This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Okc4ih7FStA7eJpqZEB5nS7u-BM.roa File: Okc4ih7FStA7eJpqZEB5nS7u-BM.roa (raw, json) Hash identifier: JyV9HxcADkn1uubd9f1+87uP1ZLFsaH4leWpKO6mrVs= Subject key identifier: 3A:47:38:8A:1E:C5:4A:D0:3B:78:9A:6A:64:40:79:9D:2E:EE:F8:13 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33909D45EB98A4C3ED6CA73C2571A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Okc4ih7FStA7eJpqZEB5nS7u-BM.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209693 IP address blocks: 45.88.88.0/24 maxlen: 24 83.219.97.0/24 maxlen: 24 87.121.86.0/24 maxlen: 24 87.121.221.0/24 maxlen: 24 176.125.254.0/24 maxlen: 24 185.252.177.0/24 maxlen: 24 194.48.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:39:09:d4:5e:b9:8a:4c:3e:d6:ca:73:c2:57:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a47388a1ec54ad03b789a6a6440799d2eeef813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1a:47:54:d2:f0:30:d2:72:be:0b:0c:cc:57: ac:b8:76:b4:34:b1:9f:78:0f:65:fe:8a:44:96:f1: 3a:26:97:f8:8b:a9:fa:e5:cc:e6:a7:fc:62:23:56: 35:40:b1:05:24:e6:0e:d8:5d:72:de:a6:8f:79:d4: 9d:00:5c:57:83:ec:17:6c:5f:de:29:78:00:78:79: f9:3a:08:74:dc:08:b5:f5:68:ca:20:d3:4c:be:ca: 53:5f:e4:29:72:38:6d:ff:63:cb:59:2a:a1:a3:55: 48:30:8a:0b:1f:71:91:bd:da:55:36:d1:d8:bc:25: 36:97:54:da:ce:6a:73:0e:0a:d5:40:47:a1:01:55: 71:ec:43:d2:2e:e7:00:59:f0:2f:f2:53:a4:3f:40: 01:46:c3:e0:44:7c:b7:d1:e9:fe:b2:45:1c:2b:3d: 86:dc:a7:85:36:1d:70:41:95:cd:96:de:bd:e7:c8: 29:c7:9d:6c:32:21:26:65:43:42:1e:f1:41:b2:5b: d5:dc:ba:2a:59:ff:81:79:ff:aa:07:9a:4d:75:55: e1:8f:5f:c5:74:cb:23:67:09:72:07:9f:01:2c:c1: ea:f4:d1:eb:de:3e:33:cc:9b:6c:5d:65:9b:6c:86: f2:0e:fd:31:e3:f5:1e:05:2b:7b:97:8d:16:dc:9c: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:47:38:8A:1E:C5:4A:D0:3B:78:9A:6A:64:40:79:9D:2E:EE:F8:13 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Okc4ih7FStA7eJpqZEB5nS7u-BM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.88.0/24 83.219.97.0/24 87.121.86.0/24 87.121.221.0/24 176.125.254.0/24 185.252.177.0/24 194.48.250.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:dd:28:c8:0f:56:36:f5:45:f4:ec:73:fe:39:0c:c6:df:59: 46:89:86:7f:f6:b3:ce:b6:14:f1:c6:f0:ef:8b:96:30:5b:6b: cf:c5:a6:94:9d:ab:57:e1:21:35:7e:93:bb:3b:76:7e:b8:fd: 6f:5f:82:b6:dc:2a:11:26:16:2f:4e:db:1c:23:41:c9:37:54: d3:bf:e1:bf:63:b4:36:70:22:97:7c:b4:b3:bf:cb:c1:62:a3: 51:69:ac:ec:e5:71:71:cc:80:89:24:60:fb:ce:c9:95:7e:d5: b2:0f:ee:d5:4e:29:a3:35:c3:a8:77:4e:c9:01:e4:fd:7a:a4: 61:60:a4:8d:04:1b:3e:11:86:f3:3d:f8:8a:c6:47:87:59:0d: ab:26:84:48:05:84:e9:7e:8c:0b:d8:bb:fe:64:2f:9e:b3:07: 35:9e:96:9a:f6:00:f7:bb:33:fb:90:43:88:f7:8a:d6:b7:07: ad:23:fa:4f:a2:5a:68:97:8f:18:03:34:b6:1c:63:00:35:c5: 02:74:af:44:86:62:10:13:36:98:13:df:80:40:9b:a8:dc:9c: 12:db:a1:c2:a0:f7:b5:e9:aa:f4:cc:6f:9a:67:6a:35:2a:0f: 28:5b:40:fb:25:39:a7:ed:f7:a5:28:a0:8a:a2:48:a2:c1:13: fc:c1:0e:ab -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4ozkJ1F65ikw+1spzwlcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTQ3Mzg4YTFlYzU0YWQwM2I3ODlhNmE2NDQwNzk5ZDJlZWVmODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BpHVNLwMNJyvgsMzFesuHa0NLGf eA9l/opElvE6Jpf4i6n65czmp/xiI1Y1QLEFJOYO2F1y3qaPedSdAFxXg+wXbF/e KXgAeHn5Ogh03Ai19WjKINNMvspTX+Qpcjht/2PLWSqho1VIMIoLH3GRvdpVNtHY vCU2l1TazmpzDgrVQEehAVVx7EPSLucAWfAv8lOkP0ABRsPgRHy30en+skUcKz2G 3KeFNh1wQZXNlt6958gpx51sMiEmZUNCHvFBslvV3LoqWf+Bef+qB5pNdVXhj1/F dMsjZwlyB58BLMHq9NHr3j4zzJtsXWWbbIbyDv0x4/UeBSt7l40W3JzoWwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFDpHOIoexUrQO3iaamRAeZ0u7vgTMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvT2tjNGloN0ZTdEE3ZUpwcVpFQjVuUzd1LUJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALVhYAwQA U9thAwQAV3lWAwQAV3ndAwQAsH3+AwQAufyxAwQAwjD6MA0GCSqGSIb3DQEBCwUA A4IBAQAd3SjID1Y29UX07HP+OQzG31lGiYZ/9rPOthTxxvDvi5YwW2vPxaaUnatX 4SE1fpO7O3Z+uP1vX4K23CoRJhYvTtscI0HJN1TTv+G/Y7Q2cCKXfLSzv8vBYqNR aazs5XFxzICJJGD7zsmVftWyD+7VTimjNcOod07JAeT9eqRhYKSNBBs+EYbzPfiK xkeHWQ2rJoRIBYTpfowL2Lv+ZC+eswc1npaa9gD3uzP7kEOI94rWtwetI/pPolpo l48YAzS2HGMANcUCdK9EhmIQEzaYE9+AQJuo3JwS26HCoPe16ar0zG+aZ2o1Kg8o W0D7JTmn7felKKCKokiiwRP8wQ6r -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:51 2026 by rpki-client