This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/orj-Fixx4A4juS-1X934vffLD8o.roa File: orj-Fixx4A4juS-1X934vffLD8o.roa (raw, json) Hash identifier: J+pYVYwK1M5g1D7W7QYyMTB9RQs4NzDsKsiKv4dwqAY= Subject key identifier: A2:B8:FE:16:2C:71:E0:0E:23:B9:2F:B5:5F:DD:F8:BD:F7:CB:0F:CA Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019A65028E09573DB68935B9B04256EE9732 Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/orj-Fixx4A4juS-1X934vffLD8o.roa Signing time: Sat 08 Nov 2025 19:47:37 +0000 ROA not before: Sat 08 Nov 2025 19:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215625 IP address blocks: 46.235.12.0/24 maxlen: 24 46.235.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:65:02:8e:09:57:3d:b6:89:35:b9:b0:42:56:ee:97:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Nov 8 19:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2b8fe162c71e00e23b92fb55fddf8bdf7cb0fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:14:9f:d0:38:08:23:45:54:16:e0:0d:70: 38:1d:fe:09:9e:f0:11:c0:39:22:a2:28:03:21:6e: 84:73:a9:57:76:31:1a:5a:30:af:12:ef:00:45:0c: cd:34:56:04:8a:fe:67:24:41:ac:c2:c4:bd:f7:35: 0b:5b:79:e0:49:83:09:54:c8:b0:e9:db:1f:e8:5c: 95:c5:9f:0e:72:9f:16:4e:72:66:58:15:8b:5f:ee: c5:a0:ab:ec:f6:3e:28:cc:50:af:82:28:06:ef:f5: 31:2a:4f:5e:6a:49:d5:19:48:20:12:ad:50:ff:6c: 21:e0:fa:a1:ef:cc:d9:db:2b:4d:d4:44:81:7a:8d: a2:9d:ea:10:bb:b7:b3:b7:80:05:77:93:0e:14:49: 29:35:5a:80:e4:7d:56:8f:15:33:a7:c7:20:35:5b: 3a:79:24:2d:13:80:91:e4:a2:f8:dc:9d:14:06:97: 12:4e:4d:b3:9a:bf:58:29:58:ff:47:2f:35:c4:ef: 32:9d:5a:c7:76:f3:de:dc:62:a7:7e:14:5f:d5:ca: 28:f9:29:72:b8:4a:e0:e2:88:98:65:a9:e9:3f:8a: 30:7b:08:f5:8c:d2:75:e5:4e:90:e8:f7:d9:6a:f1: 3f:40:6f:bb:54:3e:78:1b:84:1c:14:5f:60:df:f0: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B8:FE:16:2C:71:E0:0E:23:B9:2F:B5:5F:DD:F8:BD:F7:CB:0F:CA X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/orj-Fixx4A4juS-1X934vffLD8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.12.0/23 Signature Algorithm: sha256WithRSAEncryption c9:6f:b7:f1:86:3b:f8:fc:d0:ab:90:3f:1a:ba:af:9e:fd:cd: 6c:50:20:aa:e0:7e:8b:79:73:4b:5c:ab:82:81:15:2e:d9:4d: e9:fe:7c:04:9c:e7:b9:0e:fd:87:21:9f:f7:48:45:77:13:02: e2:46:05:8e:03:fc:ce:61:c4:5a:73:b4:b8:24:53:f7:1b:07: 29:8c:a5:8b:a3:c9:f0:89:b1:92:91:45:ac:83:6b:67:89:a6: f7:80:f8:60:fa:49:6b:56:99:95:dc:45:f0:f2:0f:ca:93:45: 84:27:2d:4b:2e:96:96:e1:e4:ae:25:8b:bc:15:38:93:61:b8: 41:e0:62:19:42:1f:1d:a0:22:41:f0:cc:38:c2:c8:36:58:01: 1b:ce:4a:b6:20:9f:4e:33:58:b0:de:11:46:f6:e4:63:40:29: ad:21:1a:e6:de:bb:ed:ce:70:24:fe:ce:53:52:af:a7:c1:c9: 6c:36:42:6b:52:b4:3d:d5:b6:7c:12:87:16:2c:fe:2e:25:c2: 21:00:62:74:7c:4f:18:31:95:de:21:ff:69:65:4d:69:27:02: 39:7c:9f:3a:92:a7:fd:7c:b8:7a:a6:95:2e:a2:23:2a:8f:49: 3a:d7:f8:2c:63:0b:91:1d:6f:cb:59:b5:c3:bb:b2:35:6c:87: 46:6a:48:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZplAo4JVz22iTW5sEJW7pcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjUxMTA4MTk0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmI4ZmUxNjJjNzFlMDBlMjNiOTJmYjU1ZmRkZjhiZGY3Y2IwZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1kUn9A4CCNFVBbgDXA4Hf4JnvAR wDkioigDIW6Ec6lXdjEaWjCvEu8ARQzNNFYEiv5nJEGswsS99zULW3ngSYMJVMiw 6dsf6FyVxZ8Ocp8WTnJmWBWLX+7FoKvs9j4ozFCvgigG7/UxKk9eaknVGUggEq1Q /2wh4Pqh78zZ2ytN1ESBeo2ineoQu7ezt4AFd5MOFEkpNVqA5H1WjxUzp8cgNVs6 eSQtE4CR5KL43J0UBpcSTk2zmr9YKVj/Ry81xO8ynVrHdvPe3GKnfhRf1coo+Sly uErg4oiYZanpP4owewj1jNJ15U6Q6PfZavE/QG+7VD54G4QcFF9g3/BI6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKK4/hYsceAOI7kvtV/d+L33yw/KMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvb3JqLUZpeHg0QTRqdVMtMVg5MzR2ZmZMRDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLusMMA0G CSqGSIb3DQEBCwUAA4IBAQDJb7fxhjv4/NCrkD8auq+e/c1sUCCq4H6LeXNLXKuC gRUu2U3p/nwEnOe5Dv2HIZ/3SEV3EwLiRgWOA/zOYcRac7S4JFP3GwcpjKWLo8nw ibGSkUWsg2tniab3gPhg+klrVpmV3EXw8g/Kk0WEJy1LLpaW4eSuJYu8FTiTYbhB 4GIZQh8doCJB8Mw4wsg2WAEbzkq2IJ9OM1iw3hFG9uRjQCmtIRrm3rvtznAk/s5T Uq+nwclsNkJrUrQ91bZ8EocWLP4uJcIhAGJ0fE8YMZXeIf9pZU1pJwI5fJ86kqf9 fLh6ppUuoiMqj0k61/gsYwuRHW/LWbXDu7I1bIdGakiL -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:18 2025 by rpki-client