This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/ORixJag7nGsUVhn_7z-jWKPNs6c.roa File: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (raw, json) Hash identifier: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo= Subject key identifier: 39:18:B1:25:A8:3B:9C:6B:14:56:19:FF:EF:3F:A3:58:A3:CD:B3:A7 Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Certificate serial: 019B77C6E2F8C50E55E994E8D185C7035A08 Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/ORixJag7nGsUVhn_7z-jWKPNs6c.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31490 IP address blocks: 2a14:44c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e2:f8:c5:0e:55:e9:94:e8:d1:85:c7:03:5a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3918b125a83b9c6b145619ffef3fa358a3cdb3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b0:43:00:6b:78:9a:b7:61:03:c9:3a:72:a5: 24:65:f8:50:af:1b:25:f9:1e:f3:6a:a3:5c:63:59: 2d:c6:97:d8:00:b5:21:5b:48:c8:6f:a1:47:e8:ac: 23:df:07:78:76:e2:3a:27:9d:3b:c3:33:2e:2a:ae: 17:dd:9d:60:ed:ce:15:a3:b0:7d:dc:a2:3e:0b:0d: 34:71:78:c0:81:f7:84:98:e4:0e:41:83:cd:dc:24: 82:ab:d0:08:ed:eb:00:8a:14:f6:50:cb:6a:43:29: d3:e8:e9:2f:9a:af:61:25:d2:0f:a0:27:9e:c3:99: 9a:6c:f5:56:ab:20:d4:fe:10:51:41:aa:fc:fa:75: c5:2e:aa:f4:81:90:ff:78:40:ba:20:87:d6:2f:91: a3:0b:b6:dd:c0:1d:69:78:c8:5f:dd:69:0f:f7:79: a6:50:2b:0c:79:db:d1:3b:26:fc:8b:37:28:28:f7: ae:a4:1f:64:fb:40:49:39:7e:cb:6a:d3:0c:4c:ef: d6:bb:57:77:99:eb:39:b4:63:e2:f3:99:27:9b:97: e6:54:6d:bd:ea:84:a7:6f:79:b7:7f:b9:53:bd:24: 2a:77:d7:46:15:e0:6f:1c:83:94:bf:ed:1c:49:9a: a3:85:7a:d3:52:86:73:b9:92:1c:4a:1a:0e:ff:77: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:B1:25:A8:3B:9C:6B:14:56:19:FF:EF:3F:A3:58:A3:CD:B3:A7 X509v3 Authority Key Identifier: keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/ORixJag7nGsUVhn_7z-jWKPNs6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:44c0::/48 Signature Algorithm: sha256WithRSAEncryption 5b:d4:fb:de:80:51:19:e3:56:b8:f7:89:41:c3:44:10:27:0a: c8:e6:9e:d8:c5:3f:75:3e:fc:e4:b0:b7:14:32:73:45:f7:54: de:0c:8f:57:91:a4:c9:7e:95:6c:a2:57:01:1d:37:3d:9d:b7: 92:d5:ec:cb:73:1c:33:45:ed:10:73:e2:0e:c1:ae:6b:bd:62: 18:ea:46:15:37:5c:16:11:9a:63:e1:59:6b:7d:cb:31:a6:e0: 44:01:ba:73:97:f2:34:45:50:fd:52:d2:92:98:60:c2:d2:41: 1a:9b:28:47:fa:0a:91:f3:fc:c9:1c:3c:80:a0:20:11:a2:2f: e0:2d:7d:71:2a:b6:6c:09:f8:b9:90:17:53:03:49:84:58:4d: 02:fe:6a:2b:aa:c7:77:c0:89:76:50:07:41:2d:d7:ec:c5:d1: 8b:95:0b:70:bd:4c:12:7f:21:87:78:98:10:bc:c0:b6:3c:e2: 87:39:7e:31:be:bc:a9:5e:56:4c:f6:81:50:04:3d:bf:36:c6: 17:4d:4c:54:1a:3b:18:f5:bd:b6:6b:93:8c:64:f6:05:3e:7b: 8f:25:84:5a:eb:21:1d:ef:78:4b:70:c0:b3:51:03:3e:15:df: e6:90:cc:31:db:42:35:08:da:fb:2e:68:0c:c7:ea:f0:1c:7a: 4a:84:57:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xuL4xQ5V6ZTo0YXHA1oIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm ZjFjNjEwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTE4YjEyNWE4M2I5YzZiMTQ1NjE5ZmZlZjNmYTM1OGEzY2RiM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17BDAGt4mrdhA8k6cqUkZfhQrxsl +R7zaqNcY1ktxpfYALUhW0jIb6FH6Kwj3wd4duI6J507wzMuKq4X3Z1g7c4Vo7B9 3KI+Cw00cXjAgfeEmOQOQYPN3CSCq9AI7esAihT2UMtqQynT6Okvmq9hJdIPoCee w5mabPVWqyDU/hBRQar8+nXFLqr0gZD/eEC6IIfWL5GjC7bdwB1peMhf3WkP93mm UCsMedvROyb8izcoKPeupB9k+0BJOX7LatMMTO/Wu1d3mes5tGPi85knm5fmVG29 6oSnb3m3f7lTvSQqd9dGFeBvHIOUv+0cSZqjhXrTUoZzuZIcShoO/3fRCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDkYsSWoO5xrFFYZ/+8/o1ijzbOnMB8GA1UdIwQY MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt ODkyZWM2ZmY0NzcxLzEvT1JpeEphZzduR3NVVmhuXzd6LWpXS1BOczZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhREwAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBb1PvegFEZ41a494lBw0QQJwrI5p7YxT91Pvzk sLcUMnNF91TeDI9XkaTJfpVsolcBHTc9nbeS1ezLcxwzRe0Qc+IOwa5rvWIY6kYV N1wWEZpj4VlrfcsxpuBEAbpzl/I0RVD9UtKSmGDC0kEamyhH+gqR8/zJHDyAoCAR oi/gLX1xKrZsCfi5kBdTA0mEWE0C/morqsd3wIl2UAdBLdfsxdGLlQtwvUwSfyGH eJgQvMC2POKHOX4xvrypXlZM9oFQBD2/NsYXTUxUGjsY9b22a5OMZPYFPnuPJYRa 6yEd73hLcMCzUQM+Fd/mkMwx20I1CNr7LmgMx+rwHHpKhFeD -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:38 2026 by rpki-client