This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Or_Trx_pyk3P2RfQHAGvSoa3E_o.roa File: Or_Trx_pyk3P2RfQHAGvSoa3E_o.roa (raw, json) Hash identifier: D6cpvG3bXYxnFOjIpxhw7hO0pHmMSae7H7JteYOOGpA= Subject key identifier: 3A:BF:D3:AF:1F:E9:CA:4D:CF:D9:17:D0:1C:01:AF:4A:86:B7:13:FA Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Certificate serial: 019B7AC875D6C19F300F6DF26EBC15CF087A Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Or_Trx_pyk3P2RfQHAGvSoa3E_o.roa Signing time: Thu 01 Jan 2026 18:18:36 +0000 ROA not before: Thu 01 Jan 2026 18:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49100 IP address blocks: 109.125.128.0/19 maxlen: 19 109.125.128.0/22 maxlen: 22 109.125.132.0/22 maxlen: 22 185.82.28.0/22 maxlen: 22 185.82.28.0/24 maxlen: 24 185.129.184.0/21 maxlen: 21 185.129.196.0/22 maxlen: 22 185.129.197.0/24 maxlen: 24 185.129.200.0/22 maxlen: 22 185.129.212.0/22 maxlen: 22 185.129.216.0/22 maxlen: 22 185.129.228.0/22 maxlen: 22 185.129.230.0/23 maxlen: 23 185.129.237.0/24 maxlen: 24 185.129.240.0/22 maxlen: 22 2a03:54a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:75:d6:c1:9f:30:0f:6d:f2:6e:bc:15:cf:08:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Validity Not Before: Jan 1 18:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3abfd3af1fe9ca4dcfd917d01c01af4a86b713fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:70:7e:17:d5:54:e2:dc:63:66:48:e5:25: 6a:f1:91:45:45:09:4c:51:b0:95:d2:00:08:c1:0b: 25:7e:0e:f2:fa:86:65:c3:29:2e:aa:01:c5:72:aa: 18:77:5a:13:bc:f9:9b:3b:0a:ad:5a:72:19:ab:21: 50:30:f6:16:27:10:10:df:e6:4d:00:83:03:f7:01: ec:70:e8:c1:84:cb:14:11:5b:c5:49:23:73:ff:36: d0:66:67:5d:89:b3:6e:09:06:cb:64:51:25:e3:32: 7b:c1:bb:04:c6:6d:26:76:6e:e9:15:0f:ba:0b:0d: c6:25:4e:cd:95:67:5c:77:bf:41:0e:39:2b:01:da: c2:aa:d9:0c:51:3e:c8:c8:1d:88:0a:14:d6:71:47: 63:32:f1:6b:2c:5f:86:8a:95:1f:4e:97:7c:4f:77: 61:f1:ec:f4:9b:cc:0f:ac:67:7c:3c:83:65:54:e4: 25:89:4d:50:b0:63:f3:9f:d5:5b:ad:e0:df:eb:b1: 14:0c:e3:06:28:f0:72:06:f2:a6:4d:1e:06:2d:6c: ff:b3:ae:0b:5f:2a:71:73:94:fd:7b:52:3e:ce:16: af:fe:96:da:ef:db:eb:ec:70:26:ce:91:e2:13:91: 5c:c2:7b:15:1d:5d:bd:f0:bd:b1:cb:fe:bd:14:50: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:D3:AF:1F:E9:CA:4D:CF:D9:17:D0:1C:01:AF:4A:86:B7:13:FA X509v3 Authority Key Identifier: keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Or_Trx_pyk3P2RfQHAGvSoa3E_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.125.128.0/19 185.82.28.0/22 185.129.184.0/21 185.129.196.0-185.129.203.255 185.129.212.0-185.129.219.255 185.129.228.0/22 185.129.237.0/24 185.129.240.0/22 IPv6: 2a03:54a0::/32 Signature Algorithm: sha256WithRSAEncryption 33:ff:3c:83:b5:64:5e:ab:3a:8a:50:b1:2a:d3:28:0a:74:26: d9:8f:51:b5:5c:f9:15:6f:6d:e9:92:27:80:39:0e:fa:a2:80: 8c:52:c8:78:bf:11:49:a4:fa:e4:5f:28:75:67:a6:44:30:12: bc:49:bf:6c:23:ae:d0:ed:0b:18:a7:94:2a:87:a9:b0:54:7d: bf:4e:15:37:4d:e5:61:1d:92:55:b8:96:d0:a5:38:38:e5:7c: 27:76:1a:f6:e4:1f:1d:df:b7:84:5f:56:06:4c:ae:96:d8:e5: 43:52:03:5d:6d:f7:a3:55:e1:e1:65:88:66:39:14:4c:f7:d7: 72:30:12:cd:c3:ed:37:fa:7d:7b:63:9d:7a:63:53:f1:1d:b8: 5c:75:25:56:8c:da:4c:4b:54:90:6e:4b:37:f4:63:24:1f:c8: cb:6a:d7:4a:91:7d:9b:d2:18:4d:b5:b8:72:37:63:3f:f0:c4: 30:8b:9d:f6:e1:ee:ca:8a:5b:28:2a:ac:cd:2b:9b:29:2e:5a: 7b:67:38:58:ca:b5:31:fa:6c:59:b1:c2:b8:f0:e1:24:04:80: 88:c9:97:32:c2:c7:83:df:79:79:05:75:f6:d7:c3:96:4b:30: b0:97:7e:07:44:16:03:01:35:92:89:0f:82:10:86:1f:ce:d3: 7f:f7:c3:0d -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt6yHXWwZ8wD23ybrwVzwh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh MjM4YzAwHhcNMjYwMTAxMTgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWJmZDNhZjFmZTljYTRkY2ZkOTE3ZDAxYzAxYWY0YTg2YjcxM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre9wfhfVVOLcY2ZI5SVq8ZFFRQlM UbCV0gAIwQslfg7y+oZlwykuqgHFcqoYd1oTvPmbOwqtWnIZqyFQMPYWJxAQ3+ZN AIMD9wHscOjBhMsUEVvFSSNz/zbQZmddibNuCQbLZFEl4zJ7wbsExm0mdm7pFQ+6 Cw3GJU7NlWdcd79BDjkrAdrCqtkMUT7IyB2IChTWcUdjMvFrLF+GipUfTpd8T3dh 8ez0m8wPrGd8PINlVOQliU1QsGPzn9VbreDf67EUDOMGKPByBvKmTR4GLWz/s64L Xypxc5T9e1I+zhav/pba79vr7HAmzpHiE5FcwnsVHV298L2xy/69FFDTTwIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFDq/068f6cpNz9kX0BwBr0qGtxP6MB8GA1UdIwQY MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt OTdjOWFhYjgyOGYyLzEvT3JfVHJ4X3B5azNQMlJmUUhBR3ZTb2EzRV9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAAwQFbX2AAwQC uVIcAwQDuYG4MAwDBAK5gcQDBAK5gcgwDAMEArmB1AMEArmB2AMEArmB5AMEALmB 7QMEArmB8DANBAIAAjAHAwUAKgNUoDANBgkqhkiG9w0BAQsFAAOCAQEAM/88g7Vk Xqs6ilCxKtMoCnQm2Y9RtVz5FW9t6ZIngDkO+qKAjFLIeL8RSaT65F8odWemRDAS vEm/bCOu0O0LGKeUKoepsFR9v04VN03lYR2SVbiW0KU4OOV8J3Ya9uQfHd+3hF9W BkyultjlQ1IDXW33o1Xh4WWIZjkUTPfXcjASzcPtN/p9e2OdemNT8R24XHUlVoza TEtUkG5LN/RjJB/Iy2rXSpF9m9IYTbW4cjdjP/DEMIud9uHuyopbKCqszSubKS5a e2c4WMq1MfpsWbHCuPDhJASAiMmXMsLHg995eQV19tfDlkswsJd+B0QWAwE1kokP ghCGH87Tf/fDDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:49 2026 by rpki-client