This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/okAiKYw_e6QZvczizc6rlRpUxK4.roa File: okAiKYw_e6QZvczizc6rlRpUxK4.roa (raw, json) Hash identifier: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I= Subject key identifier: A2:40:22:29:8C:3F:7B:A4:19:BD:CC:E2:CD:CE:AB:95:1A:54:C4:AE Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1 Certificate serial: 019B78346F90C9BD92D369C5320A16331CA6 Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/okAiKYw_e6QZvczizc6rlRpUxK4.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25245 IP address blocks: 195.234.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6f:90:c9:bd:92:d3:69:c5:32:0a:16:33:1c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1 Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a24022298c3f7ba419bdcce2cdceab951a54c4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:a7:fc:27:af:42:c0:23:ad:46:87:c9:02: 17:6b:aa:ee:0d:4e:ed:62:83:9b:cf:b0:1d:ad:ed: b4:16:a7:8d:79:1e:a0:b0:a5:76:0e:ed:77:70:ba: 10:e0:5f:09:37:33:6c:d9:c7:1b:ee:ff:26:65:2a: 26:b8:02:1a:fa:28:e6:ac:0f:df:0e:27:6b:1f:9d: 0d:6f:88:d7:6a:93:59:b4:74:4c:72:cc:ca:21:34: 0a:27:d7:f2:9d:a6:96:90:e5:af:1c:d3:f1:d7:68: df:2f:a0:ca:f9:b8:07:2d:f2:b7:b6:d7:ef:a8:5a: b5:8a:2c:78:78:13:98:01:de:72:79:cc:03:ac:dd: 57:32:60:10:a2:03:62:6f:3b:0e:ba:d1:55:81:5b: 15:ce:86:0e:6e:c6:a1:6e:72:f6:e3:fd:a8:60:14: ad:99:e5:00:1c:cd:bb:b5:8a:d7:08:a7:d6:e8:ec: 3b:36:24:21:d9:29:89:91:95:ac:8f:9b:53:94:8f: ea:51:36:f6:55:a3:d2:a2:62:a0:e4:f9:2b:f2:67: a8:10:43:56:18:6d:98:82:9b:a7:c7:ea:46:fd:de: 5d:de:17:4f:62:41:bd:34:af:2c:02:bc:04:57:ca: 8e:04:9c:1c:ba:3b:3e:db:33:1d:04:e1:11:3f:fe: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:40:22:29:8C:3F:7B:A4:19:BD:CC:E2:CD:CE:AB:95:1A:54:C4:AE X509v3 Authority Key Identifier: keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/okAiKYw_e6QZvczizc6rlRpUxK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.216.0/22 Signature Algorithm: sha256WithRSAEncryption d3:71:c2:52:97:56:c8:e4:fb:66:1a:d6:76:25:e3:1b:98:de: e9:c5:7d:a1:9a:d6:83:d6:7a:d9:0e:78:b8:5b:89:8a:eb:4e: 52:d4:9e:5a:29:8f:78:87:28:41:43:a8:0a:0b:d5:e6:e9:78: 0d:a1:22:30:c8:f2:b5:d5:ae:97:d5:ba:6c:bf:5b:36:39:5d: 19:8b:9a:77:ad:09:00:9c:13:98:9c:9f:ee:26:31:64:1d:2c: ad:3c:fb:2b:cf:20:13:ba:c0:c9:84:df:1f:ad:97:88:a2:fc: 03:65:87:05:19:73:97:c5:e9:43:0c:8c:64:3e:7b:19:37:16: e8:90:05:67:6d:f4:79:01:01:8d:be:4e:c2:8a:05:3d:87:0f: b5:00:61:71:68:e5:e3:1d:18:92:9e:20:ba:81:31:0e:e7:13: 46:ba:b0:af:f8:e0:76:59:b8:df:c1:23:18:41:c0:69:69:b0: 49:7d:aa:ef:a6:dc:d0:fa:2f:d4:9e:bf:16:72:49:a2:e9:5b: 7c:5b:68:4c:b2:3c:0b:ad:00:b0:1a:9a:7d:53:b2:64:f2:67: 34:81:e5:e1:a9:a8:5f:cb:d9:c0:06:37:d9:6b:4c:7f:4c:64: cf:07:a3:ea:73:90:e9:da:8f:b1:bb:11:ba:3f:85:b2:69:31: 94:09:39:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NG+Qyb2S02nFMgoWMxymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4 NmViYjEwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjQwMjIyOThjM2Y3YmE0MTliZGNjZTJjZGNlYWI5NTFhNTRjNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPSn/CevQsAjrUaHyQIXa6ruDU7t YoObz7Adre20FqeNeR6gsKV2Du13cLoQ4F8JNzNs2ccb7v8mZSomuAIa+ijmrA/f DidrH50Nb4jXapNZtHRMcszKITQKJ9fynaaWkOWvHNPx12jfL6DK+bgHLfK3ttfv qFq1iix4eBOYAd5yecwDrN1XMmAQogNibzsOutFVgVsVzoYObsahbnL24/2oYBSt meUAHM27tYrXCKfW6Ow7NiQh2SmJkZWsj5tTlI/qUTb2VaPSomKg5Pkr8meoEENW GG2Ygpunx+pG/d5d3hdPYkG9NK8sArwEV8qOBJwcujs+2zMdBOERP/7riQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJAIimMP3ukGb3M4s3Oq5UaVMSuMB8GA1UdIwQY MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt YzRkNDJiN2Y2MjcwLzEvb2tBaUtZd19lNlFadmN6aXpjNnJsUnBVeEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+rYMA0G CSqGSIb3DQEBCwUAA4IBAQDTccJSl1bI5PtmGtZ2JeMbmN7pxX2hmtaD1nrZDni4 W4mK605S1J5aKY94hyhBQ6gKC9Xm6XgNoSIwyPK11a6X1bpsv1s2OV0Zi5p3rQkA nBOYnJ/uJjFkHSytPPsrzyATusDJhN8frZeIovwDZYcFGXOXxelDDIxkPnsZNxbo kAVnbfR5AQGNvk7CigU9hw+1AGFxaOXjHRiSniC6gTEO5xNGurCv+OB2WbjfwSMY QcBpabBJfarvptzQ+i/Unr8Wckmi6Vt8W2hMsjwLrQCwGpp9U7Jk8mc0geXhqahf y9nABjfZa0x/TGTPB6Pqc5Dp2o+xuxG6P4WyaTGUCTkj -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:42 2026 by rpki-client