This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ORdc8rOF3cmXKW-LWiAz__THMfA.roa File: ORdc8rOF3cmXKW-LWiAz__THMfA.roa (raw, json) Hash identifier: triuUpxRCnM8+3tuTZ+dsMN43CvFMeIZzgQgorkji7A= Subject key identifier: 39:17:5C:F2:B3:85:DD:C9:97:29:6F:8B:5A:20:33:FF:F4:C7:31:F0 Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Certificate serial: 019B7BA4F133447792F28C2B84A6A425CFFE Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ORdc8rOF3cmXKW-LWiAz__THMfA.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 193.36.179.0/24 maxlen: 24 193.36.185.0/24 maxlen: 24 193.36.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f1:33:44:77:92:f2:8c:2b:84:a6:a4:25:cf:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39175cf2b385ddc997296f8b5a2033fff4c731f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:70:42:3e:fb:5e:2f:83:ab:42:21:f2:63: a7:22:f9:71:81:33:f7:25:cc:e3:59:de:f3:a7:0f: ef:b1:7d:19:5b:91:42:8a:c8:2b:99:80:5e:b9:0e: da:60:e0:c4:19:9d:22:76:a1:a0:ab:70:9f:f9:b1: 8a:4d:c1:4b:ba:d5:dd:89:56:19:90:5b:0d:04:06: ee:33:fb:fa:15:48:5a:8f:3b:60:07:2f:c2:31:2c: d5:c3:b8:15:18:38:e6:f3:16:d7:c6:4d:47:3f:89: 50:bd:3d:21:ea:ec:e7:e6:f4:09:7a:11:46:dc:fc: f8:d5:09:3a:1a:35:a6:e9:b9:72:8f:27:c6:4a:65: 39:2a:9f:33:29:4b:65:d0:40:2a:ea:57:90:48:17: d4:c6:28:bb:15:5e:1d:5f:5f:ea:ac:c1:ec:02:27: cc:12:37:c5:a5:1e:a8:0a:ee:5d:1c:f7:77:f6:33: 3e:90:9e:d6:56:08:6a:18:fb:3b:18:5f:80:97:76: ac:e1:9e:05:b5:53:93:e8:eb:89:aa:57:aa:92:0d: 38:be:be:60:75:14:12:1e:be:0d:e7:08:63:bf:50: c8:84:c8:45:e2:70:21:25:65:b6:8b:fa:22:d8:88: 7e:e7:72:41:b6:0a:fe:a0:3b:74:28:5d:85:1a:d9: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:5C:F2:B3:85:DD:C9:97:29:6F:8B:5A:20:33:FF:F4:C7:31:F0 X509v3 Authority Key Identifier: keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ORdc8rOF3cmXKW-LWiAz__THMfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.179.0/24 193.36.185.0/24 193.36.187.0/24 Signature Algorithm: sha256WithRSAEncryption 15:c1:c2:06:13:06:a0:d5:82:39:02:71:cb:20:c3:ee:14:45: 86:8a:12:91:cb:b8:44:5b:85:da:45:e1:bb:b7:65:65:a2:85: e6:d8:b0:f9:91:a0:46:a8:fe:7f:82:95:77:56:da:a2:e7:19: f9:c9:5a:84:53:99:eb:53:63:60:d3:e1:78:80:9d:23:64:4f: 01:9c:b4:5d:36:25:21:f3:13:2b:53:20:58:12:55:b1:b9:3c: 89:ce:91:e7:1e:54:be:04:b2:54:2f:8c:20:29:9f:a6:c4:67: 89:96:17:86:13:cf:d0:8f:58:5c:d7:89:01:1a:6d:71:2d:a4: 07:c6:41:66:cd:c2:17:70:45:b3:aa:ee:6c:cb:85:0d:65:fd: 67:ca:a0:6a:c0:7a:bb:86:ee:a8:03:22:1e:bc:03:ed:8a:cc: b2:fc:75:6f:35:56:ce:45:9a:04:c6:12:55:af:1e:cd:e0:0b: 2f:2e:f0:e1:c1:19:51:33:a5:cd:39:0d:7d:19:eb:0b:f7:ea: af:87:3b:1b:08:db:b4:d9:e2:cc:1f:56:54:04:3e:52:a3:71: 92:34:c3:e8:d0:96:f2:c0:63:7f:df:d5:62:a8:d2:80:17:4f: 94:d1:a5:9f:ef:94:98:4c:a0:41:2f:15:ec:91:a2:4a:89:af: bc:39:dd:c4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pPEzRHeS8owrhKakJc/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMDhkZjE2NWQ0OTdkN2E5Yjk5ZTBlNzFmMTViYTA3ZDE4 NDYxNWEwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTE3NWNmMmIzODVkZGM5OTcyOTZmOGI1YTIwMzNmZmY0YzczMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqdwQj77Xi+Dq0Ih8mOnIvlxgTP3 JczjWd7zpw/vsX0ZW5FCisgrmYBeuQ7aYODEGZ0idqGgq3Cf+bGKTcFLutXdiVYZ kFsNBAbuM/v6FUhajztgBy/CMSzVw7gVGDjm8xbXxk1HP4lQvT0h6uzn5vQJehFG 3Pz41Qk6GjWm6blyjyfGSmU5Kp8zKUtl0EAq6leQSBfUxii7FV4dX1/qrMHsAifM EjfFpR6oCu5dHPd39jM+kJ7WVghqGPs7GF+Al3as4Z4FtVOT6OuJqleqkg04vr5g dRQSHr4N5whjv1DIhMhF4nAhJWW2i/oi2Ih+53JBtgr+oDt0KF2FGtkAPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDkXXPKzhd3Jlylvi1ogM//0xzHwMB8GA1UdIwQY MBaAFC8I3xZdSX16m5ng5x8VugfRhGFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzIt Y2FjM2U0MmFlMDNmLzEvT1JkYzhyT0YzY21YS1ctTFdpQXpfX1RITWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzItY2FjM2U0MmFlMDNm LzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwSSzAwQA wSS5AwQAwSS7MA0GCSqGSIb3DQEBCwUAA4IBAQAVwcIGEwag1YI5AnHLIMPuFEWG ihKRy7hEW4XaReG7t2VlooXm2LD5kaBGqP5/gpV3Vtqi5xn5yVqEU5nrU2Ng0+F4 gJ0jZE8BnLRdNiUh8xMrUyBYElWxuTyJzpHnHlS+BLJUL4wgKZ+mxGeJlheGE8/Q j1hc14kBGm1xLaQHxkFmzcIXcEWzqu5sy4UNZf1nyqBqwHq7hu6oAyIevAPtisyy /HVvNVbORZoExhJVrx7N4AsvLvDhwRlRM6XNOQ19GesL9+qvhzsbCNu02eLMH1ZU BD5So3GSNMPo0JbywGN/39ViqNKAF0+U0aWf75SYTKBBLxXskaJKia+8Od3E -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:19 2026 by rpki-client