This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/orUhVB_XCV_MPBCSEn7UxkecBb8.roa File: orUhVB_XCV_MPBCSEn7UxkecBb8.roa (raw, json) Hash identifier: lgc2MPJFtdFX5G6JHnnUGIp1FVNshA+U7laURM3UjQ4= Subject key identifier: A2:B5:21:54:1F:D7:09:5F:CC:3C:10:92:12:7E:D4:C6:47:9C:05:BF Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74 Certificate serial: 019B7CED5476AFE16E657652C7CD7F32EB89 Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/orUhVB_XCV_MPBCSEn7UxkecBb8.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49692 IP address blocks: 91.213.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:54:76:af:e1:6e:65:76:52:c7:cd:7f:32:eb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74 Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2b521541fd7095fcc3c1092127ed4c6479c05bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:aa:42:69:80:1e:72:d9:eb:44:9d:f4:1b: 23:21:e7:1b:ae:f2:fc:25:3c:5d:21:86:dd:73:de: 89:a4:d6:8d:84:d1:0a:f7:0c:2e:6e:c1:d1:f8:f8: a9:56:aa:3f:4e:c7:4f:e1:78:23:2d:94:1c:0e:76: d2:00:60:77:34:f7:88:6b:50:40:83:7c:85:9b:14: b0:df:f9:e0:7a:f3:66:c6:31:57:78:11:30:40:16: 63:f7:1c:34:2e:3a:48:7c:e9:2e:47:6d:1a:2e:e8: da:62:15:cf:40:b7:7e:9b:2b:0c:13:83:98:ff:98: 8e:58:36:0d:34:8d:9d:81:1e:0c:ac:0e:3d:2a:ed: c2:5b:c9:75:03:03:fb:4e:f3:9c:e1:a0:77:1c:74: 73:00:b8:4b:92:ac:a3:d3:07:12:c4:4d:74:5a:a5: 50:a8:ac:2c:62:71:b6:ff:4b:5b:c9:05:c2:60:5b: 10:f9:5f:47:8c:ce:85:2c:c4:4b:2e:bb:69:ab:45: c0:47:73:5a:99:29:d9:f6:95:f6:14:3b:0b:78:7a: c4:ad:70:99:08:1c:8e:c0:73:8f:a4:14:bb:31:40: 10:db:1c:17:40:e7:40:6e:12:92:72:e4:f3:90:33: 36:4b:52:19:95:d1:55:89:bb:0a:b3:49:b9:72:8e: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B5:21:54:1F:D7:09:5F:CC:3C:10:92:12:7E:D4:C6:47:9C:05:BF X509v3 Authority Key Identifier: keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/orUhVB_XCV_MPBCSEn7UxkecBb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.180.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:e1:1b:84:ae:9b:c3:c3:cf:e4:23:46:b9:3e:3d:97:42:cc: 80:11:e0:d7:7f:a2:e9:da:d7:f8:40:ac:b1:c3:b9:ee:14:db: 0e:21:d1:71:67:a4:5c:e2:85:b8:4c:81:47:dd:2b:93:36:c5: 51:89:13:82:32:0b:04:fa:75:76:9a:71:bc:91:dc:ed:b6:51: 3a:e6:57:4b:9f:ed:a6:26:ca:6d:5d:1d:32:48:8d:94:38:e4: 0b:a8:7f:a4:f9:28:ab:25:9b:2e:f6:d3:1f:03:20:2c:1b:09: 59:2b:a1:c5:4a:56:2c:31:f4:f8:d9:23:b9:81:0b:7b:a6:7d: da:48:cd:48:17:72:9b:f1:11:b6:2c:44:20:d3:7b:b5:15:52: 11:5a:6c:a2:8c:ad:b2:f4:86:8b:1b:16:92:dd:f9:a4:72:e3: ed:8e:57:9f:f8:d2:a0:89:c3:8b:bb:e7:b6:f5:85:85:2f:b8: 12:2d:24:16:07:8b:4f:e7:67:4a:92:f2:79:15:75:4f:c9:3d: cc:01:0d:e2:c0:c4:df:87:7a:96:73:b3:6f:af:b0:2a:b2:1e: 6f:54:dd:66:60:d0:6a:12:fd:dc:fa:24:9d:ed:b7:0c:71:ed: 24:3e:8a:a8:43:ac:e4:47:42:1d:2f:ac:0d:97:a5:6c:93:3f: 93:f4:46:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VR2r+FuZXZSx81/MuuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDhjY2U0ZmI2ZDM2MTQwZWI3ZDU2ZmVkMjg5YjM4NzFm YzRkNzQwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmI1MjE1NDFmZDcwOTVmY2MzYzEwOTIxMjdlZDRjNjQ3OWMwNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrKqQmmAHnLZ60Sd9BsjIecbrvL8 JTxdIYbdc96JpNaNhNEK9wwubsHR+PipVqo/TsdP4XgjLZQcDnbSAGB3NPeIa1BA g3yFmxSw3/ngevNmxjFXeBEwQBZj9xw0LjpIfOkuR20aLujaYhXPQLd+mysME4OY /5iOWDYNNI2dgR4MrA49Ku3CW8l1AwP7TvOc4aB3HHRzALhLkqyj0wcSxE10WqVQ qKwsYnG2/0tbyQXCYFsQ+V9HjM6FLMRLLrtpq0XAR3NamSnZ9pX2FDsLeHrErXCZ CByOwHOPpBS7MUAQ2xwXQOdAbhKScuTzkDM2S1IZldFVibsKs0m5co5tnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKK1IVQf1wlfzDwQkhJ+1MZHnAW/MB8GA1UdIwQY MBaAFINIzOT7bTYUDrfVb+0omzhx/E10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYt YjhjM2RkNzY2MTNlLzEvb3JVaFZCX1hDVl9NUEJDU0VuN1V4a2VjQmI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYtYjhjM2RkNzY2MTNl LzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9W0MA0G CSqGSIb3DQEBCwUAA4IBAQB64RuErpvDw8/kI0a5Pj2XQsyAEeDXf6Lp2tf4QKyx w7nuFNsOIdFxZ6Rc4oW4TIFH3SuTNsVRiROCMgsE+nV2mnG8kdzttlE65ldLn+2m JsptXR0ySI2UOOQLqH+k+SirJZsu9tMfAyAsGwlZK6HFSlYsMfT42SO5gQt7pn3a SM1IF3Kb8RG2LEQg03u1FVIRWmyijK2y9IaLGxaS3fmkcuPtjlef+NKgicOLu+e2 9YWFL7gSLSQWB4tP52dKkvJ5FXVPyT3MAQ3iwMTfh3qWc7Nvr7Aqsh5vVN1mYNBq Ev3c+iSd7bcMce0kPoqoQ6zkR0IdL6wNl6Vskz+T9Ebj -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:51 2026 by rpki-client