This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/OK4mxrbW6ID5MlnU7kxXrpmFfQU.roa File: OK4mxrbW6ID5MlnU7kxXrpmFfQU.roa (raw, json) Hash identifier: WdG/d5kD8JyQMzMg7E69ifOQ+Be8byvxOXTYKR+4M1A= Subject key identifier: 38:AE:26:C6:B6:D6:E8:80:F9:32:59:D4:EE:4C:57:AE:99:85:7D:05 Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Certificate serial: 019B59317B0D546E42944C87F4A1DAAEBA84 Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/OK4mxrbW6ID5MlnU7kxXrpmFfQU.roa Signing time: Fri 26 Dec 2025 05:46:13 +0000 ROA not before: Fri 26 Dec 2025 05:46:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214570 IP address blocks: 45.137.16.0/24 maxlen: 24 45.137.17.0/24 maxlen: 24 45.137.19.0/24 maxlen: 24 185.101.39.0/24 maxlen: 24 185.254.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:31:7b:0d:54:6e:42:94:4c:87:f4:a1:da:ae:ba:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Validity Not Before: Dec 26 05:46:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38ae26c6b6d6e880f93259d4ee4c57ae99857d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:17:07:75:d6:28:11:66:23:67:70:c6:9b: da:bf:5f:f5:17:dd:f7:02:cb:48:70:e4:55:cd:59: f4:cd:48:c4:86:af:0a:cf:64:ab:79:4d:61:b1:f9: 98:1d:c5:05:7a:3c:b0:87:c7:2f:0e:8c:61:bb:0f: 17:12:2e:75:dd:c9:85:20:b5:5f:8c:c2:b7:9e:fb: 1a:e0:f6:b3:61:85:fb:99:14:16:e4:2a:27:d5:62: 43:fc:c1:8f:c9:47:61:8b:53:48:d4:43:3c:08:a3: 2c:4d:e4:6a:cd:d7:e6:dc:03:7b:7b:e3:81:ee:b7: 17:b5:69:ea:00:64:91:ff:61:4f:21:4a:b1:0c:5b: 92:b6:e7:ad:10:e2:76:a9:cc:1e:b4:07:47:59:b7: f5:20:fd:b7:f0:dd:9b:75:e9:cc:9b:7e:0a:d9:bb: 15:c8:03:08:5e:07:cf:f8:f8:4d:31:fe:b1:ff:0b: 41:c4:4d:01:d0:3d:f7:42:15:6c:41:b7:6a:4d:e6: e6:fb:2e:46:09:77:a1:e9:c5:cc:21:25:d5:66:c2: 20:35:2d:f5:55:ac:b9:b4:4a:9d:dc:99:7c:44:7a: 63:1d:55:38:ee:87:dd:fa:dd:16:9d:a5:0d:72:61: 2c:e7:41:e1:de:24:cd:8c:33:78:d9:67:e4:e4:db: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AE:26:C6:B6:D6:E8:80:F9:32:59:D4:EE:4C:57:AE:99:85:7D:05 X509v3 Authority Key Identifier: keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/OK4mxrbW6ID5MlnU7kxXrpmFfQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.16.0/23 45.137.19.0/24 185.101.39.0/24 185.254.165.0/24 Signature Algorithm: sha256WithRSAEncryption b3:4b:5d:44:21:69:e0:d4:31:b3:c8:13:0d:c3:bb:ae:60:6a: 76:a9:f0:f9:3f:4b:dd:a0:2f:bb:6a:70:68:96:79:ef:93:78: a7:4f:fc:ad:c7:78:d8:be:ce:39:96:0e:28:ce:79:f0:72:9e: 17:93:f9:80:2c:27:04:b1:8c:1d:7f:fd:dc:a2:de:59:a7:90: af:a6:af:32:c7:e9:8c:a4:1a:90:b5:74:a0:1f:a9:00:f3:c5: d5:6e:da:78:aa:db:44:82:87:b3:a7:04:63:71:04:db:b7:08: d7:13:b2:00:9b:76:07:40:53:15:e6:2e:69:fc:d2:52:3c:7b: 6d:13:ac:52:9a:dd:f4:c1:71:74:d0:de:ef:8e:d6:6a:b7:da: 38:dd:2d:c6:8c:38:02:03:7a:2e:9d:59:b3:df:23:fe:8d:d3: 7f:4f:70:7f:0c:6a:38:51:90:cb:e8:c0:31:e3:b5:46:37:31: 7b:58:81:7c:1e:57:37:43:da:7d:64:9d:17:38:df:db:2d:f9: fa:26:15:78:de:aa:ce:b2:e8:0c:5e:6c:e8:4b:8b:f9:46:51: 56:5f:c3:31:0f:29:25:58:29:08:cc:86:55:06:af:0c:a3:62: 74:f8:6b:31:3c:ac:3f:d8:5a:ee:16:ce:d4:0d:a0:e7:38:fc: 12:b3:b9:33 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtZMXsNVG5ClEyH9KHarrqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTNhNWU0MTFkZWFmMjI4NGZmZDAxNTMwYmZiNDFmODE2 Y2JiYTMwHhcNMjUxMjI2MDU0NjEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGFlMjZjNmI2ZDZlODgwZjkzMjU5ZDRlZTRjNTdhZTk5ODU3ZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw4XB3XWKBFmI2dwxpvav1/1F933 AstIcORVzVn0zUjEhq8Kz2SreU1hsfmYHcUFejywh8cvDoxhuw8XEi513cmFILVf jMK3nvsa4PazYYX7mRQW5Con1WJD/MGPyUdhi1NI1EM8CKMsTeRqzdfm3AN7e+OB 7rcXtWnqAGSR/2FPIUqxDFuStuetEOJ2qcwetAdHWbf1IP238N2bdenMm34K2bsV yAMIXgfP+PhNMf6x/wtBxE0B0D33QhVsQbdqTebm+y5GCXeh6cXMISXVZsIgNS31 Vay5tEqd3Jl8RHpjHVU47ofd+t0WnaUNcmEs50Hh3iTNjDN42Wfk5NuNawIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDiuJsa21uiA+TJZ1O5MV66ZhX0FMB8GA1UdIwQY MBaAFMmjpeQR3q8ihP/QFTC/tB+BbLujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYt MjBkMjQ5MDAxMzBhLzEvT0s0bXhyYlc2SUQ1TWxuVTdreFhycG1GZlFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYtMjBkMjQ5MDAxMzBh LzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYkQAwQA LYkTAwQAuWUnAwQAuf6lMA0GCSqGSIb3DQEBCwUAA4IBAQCzS11EIWng1DGzyBMN w7uuYGp2qfD5P0vdoC+7anBolnnvk3inT/ytx3jYvs45lg4oznnwcp4Xk/mALCcE sYwdf/3cot5Zp5Cvpq8yx+mMpBqQtXSgH6kA88XVbtp4qttEgoezpwRjcQTbtwjX E7IAm3YHQFMV5i5p/NJSPHttE6xSmt30wXF00N7vjtZqt9o43S3GjDgCA3ounVmz 3yP+jdN/T3B/DGo4UZDL6MAx47VGNzF7WIF8Hlc3Q9p9ZJ0XON/bLfn6JhV43qrO sugMXmzoS4v5RlFWX8MxDyklWCkIzIZVBq8Mo2J0+GsxPKw/2FruFs7UDaDnOPwS s7kz -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client