This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/okhAMfz0WaGGOHXHCGovIHlTyKw.roa File: okhAMfz0WaGGOHXHCGovIHlTyKw.roa (raw, json) Hash identifier: 7Vnu9sTM6wsooj/f9YqOP0/u4l20pcaLe53Lq6zoivQ= Subject key identifier: A2:48:40:31:FC:F4:59:A1:86:38:75:C7:08:6A:2F:20:79:53:C8:AC Certificate issuer: /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274 Certificate serial: 019B7B353A7D67050FEF7A8F34AF8E2A6CBE Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/okhAMfz0WaGGOHXHCGovIHlTyKw.roa Signing time: Thu 01 Jan 2026 20:17:24 +0000 ROA not before: Thu 01 Jan 2026 20:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206173 IP address blocks: 89.31.214.0/23 maxlen: 24 185.145.246.0/24 maxlen: 24 2a10:1e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3a:7d:67:05:0f:ef:7a:8f:34:af:8e:2a:6c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274 Validity Not Before: Jan 1 20:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2484031fcf459a1863875c7086a2f207953c8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:88:ef:8b:bc:64:39:48:80:ca:e5:09:76: b1:a6:c2:7a:8a:71:c9:86:4e:43:03:54:c4:9a:f3: d1:64:88:14:fa:51:88:d6:dc:b4:88:32:4f:56:7a: f3:11:a1:48:88:49:5c:a9:8f:7d:11:18:90:40:bd: cc:55:75:9f:e3:1b:19:54:59:f9:0d:11:27:6b:eb: 81:8d:b2:32:0c:6b:bb:46:38:14:e0:1e:68:3a:02: fa:4d:46:39:60:b0:55:d7:52:e7:87:7b:43:60:93: 73:83:0b:d6:61:12:ac:24:b2:c2:1a:93:a4:76:9e: f3:29:1a:39:14:e4:d6:32:3b:d7:d7:04:65:65:a7: cb:68:0b:e2:48:15:25:ee:b1:83:d8:d0:fc:90:48: 0d:f8:be:98:d0:90:46:d2:49:b8:83:78:71:e0:f8: 9d:73:dd:75:ce:07:ee:d6:18:ab:3d:44:1f:d9:52: 88:28:c0:2e:9a:6d:48:5f:81:2f:83:b9:1e:97:dd: c3:cd:fd:83:e6:4f:5c:f5:9d:ab:e1:71:db:aa:e7: 9a:0f:b6:47:61:14:09:05:7e:95:59:45:3f:ec:20: a8:41:45:2e:ad:33:d5:1e:c9:c4:3d:0e:c1:e0:19: f9:4b:98:0d:10:a4:79:e3:55:67:29:93:0e:1f:47: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:48:40:31:FC:F4:59:A1:86:38:75:C7:08:6A:2F:20:79:53:C8:AC X509v3 Authority Key Identifier: keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/okhAMfz0WaGGOHXHCGovIHlTyKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.214.0/23 185.145.246.0/24 IPv6: 2a10:1e40::/29 Signature Algorithm: sha256WithRSAEncryption 4d:2f:5f:97:42:90:7f:c9:57:c3:f2:4f:49:21:18:18:21:24: 3c:01:ed:66:fa:0b:18:aa:57:30:1a:be:c2:b1:e2:2b:b4:d4: 4e:f7:bd:51:4d:02:b5:f5:c0:1e:10:57:c0:48:cb:ed:3c:4e: 30:2a:93:7c:9d:69:6d:27:3b:55:2e:cb:fc:79:83:a1:d3:be: ba:96:6b:9b:2c:52:57:f0:0a:f4:a5:1e:fc:82:0f:23:61:2a: a1:74:ce:03:64:6e:a5:a2:16:4c:ec:dd:b5:5b:d2:f2:61:37: 9d:0f:4c:e5:20:e1:78:2f:a1:3c:13:dd:dc:f9:80:d6:ea:69: 8c:f1:05:90:44:ca:95:59:45:06:d9:83:1b:ee:93:08:d1:19: cf:c8:40:48:84:80:98:a1:f8:c9:ad:0c:c4:48:1d:1d:6c:b9: 55:bd:5c:d6:60:6f:fb:2c:86:2b:af:1a:d5:d5:ff:e6:54:3f: e7:72:d0:ee:96:d1:3a:6f:48:71:9d:f3:29:f9:34:cf:ba:24: b7:e5:1c:46:42:aa:fd:f9:2c:48:48:4f:c7:b8:f7:2c:45:72: ac:ef:74:bb:ed:ce:b8:ae:b9:ef:a2:73:8a:64:d5:47:6d:06: 6e:4b:10:87:f7:b4:27:d5:58:64:26:2f:55:9e:ca:6d:e0:c7: 84:ee:5c:ce -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NTp9ZwUP73qPNK+OKmy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTdmZGE2YTY5MjIzNmMyMjNmNzRkNjNlYTdiYjlmZWYy ZjEyNzQwHhcNMjYwMTAxMjAxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjQ4NDAzMWZjZjQ1OWExODYzODc1YzcwODZhMmYyMDc5NTNjOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9KI74u8ZDlIgMrlCXaxpsJ6inHJ hk5DA1TEmvPRZIgU+lGI1ty0iDJPVnrzEaFIiElcqY99ERiQQL3MVXWf4xsZVFn5 DREna+uBjbIyDGu7RjgU4B5oOgL6TUY5YLBV11Lnh3tDYJNzgwvWYRKsJLLCGpOk dp7zKRo5FOTWMjvX1wRlZafLaAviSBUl7rGD2ND8kEgN+L6Y0JBG0km4g3hx4Pid c911zgfu1hirPUQf2VKIKMAumm1IX4Evg7kel93Dzf2D5k9c9Z2r4XHbqueaD7ZH YRQJBX6VWUU/7CCoQUUurTPVHsnEPQ7B4Bn5S5gNEKR541VnKZMOH0dF3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKJIQDH89Fmhhjh1xwhqLyB5U8isMB8GA1UdIwQY MBaAFHun/aamkiNsIj901j6nu5/vLxJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZmOXBxYVNJMndpUDNUV1BxZTduLTh2RW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hZTljZWYtZTkzNy00ZjgwLTk5Nzgt ZGI0YWQyNWQ5OWE4LzEvb2toQU1mejBXYUdHT0hYSENHb3ZJSGxUeUt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9hZTljZWYtZTkzNy00ZjgwLTk5NzgtZGI0YWQyNWQ5OWE4 LzEvZTZmOXBxYVNJMndpUDNUV1BxZTduLTh2RW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBWR/WAwQA uZH2MA0EAgACMAcDBQMqEB5AMA0GCSqGSIb3DQEBCwUAA4IBAQBNL1+XQpB/yVfD 8k9JIRgYISQ8Ae1m+gsYqlcwGr7CseIrtNRO971RTQK19cAeEFfASMvtPE4wKpN8 nWltJztVLsv8eYOh0766lmubLFJX8Ar0pR78gg8jYSqhdM4DZG6lohZM7N21W9Ly YTedD0zlIOF4L6E8E93c+YDW6mmM8QWQRMqVWUUG2YMb7pMI0RnPyEBIhICYofjJ rQzESB0dbLlVvVzWYG/7LIYrrxrV1f/mVD/nctDultE6b0hxnfMp+TTPuiS35RxG Qqr9+SxISE/HuPcsRXKs73S77c64rrnvonOKZNVHbQZuSxCH97Qn1VhkJi9Vnspt 4MeE7lzO -----END CERTIFICATE-----Generated at Tue Feb 3 03:30:47 2026 by rpki-client