This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ORtAkR2xUIbZeeKuuRDnduZwyTU.roa File: ORtAkR2xUIbZeeKuuRDnduZwyTU.roa (raw, json) Hash identifier: fQZdmQtTW4LHxwEoW/KhZD444nzCts05N2+8YFuXlAk= Subject key identifier: 39:1B:40:91:1D:B1:50:86:D9:79:E2:AE:B9:10:E7:76:E6:70:C9:35 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F40F753865B854921AD50028A6BD7 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ORtAkR2xUIbZeeKuuRDnduZwyTU.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 130.49.0.0/24 maxlen: 24 130.49.20.0/24 maxlen: 24 130.49.99.0/24 maxlen: 24 155.212.58.0/24 maxlen: 24 155.212.113.0/24 maxlen: 24 170.168.56.0/24 maxlen: 24 170.168.108.0/24 maxlen: 24 170.168.144.0/24 maxlen: 24 170.168.157.0/24 maxlen: 24 170.168.164.0/24 maxlen: 24 170.168.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:f7:53:86:5b:85:49:21:ad:50:02:8a:6b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=391b40911db15086d979e2aeb910e776e670c935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:ad:cc:3f:56:a0:77:5d:69:f7:68:d1:d2: df:8d:63:fc:fe:fb:88:ce:52:21:45:c0:7e:b1:02: 9d:86:37:54:ca:c8:4c:30:0f:b8:cb:36:b2:d3:d7: 0d:38:09:ff:7f:0d:0b:11:e8:83:69:14:69:08:37: 54:95:5d:6b:9c:6a:ba:87:f2:73:31:54:1e:58:1e: f6:20:0e:de:30:34:c0:3f:f6:8a:73:0f:c2:87:1d: fe:fd:67:69:3e:68:08:bf:46:6b:97:4a:93:e6:d5: af:5e:e6:4f:bc:96:4e:7c:53:3c:ac:2a:04:5b:7f: 05:35:0d:49:de:f8:bf:75:7b:ea:b3:35:14:9c:84: 79:7c:3e:11:a1:29:a2:05:fd:62:d6:bc:c0:90:8a: 90:46:70:42:4e:b8:cd:13:ec:27:0b:d3:ae:42:c3: 5c:e7:ef:c0:80:f7:c4:f8:d8:63:4d:59:f4:2c:de: ae:42:73:53:b8:1b:d0:b0:02:c3:c4:01:bc:5e:c0: 98:3d:2c:37:d0:65:9f:ba:fd:29:87:92:9a:44:20: fc:15:5d:05:41:22:89:5c:f4:50:ef:24:e8:7b:8c: a9:a5:3b:5d:bc:71:41:70:02:05:d9:f5:95:a0:ec: 97:7d:79:08:7a:4b:2d:61:56:73:0c:a7:69:16:24: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1B:40:91:1D:B1:50:86:D9:79:E2:AE:B9:10:E7:76:E6:70:C9:35 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ORtAkR2xUIbZeeKuuRDnduZwyTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.0.0/24 130.49.20.0/24 130.49.99.0/24 155.212.58.0/24 155.212.113.0/24 170.168.56.0/24 170.168.108.0/24 170.168.144.0/24 170.168.157.0/24 170.168.164.0/24 170.168.247.0/24 Signature Algorithm: sha256WithRSAEncryption 95:53:b6:b0:b6:cf:e7:01:1d:ca:52:20:a5:84:25:cf:6b:81: f6:d8:3d:1d:81:63:11:52:17:f6:66:ee:a7:8a:00:bb:10:ef: eb:7b:fc:b6:94:64:90:a0:4e:d5:32:56:e8:bc:21:08:50:7a: 26:c8:ab:34:f6:b9:5b:f5:0c:c5:ad:10:fd:d0:49:8e:f6:1c: ec:26:be:5a:fc:7d:5d:3b:06:1d:a4:ed:ed:97:5b:f8:54:a1: f4:f4:25:0c:2b:47:3c:12:d3:df:be:47:41:3b:fa:30:12:4f: e0:67:1b:5f:f0:3e:28:ac:d0:9b:18:5d:40:d3:a9:1c:a8:c4: bc:9f:56:de:a0:b2:e5:90:17:a7:1b:cb:93:d4:fb:fa:86:ee: f5:41:7f:05:3a:b3:7e:81:a0:0a:fc:ab:de:00:09:36:f6:59: 06:09:2d:78:8e:ff:ef:73:6f:dd:ec:46:37:d5:31:08:16:4e: 3c:ce:2d:03:11:c4:2e:6f:ff:f5:d6:33:a0:77:55:22:ea:2b: d2:a4:6b:78:d3:34:cd:fd:54:55:dd:43:bf:51:ff:a5:49:ff: 9a:1f:39:a4:9d:b2:e5:df:4e:f0:34:78:59:9a:74:2a:10:6e: 25:91:01:bd:e8:50:85:ed:b3:c3:c8:23:03:7a:39:9b:c0:b6: f6:c2:88:87 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt5f0D3U4ZbhUkhrVACimvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTFiNDA5MTFkYjE1MDg2ZDk3OWUyYWViOTEwZTc3NmU2NzBjOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAGtzD9WoHddafdo0dLfjWP8/vuI zlIhRcB+sQKdhjdUyshMMA+4yzay09cNOAn/fw0LEeiDaRRpCDdUlV1rnGq6h/Jz MVQeWB72IA7eMDTAP/aKcw/Chx3+/WdpPmgIv0Zrl0qT5tWvXuZPvJZOfFM8rCoE W38FNQ1J3vi/dXvqszUUnIR5fD4RoSmiBf1i1rzAkIqQRnBCTrjNE+wnC9OuQsNc 5+/AgPfE+NhjTVn0LN6uQnNTuBvQsALDxAG8XsCYPSw30GWfuv0ph5KaRCD8FV0F QSKJXPRQ7yToe4yppTtdvHFBcAIF2fWVoOyXfXkIekstYVZzDKdpFiSbqQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFDkbQJEdsVCG2XnirrkQ53bmcMk1MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvT1J0QWtSMnhVSWJaZWVLdXVSRG5kdVp3eVRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAgjEAAwQA gjEUAwQAgjFjAwQAm9Q6AwQAm9RxAwQAqqg4AwQAqqhsAwQAqqiQAwQAqqidAwQA qqikAwQAqqj3MA0GCSqGSIb3DQEBCwUAA4IBAQCVU7awts/nAR3KUiClhCXPa4H2 2D0dgWMRUhf2Zu6nigC7EO/re/y2lGSQoE7VMlbovCEIUHomyKs09rlb9QzFrRD9 0EmO9hzsJr5a/H1dOwYdpO3tl1v4VKH09CUMK0c8EtPfvkdBO/owEk/gZxtf8D4o rNCbGF1A06kcqMS8n1beoLLlkBenG8uT1Pv6hu71QX8FOrN+gaAK/KveAAk29lkG CS14jv/vc2/d7EY31TEIFk48zi0DEcQub//11jOgd1Ui6ivSpGt40zTN/VRV3UO/ Uf+lSf+aHzmknbLl307wNHhZmnQqEG4lkQG96FCF7bPDyCMDejmbwLb2woiH -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:42 2026 by rpki-client