This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/okRJ6Q4gK7t2XRanRtOTN5fhYCU.roa File: okRJ6Q4gK7t2XRanRtOTN5fhYCU.roa (raw, json) Hash identifier: DLxr6CGIcuVxZVonr1XOEIfUiCddhAdND4Lz/E80A58= Subject key identifier: A2:44:49:E9:0E:20:2B:BB:76:5D:16:A7:46:D3:93:37:97:E1:60:25 Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da Certificate serial: 019B7BA4E20A292BD613442C6193E52B8439 Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/okRJ6Q4gK7t2XRanRtOTN5fhYCU.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48016 IP address blocks: 91.208.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e2:0a:29:2b:d6:13:44:2c:61:93:e5:2b:84:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a24449e90e202bbb765d16a746d3933797e16025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:f5:bb:cc:46:77:ec:dc:11:fe:4c:cd:fc: 25:b9:25:9a:8c:df:ed:92:67:e7:8c:b6:aa:4c:2e: 24:88:89:0a:cf:18:29:0f:bb:f4:8f:47:96:fc:60: 64:71:e8:f6:a5:e5:43:45:8b:e0:6f:ec:89:5e:7f: 77:15:95:6f:be:51:b2:74:61:9a:42:15:94:f9:c7: 32:fb:35:82:e0:43:79:b0:e3:79:d4:44:50:1e:26: de:e8:3b:ef:5c:34:c5:02:e0:93:b5:49:8d:14:be: 94:4c:1a:f2:3f:2f:9b:da:38:16:2d:4b:57:b2:8a: 37:a9:45:d6:c9:4e:ef:d8:92:1c:84:ad:15:98:12: a6:79:16:fd:1e:55:7b:78:88:9c:d1:39:53:ce:d5: 61:4d:ad:29:cb:f3:e9:31:8c:74:2a:dd:46:67:0d: 1f:39:5f:6f:c7:3a:55:44:cc:92:91:14:6c:59:44: b2:0b:cd:80:4a:fd:44:86:66:59:a7:4c:c7:10:11: 79:c1:3e:66:41:5c:2e:88:92:81:cc:4b:91:62:b9: 74:81:db:b8:40:db:1b:4b:d6:ef:d3:9f:e2:ea:6b: c2:3c:fe:13:5a:85:27:81:0c:74:5b:ba:48:c4:68: 7d:72:88:86:08:47:11:47:34:f4:30:2b:d1:a5:ed: 8b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:44:49:E9:0E:20:2B:BB:76:5D:16:A7:46:D3:93:37:97:E1:60:25 X509v3 Authority Key Identifier: keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/okRJ6Q4gK7t2XRanRtOTN5fhYCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.225.0/24 Signature Algorithm: sha256WithRSAEncryption 98:62:60:07:c4:b7:f4:48:77:3e:b5:b3:97:bd:95:86:c3:c7: c0:4f:d6:7b:09:63:b7:b8:5c:3e:84:48:5c:f9:53:c1:84:05: 14:ea:4a:9e:a8:3f:eb:1e:e9:d9:f8:ee:4e:44:69:01:5f:d7: 14:48:73:10:27:2a:96:0e:c4:97:43:21:7b:42:61:7a:6e:00: e7:09:eb:db:e1:99:57:f9:59:58:4c:26:1a:5c:1e:cc:ca:5d: 3e:de:e1:2f:3d:f3:89:bd:c8:74:9f:6e:2d:65:41:84:8a:6e: ad:40:24:0e:b4:3b:cd:45:96:74:fd:32:41:c8:f0:fc:42:28: 2e:8f:fa:a0:f2:f2:2e:7f:2d:98:d9:8c:a3:b3:1a:3c:86:20: 3a:37:1b:fa:46:f9:08:aa:b3:c7:52:6c:1b:d2:23:13:f4:24: cd:14:ee:ea:ee:06:d8:dd:55:ee:36:80:11:e2:60:00:ab:01: 00:64:66:b0:f3:3d:6c:38:a5:76:e4:be:f9:12:ab:d7:80:5b: 59:a8:27:c5:7a:00:b5:96:9d:be:57:89:eb:83:8f:39:20:1e: f8:fa:f1:7f:6e:b8:ea:aa:5a:31:0f:f1:fa:d1:bf:6c:5e:0a: 40:b2:99:9a:66:ca:dd:2a:2a:b7:8a:7d:33:3b:52:d7:c9:22: f0:bd:da:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOIKKSvWE0QsYZPlK4Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMzU1NDZlYTViMDc5MDU0OWNhMGJhMWJiMmEzZTFkYmFl NGEzZGEwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjQ0NDllOTBlMjAyYmJiNzY1ZDE2YTc0NmQzOTMzNzk3ZTE2MDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPj1u8xGd+zcEf5MzfwluSWajN/t kmfnjLaqTC4kiIkKzxgpD7v0j0eW/GBkcej2peVDRYvgb+yJXn93FZVvvlGydGGa QhWU+ccy+zWC4EN5sON51ERQHibe6DvvXDTFAuCTtUmNFL6UTBryPy+b2jgWLUtX soo3qUXWyU7v2JIchK0VmBKmeRb9HlV7eIic0TlTztVhTa0py/PpMYx0Kt1GZw0f OV9vxzpVRMySkRRsWUSyC82ASv1EhmZZp0zHEBF5wT5mQVwuiJKBzEuRYrl0gdu4 QNsbS9bv05/i6mvCPP4TWoUngQx0W7pIxGh9coiGCEcRRzT0MCvRpe2L+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJESekOICu7dl0Wp0bTkzeX4WAlMB8GA1UdIwQY MBaAFDA1VG6lsHkFScoLobsqPh265KPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMt MDA0ZjBjYjNlZDc3LzEvb2tSSjZRNGdLN3QyWFJhblJ0T1RONWZoWUNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMtMDA0ZjBjYjNlZDc3 LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DhMA0G CSqGSIb3DQEBCwUAA4IBAQCYYmAHxLf0SHc+tbOXvZWGw8fAT9Z7CWO3uFw+hEhc +VPBhAUU6kqeqD/rHunZ+O5ORGkBX9cUSHMQJyqWDsSXQyF7QmF6bgDnCevb4ZlX +VlYTCYaXB7Myl0+3uEvPfOJvch0n24tZUGEim6tQCQOtDvNRZZ0/TJByPD8Qigu j/qg8vIufy2Y2Yyjsxo8hiA6Nxv6RvkIqrPHUmwb0iMT9CTNFO7q7gbY3VXuNoAR 4mAAqwEAZGaw8z1sOKV25L75EqvXgFtZqCfFegC1lp2+V4nrg485IB74+vF/brjq qloxD/H60b9sXgpAspmaZsrdKiq3in0zO1LXySLwvdqn -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:35 2026 by rpki-client