This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa File: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (raw, json) Hash identifier: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8= Subject key identifier: 39:10:F9:09:54:65:F1:F1:CD:92:B1:83:09:C0:E0:2A:08:81:E2:70 Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Certificate serial: 019B77C6D4A8010F644AC6C9CA8E47408151 Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61154 IP address blocks: 91.238.142.0/23 maxlen: 23 193.9.127.0/24 maxlen: 24 195.78.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d4:a8:01:0f:64:4a:c6:c9:ca:8e:47:40:81:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3910f9095465f1f1cd92b18309c0e02a0881e270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:b2:3c:18:f1:d5:12:68:ad:d1:e5:69:e3: cc:77:13:51:8a:1e:f5:73:db:a4:f1:ac:44:fb:7b: 14:7d:47:08:da:7f:28:0d:42:50:78:7d:d7:6b:0f: c1:f3:de:c4:ab:40:45:46:1c:17:4c:9d:3e:a9:a8: e3:70:f9:8c:71:cc:00:d5:80:0b:a4:ba:ce:40:da: e5:ac:ad:de:eb:33:aa:0e:a1:44:59:9f:5d:7e:b7: 61:d1:bf:42:db:a5:0e:d9:89:60:c6:34:a0:fa:1a: d7:f7:1c:6a:5f:34:65:cc:58:8f:3f:2b:36:ea:8f: 16:d1:24:87:b5:ce:83:5e:14:dd:d9:ac:1d:5a:70: 9b:6a:1d:7f:2b:e9:bf:19:b7:ff:30:75:c1:28:b8: 58:07:49:18:b1:cf:6f:51:05:dd:a7:9a:9b:e5:4e: ad:01:a5:13:4e:30:15:57:06:86:dc:4d:7f:bc:3d: 35:1a:ac:32:80:98:ff:45:1d:7f:db:ed:07:60:ad: de:4d:8e:a7:77:42:07:72:11:bc:bc:c6:f8:ea:ed: 27:00:58:35:70:29:b7:fb:52:30:a1:31:2d:54:c5: 86:37:5a:fd:e5:5d:5c:93:19:f0:ca:b1:c0:e3:9e: 52:3f:d8:79:6d:1f:ea:ad:b3:b8:b5:52:d5:73:50: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:F9:09:54:65:F1:F1:CD:92:B1:83:09:C0:E0:2A:08:81:E2:70 X509v3 Authority Key Identifier: keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.142.0/23 193.9.127.0/24 195.78.236.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:d1:64:e9:9f:ca:2f:78:24:d1:84:ef:f7:d4:e5:ab:9f:71: b6:b5:2a:29:8b:c0:5e:17:81:00:3b:cd:c2:24:b2:e5:14:ea: fd:8b:b2:53:99:41:97:07:47:33:d1:14:b4:e2:2c:6d:17:73: 55:9c:ed:21:dd:8b:e7:83:70:e9:c0:9e:f3:d7:0c:6e:45:89: b0:37:f9:1d:19:90:a5:a2:c5:92:c4:a4:92:a9:00:42:6a:c0: c0:36:ad:70:3a:b9:4b:7f:cf:01:b8:4f:6f:cc:aa:b4:8e:d1: 49:d9:69:09:a6:9d:26:7e:ad:f9:ef:b2:e2:0b:a8:1b:ef:2d: a6:c4:c6:92:b1:0a:06:b9:af:2d:56:50:80:b7:cd:c5:3f:5b: 09:55:3c:06:8d:42:2a:57:63:a0:d8:7f:e6:b3:c9:39:a9:7e: 19:db:2d:20:92:2f:ba:08:f4:82:8a:82:5c:51:b9:dd:64:40: 8c:49:47:c3:08:ea:4c:64:32:d5:5a:e1:28:e0:63:8a:0a:0e: e1:9d:32:41:a7:a0:ad:79:8f:6b:d1:d6:92:cb:28:e0:15:e5: ff:49:00:b5:dd:d1:a9:74:b0:01:ab:18:9e:d4:09:e4:33:dd: 3e:ef:c5:84:58:ed:54:bc:bc:ff:c6:3e:66:6c:6e:aa:c7:f6: c0:7c:a5:29 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xtSoAQ9kSsbJyo5HQIFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1 M2FlNjcwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTEwZjkwOTU0NjVmMWYxY2Q5MmIxODMwOWMwZTAyYTA4ODFlMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApySyPBjx1RJordHlaePMdxNRih71 c9uk8axE+3sUfUcI2n8oDUJQeH3Xaw/B897Eq0BFRhwXTJ0+qajjcPmMccwA1YAL pLrOQNrlrK3e6zOqDqFEWZ9dfrdh0b9C26UO2YlgxjSg+hrX9xxqXzRlzFiPPys2 6o8W0SSHtc6DXhTd2awdWnCbah1/K+m/Gbf/MHXBKLhYB0kYsc9vUQXdp5qb5U6t AaUTTjAVVwaG3E1/vD01GqwygJj/RR1/2+0HYK3eTY6nd0IHchG8vMb46u0nAFg1 cCm3+1IwoTEtVMWGN1r95V1ckxnwyrHA455SP9h5bR/qrbO4tVLVc1BGeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDkQ+QlUZfHxzZKxgwnA4CoIgeJwMB8GA1UdIwQY MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt NjVhNWVmMGFmMGI0LzEvT1JENUNWUmw4ZkhOa3JHRENjRGdLZ2lCNG5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0 LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+6OAwQA wQl/AwQCw07sMA0GCSqGSIb3DQEBCwUAA4IBAQBs0WTpn8oveCTRhO/31OWrn3G2 tSopi8BeF4EAO83CJLLlFOr9i7JTmUGXB0cz0RS04ixtF3NVnO0h3Yvng3DpwJ7z 1wxuRYmwN/kdGZClosWSxKSSqQBCasDANq1wOrlLf88BuE9vzKq0jtFJ2WkJpp0m fq3577LiC6gb7y2mxMaSsQoGua8tVlCAt83FP1sJVTwGjUIqV2Og2H/ms8k5qX4Z 2y0gki+6CPSCioJcUbndZECMSUfDCOpMZDLVWuEo4GOKCg7hnTJBp6CteY9r0daS yyjgFeX/SQC13dGpdLABqxie1AnkM90+78WEWO1UvLz/xj5mbG6qx/bAfKUp -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:41 2026 by rpki-client