This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OkGgUsRlyRRHRMzoISGJ-qHZw3I.roa File: OkGgUsRlyRRHRMzoISGJ-qHZw3I.roa (raw, json) Hash identifier: dWrNDogNFjkrfh5lM90qKUK04qzFjsTS4cxbKj6lK2o= Subject key identifier: 3A:41:A0:52:C4:65:C9:14:47:44:CC:E8:21:21:89:FA:A1:D9:C3:72 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3916B724E5C2EBEB82BE8515A14B34 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OkGgUsRlyRRHRMzoISGJ-qHZw3I.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 163.5.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:16:b7:24:e5:c2:eb:eb:82:be:85:15:a1:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a41a052c465c9144744cce8212189faa1d9c372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:50:3b:73:71:47:0e:eb:ab:32:77:8b:1e:a9: b3:18:e1:c9:b9:70:f5:e3:8e:4b:3a:e7:a9:6f:73: 33:fd:b0:64:0f:9a:87:cc:73:81:5c:0f:bf:2f:32: 82:70:7e:a8:dc:02:5a:0c:43:75:8f:89:b1:88:f3: 1e:7c:07:a0:c0:d7:6a:5e:7d:63:f2:6b:40:35:40: 9c:62:a6:f6:9c:10:1f:0e:e6:db:7e:90:4e:5c:43: 4f:16:8b:1d:56:56:6b:f9:de:46:50:84:5b:ed:62: f3:21:16:4e:db:9d:cb:55:57:7a:c1:93:0b:a6:ad: 5e:ea:d2:5b:b2:5a:ed:74:7e:3e:cd:cf:bb:a3:03: b3:75:10:ab:9c:c1:d8:9e:9d:57:6a:6d:21:92:83: 7a:75:63:d6:b9:0c:fd:aa:3a:54:08:ec:ff:3b:68: 81:75:dc:3a:14:7d:23:d5:51:96:20:42:1e:7d:59: 01:89:60:ed:4c:69:3b:bb:85:d4:af:f3:7c:a1:b8: f5:b5:00:77:d0:6e:81:53:1b:f4:14:dc:00:56:f5: 35:72:dc:ec:be:24:61:b3:72:30:fd:50:5f:5a:47: 06:7b:ad:9a:83:2c:6b:c2:97:3d:d8:3d:54:44:b1: c9:81:2c:2a:53:8c:22:ea:98:32:43:5f:b2:28:38: ba:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:41:A0:52:C4:65:C9:14:47:44:CC:E8:21:21:89:FA:A1:D9:C3:72 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OkGgUsRlyRRHRMzoISGJ-qHZw3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.216.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:bd:06:63:24:b2:a5:5f:2b:4a:7a:f8:79:c5:f6:32:c3:2a: 75:9a:41:2f:a7:7c:25:43:4b:7d:84:41:e5:03:00:33:fc:3f: 9a:ab:e6:d3:9e:a3:bb:8f:db:ef:17:47:0b:42:b1:21:c5:24: 98:1c:a5:83:b3:6f:0e:46:6e:22:d5:83:52:c7:15:cb:24:c7: 84:a5:44:b3:d7:2e:12:7a:47:0d:dd:d2:3b:6a:bf:a1:e3:e1: 50:fd:88:2f:8e:d7:ad:34:e5:67:f6:a6:10:74:36:75:54:f4: 5d:d1:4e:d0:f3:b1:12:6d:fe:66:58:71:df:f3:9d:d0:8a:da: 72:7f:2c:27:fa:b4:cd:0d:ee:e8:3f:9a:0b:9a:39:c0:d8:98: 8c:88:59:e9:37:c3:a4:a3:78:24:f6:f4:64:c5:1c:bc:e3:9a: 4d:cb:45:3a:b0:ad:21:3c:29:50:5c:99:b5:41:f5:f7:05:c0: c0:01:fe:df:73:24:23:ae:4f:91:01:bc:ea:1b:8f:01:27:52: d4:1a:45:01:09:93:82:16:4a:34:f6:7a:8d:5c:d3:cf:43:91: ff:ff:4d:ef:29:58:81:1b:b8:bb:5f:4c:6a:3f:16:0b:17:dd: 90:7d:2f:d2:8b:04:cc:cd:e8:6b:a6:77:cd:d9:0d:29:2d:f1: 7c:48:8c:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORa3JOXC6+uCvoUVoUs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTQxYTA1MmM0NjVjOTE0NDc0NGNjZTgyMTIxODlmYWExZDljMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VA7c3FHDuurMneLHqmzGOHJuXD1 445LOuepb3Mz/bBkD5qHzHOBXA+/LzKCcH6o3AJaDEN1j4mxiPMefAegwNdqXn1j 8mtANUCcYqb2nBAfDubbfpBOXENPFosdVlZr+d5GUIRb7WLzIRZO253LVVd6wZML pq1e6tJbslrtdH4+zc+7owOzdRCrnMHYnp1Xam0hkoN6dWPWuQz9qjpUCOz/O2iB ddw6FH0j1VGWIEIefVkBiWDtTGk7u4XUr/N8obj1tQB30G6BUxv0FNwAVvU1ctzs viRhs3Iw/VBfWkcGe62agyxrwpc92D1URLHJgSwqU4wi6pgyQ1+yKDi6jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDpBoFLEZckUR0TM6CEhifqh2cNyMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvT2tHZ1VzUmx5UlJIUk16b0lTR0otcUhadzNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXYMA0G CSqGSIb3DQEBCwUAA4IBAQCLvQZjJLKlXytKevh5xfYywyp1mkEvp3wlQ0t9hEHl AwAz/D+aq+bTnqO7j9vvF0cLQrEhxSSYHKWDs28ORm4i1YNSxxXLJMeEpUSz1y4S ekcN3dI7ar+h4+FQ/YgvjtetNOVn9qYQdDZ1VPRd0U7Q87ESbf5mWHHf853Qitpy fywn+rTNDe7oP5oLmjnA2JiMiFnpN8Oko3gk9vRkxRy845pNy0U6sK0hPClQXJm1 QfX3BcDAAf7fcyQjrk+RAbzqG48BJ1LUGkUBCZOCFko09nqNXNPPQ5H//03vKViB G7i7X0xqPxYLF92QfS/SiwTMzehrpnfN2Q0pLfF8SIzZ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:34 2026 by rpki-client