This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rm_OrglFUJs4INoFKufUuhvuK38.roa File: Rm_OrglFUJs4INoFKufUuhvuK38.roa (raw, json) Hash identifier: 1GYecKLzrxoW5fjWqdNHRsGEuDrCF2MVpz0GrFxnqv8= Subject key identifier: 46:6F:CE:AE:09:45:50:9B:38:20:DA:05:2A:E7:D4:BA:1B:EE:2B:7F Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1C5150A4B0F58AF1E2F5DBD9F88F6 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rm_OrglFUJs4INoFKufUuhvuK38.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207108 IP address blocks: 2a0f:2f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c5:15:0a:4b:0f:58:af:1e:2f:5d:bd:9f:88:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=466fceae0945509b3820da052ae7d4ba1bee2b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:4b:ef:0d:76:56:d5:fc:ba:ee:d3:75:f2: 21:26:27:3b:f4:4d:1a:22:ae:59:b8:4b:70:fd:00: 59:ab:6b:6e:2d:db:f8:b7:3e:0c:a8:48:08:fd:69: 9b:2c:94:85:8a:08:9f:b5:f1:a9:70:7f:87:f3:cf: ed:4a:f7:75:e8:bf:42:00:09:e4:db:b4:0f:da:fe: 80:fc:86:c4:aa:fb:38:c9:01:39:59:8a:a1:70:86: 33:44:19:e3:50:8a:f9:ae:df:83:df:b8:58:35:d9: 4f:aa:ec:53:9b:a0:5d:e1:b2:ec:ea:8c:72:c1:1d: b8:5c:ae:ea:49:91:1c:94:45:79:d7:c5:d8:1f:15: ff:dd:59:be:04:d1:8a:d0:a5:45:6a:c4:36:05:ad: 80:7d:d8:b0:d2:0e:30:81:fb:8b:f3:4e:e4:eb:fe: e8:5e:cc:16:10:e5:b8:f9:ff:1d:8e:20:75:73:fe: 6b:72:cd:28:b3:c7:9e:df:57:c3:6f:61:c2:9d:8a: e4:39:50:07:2f:71:f1:e0:64:20:50:ae:cf:4e:58: 2a:06:b3:76:a8:94:1e:d9:b1:bb:86:33:ed:27:d2: 6e:e6:e0:ef:b4:9e:78:62:9a:d6:0d:5b:1d:fc:19: 96:6f:30:ee:42:ce:7f:a9:b5:a1:59:c1:a4:d8:12: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6F:CE:AE:09:45:50:9B:38:20:DA:05:2A:E7:D4:BA:1B:EE:2B:7F X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rm_OrglFUJs4INoFKufUuhvuK38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:2f40::/29 Signature Algorithm: sha256WithRSAEncryption 76:c6:3e:75:e4:27:89:fa:19:49:3c:b8:1d:86:6a:a6:50:73: 71:04:fd:6a:70:50:87:e2:f8:de:b2:db:d1:73:3c:02:e3:42: 9f:40:a7:35:bb:32:1e:ab:15:4e:e0:89:41:bc:b4:e9:8c:fa: b8:50:b4:b5:ee:81:ef:d0:16:9f:7c:03:d4:3c:42:1a:aa:3a: ba:0e:de:96:74:3e:92:11:ed:f7:59:d6:57:3c:41:8c:c4:43: 1b:3b:de:2c:87:ff:7f:de:29:9f:64:b4:fd:7f:33:92:e2:21: a8:9a:72:f6:57:0e:ac:e7:1f:73:ce:71:ad:27:66:a4:33:36: fe:97:1d:52:81:67:fb:f7:06:2f:7f:3d:de:b2:13:d5:97:72: 51:88:a4:30:0c:22:3c:40:14:ee:71:31:89:0e:e0:df:02:6d: 89:f1:a6:02:5d:e4:76:c6:ff:fd:cc:9d:59:0e:1c:db:c3:93: 21:9a:8e:a4:fa:7d:ac:ec:ff:32:08:a3:cd:7c:d8:d4:5f:5d: 84:7d:d2:bb:fc:26:43:16:39:af:56:50:5e:21:e1:53:ef:77: ff:9b:bb:69:b1:49:18:bd:f3:96:f5:de:fb:ae:d7:20:65:c9: 88:b9:af:ea:5c:de:28:d6:d0:b9:b9:e5:3a:4a:99:e7:48:7e: d8:b7:12:b7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8cUVCksPWK8eL129n4j2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjZmY2VhZTA5NDU1MDliMzgyMGRhMDUyYWU3ZDRiYTFiZWUyYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0RL7w12VtX8uu7TdfIhJic79E0a Iq5ZuEtw/QBZq2tuLdv4tz4MqEgI/WmbLJSFigiftfGpcH+H88/tSvd16L9CAAnk 27QP2v6A/IbEqvs4yQE5WYqhcIYzRBnjUIr5rt+D37hYNdlPquxTm6Bd4bLs6oxy wR24XK7qSZEclEV518XYHxX/3Vm+BNGK0KVFasQ2Ba2Afdiw0g4wgfuL807k6/7o XswWEOW4+f8djiB1c/5rcs0os8ee31fDb2HCnYrkOVAHL3Hx4GQgUK7PTlgqBrN2 qJQe2bG7hjPtJ9Ju5uDvtJ54YprWDVsd/BmWbzDuQs5/qbWhWcGk2BIvowIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEZvzq4JRVCbOCDaBSrn1Lob7it/MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUm1fT3JnbEZVSnM0SU5vRkt1ZlV1aHZ1SzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg8vQDAN BgkqhkiG9w0BAQsFAAOCAQEAdsY+deQnifoZSTy4HYZqplBzcQT9anBQh+L43rLb 0XM8AuNCn0CnNbsyHqsVTuCJQby06Yz6uFC0te6B79AWn3wD1DxCGqo6ug7elnQ+ khHt91nWVzxBjMRDGzveLIf/f94pn2S0/X8zkuIhqJpy9lcOrOcfc85xrSdmpDM2 /pcdUoFn+/cGL3893rIT1ZdyUYikMAwiPEAU7nExiQ7g3wJtifGmAl3kdsb//cyd WQ4c28OTIZqOpPp9rOz/MgijzXzY1F9dhH3Su/wmQxY5r1ZQXiHhU+93/5u7abFJ GL3zlvXe+67XIGXJiLmv6lzeKNbQubnlOkqZ50h+2LcStw== -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:37 2026 by rpki-client