This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/CDvOXRqmZ03Osdas03zg-OKS-84.roa File: CDvOXRqmZ03Osdas03zg-OKS-84.roa (raw, json) Hash identifier: ArwNBlF/B50l4IK1YdSnW2SS2EMQ9GG3g4GljFQ0M5w= Subject key identifier: 08:3B:CE:5D:1A:A6:67:4D:CE:B1:D6:AC:D3:7C:E0:F8:E2:92:FB:CE Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Certificate serial: 019C044E0E3FDD07DF75AE6DAF2D0BB8F3AE Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/CDvOXRqmZ03Osdas03zg-OKS-84.roa Signing time: Wed 28 Jan 2026 11:12:30 +0000 ROA not before: Wed 28 Jan 2026 11:12:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213636 IP address blocks: 92.42.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:4e:0e:3f:dd:07:df:75:ae:6d:af:2d:0b:b8:f3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Validity Not Before: Jan 28 11:12:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=083bce5d1aa6674dceb1d6acd37ce0f8e292fbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:58:3d:0e:d4:28:b4:2d:15:83:68:65:51: ca:e6:f4:96:d1:c1:6e:3c:4e:5b:43:f1:84:83:ac: 82:fd:1b:b0:ed:e1:be:6a:7d:a8:92:e9:3d:3d:45: f8:8b:56:1c:2a:88:20:ce:43:9b:07:56:6b:97:1a: 46:71:5e:8c:53:c9:cb:26:95:ed:e0:12:1e:43:ed: 2b:7f:1e:72:17:83:df:ed:f2:31:5e:71:cd:0d:bf: 0f:dd:57:91:96:07:0a:54:9a:8d:85:fe:76:53:5f: 51:6f:d5:d8:55:1b:7d:86:b1:e7:a1:92:10:5d:cd: f6:e1:98:70:49:90:e2:ab:c1:53:d5:1c:c8:ef:ef: c9:11:e8:01:2b:51:2b:04:d1:2b:09:1a:4e:3d:15: 85:99:d4:9a:bd:f3:c7:5f:ac:99:60:ae:d0:02:a0: 88:7d:8a:90:36:96:f0:35:a5:3f:52:61:0d:9b:55: 62:32:75:e4:13:e1:b3:79:47:6f:c3:54:c7:3b:ca: 16:23:1d:0d:9a:4f:1f:e7:6d:8d:d7:7c:03:b2:ff: a4:2d:07:f3:44:4a:de:3f:ae:ae:75:30:f3:dd:26: 2e:af:fe:71:ce:69:3a:94:e6:35:bd:0a:80:99:a8: 73:3f:25:b4:a5:42:c2:ca:08:ef:a7:4f:23:ed:ec: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:CE:5D:1A:A6:67:4D:CE:B1:D6:AC:D3:7C:E0:F8:E2:92:FB:CE X509v3 Authority Key Identifier: keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/CDvOXRqmZ03Osdas03zg-OKS-84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.202.0/24 Signature Algorithm: sha256WithRSAEncryption 44:cb:2b:73:9b:82:37:d1:d8:23:e5:18:fc:a6:cf:01:bc:02: ed:8b:f6:2b:59:a3:b1:40:2a:c7:f8:49:71:46:99:1f:4b:d3: a4:8d:2b:e6:16:b6:14:96:84:26:11:b4:fe:cd:54:ee:4b:69: 48:0a:07:83:86:c0:bb:1b:83:83:76:ba:9f:2e:bc:31:28:6e: 7a:83:89:de:18:04:80:ec:a5:f8:88:fa:35:2b:8d:2e:e1:42: ee:bd:47:64:52:12:c2:68:05:eb:e4:0a:81:d6:0c:1e:58:7a: e9:1c:37:ff:b5:b6:fb:37:91:73:fa:95:85:db:11:ab:07:11: 35:51:2b:f0:d3:cb:28:1f:d6:bd:e4:22:89:a6:89:61:ae:96: 7a:92:7e:ea:52:a4:6d:ae:af:a6:f6:ef:c6:3f:bd:9b:ea:60: 81:f5:9e:92:13:44:ee:e2:8e:ce:8c:4b:19:91:3a:b0:19:36: 27:f9:d2:ac:e9:fe:87:6b:93:42:9b:c9:0a:85:eb:5f:04:7f: 09:36:be:09:66:83:16:81:a9:db:b3:96:5b:93:d3:f4:77:ee: e8:93:1a:f1:7b:44:28:e0:5e:07:88:b9:1d:19:dc:dc:47:78: 3f:b7:c2:81:37:43:a6:8f:bc:00:9c:d6:32:eb:fe:27:45:f8: 31:95:64:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwETg4/3Qffda5try0LuPOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTFlNDQ4N2NmOGQ0YTJkOTYxZGQ2MjJmM2U3NTAxYmRj MjQ4MjkwHhcNMjYwMTI4MTExMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNiY2U1ZDFhYTY2NzRkY2ViMWQ2YWNkMzdjZTBmOGUyOTJmYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjFYPQ7UKLQtFYNoZVHK5vSW0cFu PE5bQ/GEg6yC/Ruw7eG+an2okuk9PUX4i1YcKoggzkObB1ZrlxpGcV6MU8nLJpXt 4BIeQ+0rfx5yF4Pf7fIxXnHNDb8P3VeRlgcKVJqNhf52U19Rb9XYVRt9hrHnoZIQ Xc324ZhwSZDiq8FT1RzI7+/JEegBK1ErBNErCRpOPRWFmdSavfPHX6yZYK7QAqCI fYqQNpbwNaU/UmENm1ViMnXkE+GzeUdvw1THO8oWIx0Nmk8f522N13wDsv+kLQfz REreP66udTDz3SYur/5xzmk6lOY1vQqAmahzPyW0pULCygjvp08j7eyhtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAg7zl0apmdNzrHWrNN84PjikvvOMB8GA1UdIwQY MBaAFPyh5Eh8+NSi2WHdYi8+dQG9wkgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEt MWUyOTJjMGU5NWYxLzEvQ0R2T1hScW1aMDNPc2RhczAzemctT0tTLTg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEtMWUyOTJjMGU5NWYx LzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCrKMA0G CSqGSIb3DQEBCwUAA4IBAQBEyytzm4I30dgj5Rj8ps8BvALti/YrWaOxQCrH+Elx RpkfS9OkjSvmFrYUloQmEbT+zVTuS2lICgeDhsC7G4ODdrqfLrwxKG56g4neGASA 7KX4iPo1K40u4ULuvUdkUhLCaAXr5AqB1gweWHrpHDf/tbb7N5Fz+pWF2xGrBxE1 USvw08soH9a95CKJpolhrpZ6kn7qUqRtrq+m9u/GP72b6mCB9Z6SE0Tu4o7OjEsZ kTqwGTYn+dKs6f6Ha5NCm8kKhetfBH8JNr4JZoMWganbs5Zbk9P0d+7okxrxe0Qo 4F4HiLkdGdzcR3g/t8KBN0Omj7wAnNYy6/4nRfgxlWRx -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:15 2026 by rpki-client