYcHaK9ZHUKL2U/0Ro8UUVMlYhEkRaLXSjVaeAo WV9z9VBFGOB2YVV5uCTn9lhLQhJOoT8Twj5cUKQV0eUuX8Vtu8i6UHQkXH7POk9E k7LJIN1hf/cbPaL0PxRLCapQQSnruVN+rooZ34LGPAZdCWRIITscAD7nsf3ksydo ZmFFeCuPDbb9EwbDnfNRBgoCbUELAB6hZMFAih+SXU9UQ0QijFe4w5TUeQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFKK2E20dtHBKUmQgqvtPhl0H5tZFMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvb3JZVGJSMjBjRXBTWkNDcS0wLUdYUWZtMWtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUah4AwQA UpgDAwQAUpjpAwQAUplIAwQAbbDIAwQA1YKbAwQA1drVMA0GCSqGSIb3DQEBCwUA A4IBAQBxTjskQmmtkMd3/SOU99s2tAeFFL2Zbmk3xowAKaezGRwPupS991jMeowT 6n5BOUjjd95g5/VnmMkJIdzCE70b8xDueJO4PwShTCLDTGVvShwUBT7gHJYbRgAw LYdpaDs63GoK8Z6wSDBfMGBaXgtCRRs7L0IoB3119EtEOI3mVHruE7G2Ff2wCPmb OZa3fOUVw/ZcRfG4nDIdSnAorvpqAoOr5WWbiimU6yYIUKkMPgJzrPfy3+0nT0nY yBQuc5ls4FNp+MzssbzmcQ2Aj+hM3njSV7tV0+CcKu8+4sY3dUmiuHVUxSBehJ95 4gZmGGrbrZnXrxINm7t1uSCkQOEB -----END CERTIFICATE-----Generated at Mon Jan 19 17:05:12 2026 by rpki-client