This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/OrwE5xqVrMg0jje9KVbhzaSvfy4.roa File: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (raw, json) Hash identifier: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4= Subject key identifier: 3A:BC:04:E7:1A:95:AC:C8:34:8E:37:BD:29:56:E1:CD:A4:AF:7F:2E Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6 Certificate serial: 019B7A5B5F7459886BF8412235570F1A56BE Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/OrwE5xqVrMg0jje9KVbhzaSvfy4.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1725 IP address blocks: 134.206.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5f:74:59:88:6b:f8:41:22:35:57:0f:1a:56:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3abc04e71a95acc8348e37bd2956e1cda4af7f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:66:14:09:15:26:19:60:d7:25:29:cf:b9: 20:dc:06:44:2f:74:c6:ee:4f:79:ee:e3:c7:c2:da: 09:44:4c:99:cf:76:04:eb:78:d0:a8:6e:50:15:c5: a5:77:a0:12:52:ab:44:10:e4:7b:d7:bc:8d:da:c5: 0d:e0:f8:0f:42:ec:b8:79:e5:6b:ac:6d:88:45:64: c2:fe:f3:df:94:09:cc:4e:9a:d9:73:18:3f:8f:8a: b7:c5:a4:f7:b5:40:5a:7d:25:c0:dc:be:dd:c0:22: e7:c1:cd:d8:fb:c8:a0:ff:22:2f:3e:cb:6a:c9:ee: e0:a4:41:c4:21:d0:01:83:ae:0e:36:77:5e:d7:ac: f4:63:3a:64:98:26:19:92:1b:44:69:8e:bc:0b:69: e4:0b:41:9f:b2:4c:bd:47:42:4b:eb:c2:c4:ff:cf: 80:fd:e5:d9:e6:13:51:33:48:53:69:70:0d:90:40: 74:32:9e:33:6b:9c:68:70:4c:f6:da:bc:24:46:80: 7f:93:34:e1:dd:52:b5:d8:76:21:99:ea:0f:c6:bc: 33:d1:32:a2:bb:9b:61:f7:41:43:11:ba:83:e6:04: ed:8e:99:b0:c7:eb:a6:84:cd:a5:e8:e2:5e:47:e8: 08:a1:a1:2a:ce:06:8c:97:47:87:46:4c:75:87:84: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BC:04:E7:1A:95:AC:C8:34:8E:37:BD:29:56:E1:CD:A4:AF:7F:2E X509v3 Authority Key Identifier: keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/OrwE5xqVrMg0jje9KVbhzaSvfy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.206.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:ff:a3:62:aa:13:d4:6f:37:05:47:5e:73:a0:28:c9:17:9b: a0:76:53:16:a7:a6:f9:ca:45:3a:85:96:3d:cb:75:e1:b2:4c: ac:8d:93:69:89:54:3b:11:68:93:81:c4:12:1b:c5:47:e1:b0: e7:f3:28:0f:46:93:02:56:f0:09:c9:b9:e3:54:47:fd:a0:ab: d3:0e:23:a4:46:ef:cb:b8:b2:89:b5:b0:28:c0:b6:28:ab:dd: 01:e6:09:c2:3d:36:d8:79:cf:56:f0:1b:d3:d5:2e:2c:45:4f: af:c0:21:a1:ae:00:23:7f:14:8a:d0:c5:22:3b:f5:f6:2d:89: e4:6a:ff:54:fb:21:85:63:dd:32:66:cd:f0:d2:72:eb:3d:07: e0:c9:88:9e:15:7b:ff:c8:05:c1:70:84:94:ea:56:9b:92:2c: 27:a6:77:12:2d:40:9c:24:b9:0c:c9:aa:3b:94:a0:b7:e2:08: a4:02:15:b7:dd:d2:01:ea:b1:68:f8:1f:49:8f:8b:f5:43:65: 08:71:14:83:29:64:c2:37:e8:b2:c8:14:21:26:51:74:86:c3: 54:4c:bd:d1:63:b7:9c:39:56:2f:e3:af:e4:14:39:73:c3:76: af:bd:e4:88:14:f1:f7:ce:1f:c2:f0:56:13:55:50:98:ee:6c: 7e:40:74:b9 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6W190WYhr+EEiNVcPGla+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2Y5ZTdmZmU4ODU4Mzg3ZWQxYjNhN2VjYTc2MjA1ZWYw ZTIxZjYwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWJjMDRlNzFhOTVhY2M4MzQ4ZTM3YmQyOTU2ZTFjZGE0YWY3ZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwFmFAkVJhlg1yUpz7kg3AZEL3TG 7k957uPHwtoJREyZz3YE63jQqG5QFcWld6ASUqtEEOR717yN2sUN4PgPQuy4eeVr rG2IRWTC/vPflAnMTprZcxg/j4q3xaT3tUBafSXA3L7dwCLnwc3Y+8ig/yIvPstq ye7gpEHEIdABg64ONnde16z0YzpkmCYZkhtEaY68C2nkC0Gfsky9R0JL68LE/8+A /eXZ5hNRM0hTaXANkEB0Mp4za5xocEz22rwkRoB/kzTh3VK12HYhmeoPxrwz0TKi u5th90FDEbqD5gTtjpmwx+umhM2l6OJeR+gIoaEqzgaMl0eHRkx1h4RhMwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDq8BOcalazINI43vSlW4c2kr38uMB8GA1UdIwQY MBaAFI8/nn/+iFg4ftGzp+ynYgXvDiH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMt ZTdhY2Y5NDFmMzc1LzEvT3J3RTV4cVZyTWcwamplOUtWYmh6YVN2Znk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMtZTdhY2Y5NDFmMzc1 LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhs4wDQYJ KoZIhvcNAQELBQADggEBADX/o2KqE9RvNwVHXnOgKMkXm6B2UxanpvnKRTqFlj3L deGyTKyNk2mJVDsRaJOBxBIbxUfhsOfzKA9GkwJW8AnJueNUR/2gq9MOI6RG78u4 som1sCjAtiir3QHmCcI9Nth5z1bwG9PVLixFT6/AIaGuACN/FIrQxSI79fYtieRq /1T7IYVj3TJmzfDScus9B+DJiJ4Ve//IBcFwhJTqVpuSLCemdxItQJwkuQzJqjuU oLfiCKQCFbfd0gHqsWj4H0mPi/VDZQhxFIMpZMI36LLIFCEmUXSGw1RMvdFjt5w5 Vi/jr+QUOXPDdq+95IgU8ffOH8LwVhNVUJjubH5AdLk= -----END CERTIFICATE-----Generated at Sat Jan 10 08:43:43 2026 by rpki-client