This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa File: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (raw, json) Hash identifier: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM= Subject key identifier: 38:AF:EC:EC:40:5F:A6:06:5B:8C:8A:EF:52:85:6A:CE:95:9A:A0:4C Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019B7AC81601974854CE286D82BE24F2DE74 Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34643 IP address blocks: 5.253.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:16:01:97:48:54:ce:28:6d:82:be:24:f2:de:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38afecec405fa6065b8c8aef52856ace959aa04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:5b:8f:53:7d:bd:4c:21:b1:8d:d6:f0:15: b5:c9:20:67:da:a1:7d:d7:95:c9:14:55:99:29:9d: 1a:2f:f2:9d:cf:bd:9b:52:25:38:b2:a3:61:2f:6b: de:2e:a7:86:be:87:50:5b:36:d1:6c:d8:59:c5:4d: 6e:14:96:2c:7f:56:3d:9f:12:d7:c1:d9:bd:60:0b: fa:98:cb:bd:91:bf:a9:0d:73:7d:31:97:40:13:b6: e5:d8:37:4c:54:da:9b:2b:8a:99:da:71:20:29:f7: 68:ac:78:33:5a:a2:17:d0:c9:ca:11:f3:1e:aa:1e: 73:a4:94:16:8f:8d:d0:dc:82:90:bb:4c:60:4d:3e: c8:27:27:e5:06:d4:27:52:ef:c5:de:9f:19:56:5e: b3:f9:21:cf:a3:6f:b3:9a:ac:8a:d6:d5:13:ba:8b: 78:c6:bf:68:59:1c:4b:33:f5:54:61:31:9c:e6:06: c3:3a:2b:4a:fd:d8:2d:e2:7e:c8:90:19:bd:34:18: 46:6e:cc:03:97:f7:e1:93:a7:bd:73:88:3a:1b:12: dd:53:7b:03:a2:f5:eb:09:f8:49:5b:06:bb:26:57: 28:8f:a5:59:35:0e:ea:e4:b6:ab:25:71:da:37:82: 71:2b:0a:41:dd:cd:40:4b:df:88:4d:37:56:dd:80: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AF:EC:EC:40:5F:A6:06:5B:8C:8A:EF:52:85:6A:CE:95:9A:A0:4C X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.183.0/24 Signature Algorithm: sha256WithRSAEncryption 46:ac:61:ab:89:b0:df:56:28:53:7e:88:65:aa:1c:1c:10:92: 77:e1:23:4f:f6:99:6e:12:f8:f4:a9:05:25:d6:a2:cb:df:b2: ed:57:c8:9d:09:65:31:d3:27:e2:90:a7:66:93:4a:7c:db:3c: 78:2c:5a:a1:69:2e:94:47:10:73:b8:d0:b2:3f:60:b1:8a:c7: 83:72:be:ea:44:9e:0b:92:e1:71:ab:d8:4d:2a:08:72:68:2b: ad:ea:32:2b:b1:bc:ee:35:02:c9:78:50:58:ad:b1:20:68:18: 84:ef:69:83:0c:73:f3:e3:e7:fc:6c:7b:ce:47:f4:fa:65:d1: 80:63:eb:f6:dc:1b:a5:c4:36:52:b7:9f:90:aa:96:ae:96:87: 32:01:3b:f0:ed:98:95:69:99:92:8a:d7:52:68:6b:5e:12:5a: e2:56:94:e6:b6:9b:b2:5f:ea:4b:3a:91:25:dc:23:8b:67:b9: 67:a0:ca:0a:b8:8b:5a:bd:6f:39:96:6e:14:e1:ae:20:b1:2a: bb:28:fc:3d:9d:f8:4f:df:7e:8f:87:be:c8:4b:01:58:4d:61: 22:0a:f5:be:e6:c3:56:e5:ad:30:fa:5c:8b:86:79:eb:1b:9d: ef:ce:cc:2b:c5:63:56:f3:a8:29:9e:54:c1:f8:c3:ab:17:e5: 03:83:1e:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBYBl0hUzihtgr4k8t50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGFmZWNlYzQwNWZhNjA2NWI4YzhhZWY1Mjg1NmFjZTk1OWFhMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmFbj1N9vUwhsY3W8BW1ySBn2qF9 15XJFFWZKZ0aL/Kdz72bUiU4sqNhL2veLqeGvodQWzbRbNhZxU1uFJYsf1Y9nxLX wdm9YAv6mMu9kb+pDXN9MZdAE7bl2DdMVNqbK4qZ2nEgKfdorHgzWqIX0MnKEfMe qh5zpJQWj43Q3IKQu0xgTT7IJyflBtQnUu/F3p8ZVl6z+SHPo2+zmqyK1tUTuot4 xr9oWRxLM/VUYTGc5gbDOitK/dgt4n7IkBm9NBhGbswDl/fhk6e9c4g6GxLdU3sD ovXrCfhJWwa7Jlcoj6VZNQ7q5LarJXHaN4JxKwpB3c1AS9+ITTdW3YBmyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiv7OxAX6YGW4yK71KFas6VmqBMMB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvT0tfczdFQmZwZ1piaklydlVvVnF6cFdhb0V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf23MA0G CSqGSIb3DQEBCwUAA4IBAQBGrGGribDfVihTfohlqhwcEJJ34SNP9pluEvj0qQUl 1qLL37LtV8idCWUx0yfikKdmk0p82zx4LFqhaS6URxBzuNCyP2CxiseDcr7qRJ4L kuFxq9hNKghyaCut6jIrsbzuNQLJeFBYrbEgaBiE72mDDHPz4+f8bHvOR/T6ZdGA Y+v23BulxDZSt5+QqpaulocyATvw7ZiVaZmSitdSaGteElriVpTmtpuyX+pLOpEl 3COLZ7lnoMoKuItavW85lm4U4a4gsSq7KPw9nfhP336Ph77ISwFYTWEiCvW+5sNW 5a0w+lyLhnnrG53vzswrxWNW86gpnlTB+MOrF+UDgx42 -----END CERTIFICATE-----Generated at Tue Jan 27 17:23:31 2026 by rpki-client