This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OkiYxXPXyeURpfLkHCPURYUa7QY.roa File: OkiYxXPXyeURpfLkHCPURYUa7QY.roa (raw, json) Hash identifier: KjTtFy2NP6/BjEVNut3RyFa8QAfeI9aJI/4wehwpexM= Subject key identifier: 3A:48:98:C5:73:D7:C9:E5:11:A5:F2:E4:1C:23:D4:45:85:1A:ED:06 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A17AF7CF5EE0597BE7B1FB60B8FC Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OkiYxXPXyeURpfLkHCPURYUa7QY.roa Signing time: Fri 02 Jan 2026 00:20:19 +0000 ROA not before: Fri 02 Jan 2026 00:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216101 IP address blocks: 185.220.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a1:7a:f7:cf:5e:e0:59:7b:e7:b1:fb:60:b8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a4898c573d7c9e511a5f2e41c23d445851aed06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:ad:f1:7e:18:16:60:68:fd:d1:42:ae:d6: 11:cb:e3:28:24:d2:d4:bf:63:b7:a7:88:95:bb:2d: ae:25:c8:17:e4:07:52:6d:92:f8:22:3c:38:9f:d0: e0:f8:2c:6d:ca:e0:38:06:68:64:f6:e6:d1:de:a3: 45:b1:eb:a0:80:eb:62:eb:6a:27:0a:25:20:ea:15: fe:7f:c8:4a:40:75:ee:02:73:ce:81:c2:60:bc:3c: f1:2b:d0:ee:6c:9c:65:ec:23:d8:66:f6:bd:f8:2d: 4c:2a:28:06:df:f8:36:e7:36:ca:ff:ed:c1:7e:57: b1:16:b2:04:bc:37:6a:ab:a0:3a:2d:a6:b0:b0:e3: 4e:d0:5a:09:b2:26:06:e7:9b:06:9a:d0:77:43:f3: 26:65:0d:ac:d2:13:1a:ac:52:58:bd:d5:40:8f:88: 13:d4:0d:32:d5:8c:f8:c5:42:24:f7:63:a2:df:3a: 84:68:05:8e:bc:82:51:35:fe:a3:1a:a3:99:4d:6c: bb:f9:32:5e:91:21:87:83:88:61:bf:c5:f5:72:d9: d7:40:a4:b5:4a:a5:fb:b7:8e:46:18:88:17:49:9d: 7e:2e:33:8a:d9:2f:da:d8:47:94:79:66:d9:da:0f: 22:0b:be:4c:9e:c1:20:4c:e8:34:9b:77:88:ba:5e: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:98:C5:73:D7:C9:E5:11:A5:F2:E4:1C:23:D4:45:85:1A:ED:06 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OkiYxXPXyeURpfLkHCPURYUa7QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.251.0/24 Signature Algorithm: sha256WithRSAEncryption 07:da:5a:a1:20:bb:17:2f:ec:e9:9b:08:60:e5:45:3b:11:86: dc:73:98:ec:db:38:0e:6b:a6:c5:47:15:86:b8:e1:5f:fc:55: 75:ec:5b:76:d7:31:d8:05:60:23:bb:9b:df:06:20:7c:6d:6f: bd:9f:ca:8d:9e:8f:3b:23:b2:4c:26:f5:9e:20:57:a4:b2:99: ee:2a:2a:a8:10:f7:d6:65:ed:59:97:65:b3:b2:2e:ea:7e:20: bc:98:42:c0:a8:e8:4c:fb:b4:96:05:e6:3a:25:ca:63:ac:b3: 96:43:dd:88:b4:1c:e4:ac:3f:d4:e6:01:77:11:d5:c1:d1:e0: 5f:b1:0e:00:ba:0d:03:24:e9:a4:0b:35:12:fb:a9:04:34:a8: a4:b1:61:1f:dc:d2:69:b5:fc:61:e0:ea:33:2a:e8:c0:cb:0f: 49:df:7d:d1:a0:8d:0b:a5:30:64:24:02:e6:37:9b:1c:06:0d: 49:13:e0:d0:81:81:e4:64:53:5b:10:d9:b5:30:1a:66:10:d2: 2e:8c:2d:fb:8c:c5:cb:8e:fe:c0:5e:ed:c9:02:77:ed:9a:03: 80:3a:8c:43:fc:6c:8b:dc:e9:99:45:54:34:2a:1f:ef:c6:f2: e9:7c:9a:d6:3d:0d:69:63:4a:57:d7:f5:c3:0d:23:70:d9:93: 0f:d1:e4:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6F6989e4Fl757H7YLj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTQ4OThjNTczZDdjOWU1MTFhNWYyZTQxYzIzZDQ0NTg1MWFlZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++t8X4YFmBo/dFCrtYRy+MoJNLU v2O3p4iVuy2uJcgX5AdSbZL4Ijw4n9Dg+CxtyuA4Bmhk9ubR3qNFseuggOti62on CiUg6hX+f8hKQHXuAnPOgcJgvDzxK9DubJxl7CPYZva9+C1MKigG3/g25zbK/+3B flexFrIEvDdqq6A6LaawsONO0FoJsiYG55sGmtB3Q/MmZQ2s0hMarFJYvdVAj4gT 1A0y1Yz4xUIk92Oi3zqEaAWOvIJRNf6jGqOZTWy7+TJekSGHg4hhv8X1ctnXQKS1 SqX7t45GGIgXSZ1+LjOK2S/a2EeUeWbZ2g8iC75MnsEgTOg0m3eIul6pxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDpImMVz18nlEaXy5Bwj1EWFGu0GMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvT2tpWXhYUFh5ZVVScGZMa0hDUFVSWVVhN1FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudz7MA0G CSqGSIb3DQEBCwUAA4IBAQAH2lqhILsXL+zpmwhg5UU7EYbcc5js2zgOa6bFRxWG uOFf/FV17Ft21zHYBWAju5vfBiB8bW+9n8qNno87I7JMJvWeIFekspnuKiqoEPfW Ze1Zl2Wzsi7qfiC8mELAqOhM+7SWBeY6JcpjrLOWQ92ItBzkrD/U5gF3EdXB0eBf sQ4Aug0DJOmkCzUS+6kENKiksWEf3NJptfxh4OozKujAyw9J333RoI0LpTBkJALm N5scBg1JE+DQgYHkZFNbENm1MBpmENIujC37jMXLjv7AXu3JAnftmgOAOoxD/GyL 3OmZRVQ0Kh/vxvLpfJrWPQ1pY0pX1/XDDSNw2ZMP0eTD -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:22 2026 by rpki-client