This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/or3MtyCWwwRniPQO0t7adUDYHwM.roa File: or3MtyCWwwRniPQO0t7adUDYHwM.roa (raw, json) Hash identifier: KAXtPOwDsCLtFdabZOYLs9SwVKgF5nRupM4RcQhCH2s= Subject key identifier: A2:BD:CC:B7:20:96:C3:04:67:88:F4:0E:D2:DE:DA:75:40:D8:1F:03 Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019B362A229C83AD194E36AF89F47464EE80 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/or3MtyCWwwRniPQO0t7adUDYHwM.roa Signing time: Fri 19 Dec 2025 10:31:29 +0000 ROA not before: Fri 19 Dec 2025 10:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205941 IP address blocks: 2a10:fa82::/48 maxlen: 48 2a10:fa82:1::/48 maxlen: 48 2a10:fa82:2::/48 maxlen: 48 2a10:fa82:fa00::/40 maxlen: 40 2a10:fa82:fb00::/40 maxlen: 40 2a10:fa82:fc00::/40 maxlen: 40 2a10:fa82:fd00::/40 maxlen: 40 2a10:fa82:fe00::/40 maxlen: 40 2a10:fa82:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:2a:22:9c:83:ad:19:4e:36:af:89:f4:74:64:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Dec 19 10:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2bdccb72096c3046788f40ed2deda7540d81f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:06:5a:e8:85:60:68:c4:68:44:d2:2a:59: ef:12:a2:d9:9b:48:36:36:f4:92:ed:cb:99:e3:34: 3b:5b:5d:26:0c:32:ca:69:03:b5:ca:95:1d:25:11: 84:fc:58:64:58:e3:65:17:ae:87:2e:38:2a:62:05: a4:b7:26:99:81:01:90:aa:59:8b:19:cb:f1:56:c6: d2:53:38:7b:5b:8d:d4:1c:31:b4:c9:32:f2:72:87: a6:ec:89:d1:ce:5d:e9:8e:de:0b:29:a4:d7:ea:74: a2:46:a4:a8:8e:7a:4b:6d:c7:83:33:09:37:25:52: c4:af:14:50:80:53:93:3a:51:ca:ab:d5:c7:91:85: 53:78:eb:7c:29:db:a1:ca:0f:20:4f:55:16:38:7f: 00:18:93:84:ca:01:06:bf:4f:ed:15:27:c3:dc:4d: d8:35:0c:fa:f8:1c:59:6f:1f:54:03:29:89:f0:de: 6b:cf:d3:5a:87:8c:24:12:e7:b8:ba:b8:96:41:48: 81:67:12:9a:f7:16:e2:27:e7:d1:dd:21:ba:9a:05: b0:7a:88:dc:39:d5:65:fd:45:e1:c0:28:58:9e:81: 56:1b:8d:31:5c:a6:a4:85:72:f9:a2:c1:e2:87:71: 4f:b8:97:42:6c:ba:96:d9:2f:01:7b:02:8d:9d:8d: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BD:CC:B7:20:96:C3:04:67:88:F4:0E:D2:DE:DA:75:40:D8:1F:03 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/or3MtyCWwwRniPQO0t7adUDYHwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82::-2a10:fa82:2:ffff:ffff:ffff:ffff:ffff 2a10:fa82:fa00::-2a10:fa82:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 26:c9:e3:88:79:e8:04:23:22:5d:8e:2a:68:52:44:e0:3f:d1: de:bf:fd:5a:19:ae:15:ef:45:da:3c:a2:80:e3:15:43:c9:58: 12:39:5d:7b:0b:4d:35:60:5c:9c:f9:d1:9d:e2:bc:bb:4e:64: ba:16:9e:3e:fc:85:48:dd:23:51:54:23:dc:6c:cc:30:37:4c: 84:8c:c7:90:2c:4d:bd:22:81:1a:95:b1:86:a7:2e:3e:ce:93: 29:b7:84:08:a2:b2:0e:e6:43:e5:bd:d7:47:b6:03:58:e1:a6: 90:17:c7:8d:cb:be:bc:45:a0:ea:22:39:c2:c4:a1:6f:6d:67: f5:94:fd:24:17:e3:92:a1:d6:27:d0:ff:bb:6d:e2:e5:12:8e: 1e:b8:3f:ce:af:f0:f4:bc:45:62:0d:0f:8d:4b:21:58:69:a0: bb:f6:c5:c0:f3:63:95:ee:50:15:8b:2e:2e:89:a4:3c:33:48: 9a:91:42:9c:b1:7e:11:47:f4:06:81:70:23:cb:93:83:46:a1: df:b5:6e:9f:0f:16:c7:e2:a4:2e:27:b2:82:8c:ad:5f:e5:c7: fc:9e:d6:7d:2a:10:ed:e3:73:2d:7c:8b:59:60:14:e7:c7:71: 87:6b:a4:d8:a0:ed:20:c6:9e:d2:c2:3a:c6:16:2a:43:ff:5a: 9c:2c:5d:51 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZs2KiKcg60ZTjavifR0ZO6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjUxMjE5MTAzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmJkY2NiNzIwOTZjMzA0Njc4OGY0MGVkMmRlZGE3NTQwZDgxZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSwGWuiFYGjEaETSKlnvEqLZm0g2 NvSS7cuZ4zQ7W10mDDLKaQO1ypUdJRGE/FhkWONlF66HLjgqYgWktyaZgQGQqlmL GcvxVsbSUzh7W43UHDG0yTLycoem7InRzl3pjt4LKaTX6nSiRqSojnpLbceDMwk3 JVLErxRQgFOTOlHKq9XHkYVTeOt8Kduhyg8gT1UWOH8AGJOEygEGv0/tFSfD3E3Y NQz6+BxZbx9UAymJ8N5rz9Nah4wkEue4uriWQUiBZxKa9xbiJ+fR3SG6mgWweojc OdVl/UXhwChYnoFWG40xXKakhXL5osHih3FPuJdCbLqW2S8BewKNnY2f0wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKK9zLcglsMEZ4j0DtLe2nVA2B8DMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvb3IzTXR5Q1d3d1JuaVBRTzB0N2FkVURZSHdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjMBADBQEqEPqC AwcAKhD6ggACMA8DBgEqEPqC+gMFACoQ+oIwDQYJKoZIhvcNAQELBQADggEBACbJ 44h56AQjIl2OKmhSROA/0d6//VoZrhXvRdo8ooDjFUPJWBI5XXsLTTVgXJz50Z3i vLtOZLoWnj78hUjdI1FUI9xszDA3TISMx5AsTb0igRqVsYanLj7Okym3hAiisg7m Q+W910e2A1jhppAXx43LvrxFoOoiOcLEoW9tZ/WU/SQX45Kh1ifQ/7tt4uUSjh64 P86v8PS8RWIND41LIVhpoLv2xcDzY5XuUBWLLi6JpDwzSJqRQpyxfhFH9AaBcCPL k4NGod+1bp8PFsfipC4nsoKMrV/lx/ye1n0qEO3jcy18i1lgFOfHcYdrpNig7SDG ntLCOsYWKkP/WpwsXVE= -----END CERTIFICATE-----Generated at Sat Dec 20 20:04:59 2025 by rpki-client