This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/OKR_E7TefcL1oDsyJAxJw_cLgPU.roa File: OKR_E7TefcL1oDsyJAxJw_cLgPU.roa (raw, json) Hash identifier: ss0bijG8zBZLgt7sSgduTwK4b0hk2Jl8W8BVKFPs9e8= Subject key identifier: 38:A4:7F:13:B4:DE:7D:C2:F5:A0:3B:32:24:0C:49:C3:F7:0B:80:F5 Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06 Certificate serial: 019B791137C66A5733AE89099717A4ED26FE Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/OKR_E7TefcL1oDsyJAxJw_cLgPU.roa Signing time: Thu 01 Jan 2026 10:18:50 +0000 ROA not before: Thu 01 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197663 IP address blocks: 91.225.96.0/22 maxlen: 22 91.240.52.0/24 maxlen: 24 91.240.53.0/24 maxlen: 24 91.240.54.0/24 maxlen: 24 91.240.55.0/24 maxlen: 24 193.35.111.0/24 maxlen: 24 195.47.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:37:c6:6a:57:33:ae:89:09:97:17:a4:ed:26:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38a47f13b4de7dc2f5a03b32240c49c3f70b80f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:de:89:3b:a7:82:39:ad:73:ca:21:dd:1d: 9e:eb:28:d8:66:ff:b7:a6:8f:a8:9b:fb:bd:ba:a5: a0:b5:19:ee:a9:1a:e4:eb:67:61:29:fe:a5:7f:8b: ae:93:15:28:5a:7e:18:b3:4f:f3:cd:27:69:10:ef: 80:84:56:a1:3b:55:7d:24:b6:18:e7:8e:6c:f8:1e: 54:d6:2a:95:57:a8:36:ec:01:b7:4e:cb:1d:1c:5b: e7:b1:6b:43:a4:98:db:3a:6c:a8:9b:dc:2f:a6:5c: 0a:03:3a:d8:84:7d:76:b8:60:5f:f8:c9:f2:0d:34: 47:a3:ae:5a:43:67:ba:53:12:62:53:fd:34:a6:30: f5:90:ba:0c:be:04:e7:74:6f:b6:c9:0f:1f:d9:32: 5a:ec:19:2c:94:5b:a1:70:2c:5a:17:66:a7:b0:0a: 94:5a:f4:2c:cc:4a:e6:7d:0f:8c:e4:f8:ff:79:43: 1f:cc:66:e4:fd:31:db:d5:47:86:e3:a4:84:51:70: 3b:97:48:2d:ec:68:11:d9:42:6b:e0:b4:55:25:92: 64:ce:6a:b3:fb:15:41:dc:b1:ef:fb:69:c8:1c:cd: 03:43:19:40:f9:f3:de:a9:8b:5f:47:2b:93:ad:43: ec:9b:fe:58:30:b1:01:d9:6a:45:fc:b9:e2:3e:f3: 08:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:7F:13:B4:DE:7D:C2:F5:A0:3B:32:24:0C:49:C3:F7:0B:80:F5 X509v3 Authority Key Identifier: keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/OKR_E7TefcL1oDsyJAxJw_cLgPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.96.0/22 91.240.52.0/22 193.35.111.0/24 195.47.243.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:a6:20:3b:35:94:f0:84:d2:4e:c2:1e:7c:54:e4:7d:bb:e6: 05:91:8f:45:03:91:1a:bd:82:5d:59:22:de:31:db:38:3c:b4: 59:05:69:f0:13:0d:79:8a:84:95:08:84:72:0c:ea:91:b8:2d: 0d:58:38:95:a1:80:a2:c5:aa:b6:b7:dc:ff:51:b2:73:4c:03: aa:74:e8:d8:e0:be:3c:e2:71:3a:d1:b2:ff:f7:fd:c2:46:69: e9:8f:26:bc:ac:b7:b9:ae:3f:75:9f:21:77:ed:bb:7d:15:c6: f7:64:58:c5:ed:72:60:be:f7:68:3e:73:10:fe:ab:f2:ba:50: 2e:7c:b0:57:10:ef:2a:62:cb:4c:64:cb:53:b2:7e:08:bf:9c: c0:38:3c:a7:89:ec:dc:0e:f7:51:16:b1:3f:44:3e:92:de:e4: d3:0e:c3:f0:92:3b:1a:f6:4a:2e:76:82:08:c8:32:df:09:75: db:76:4c:a0:b7:de:17:ae:3d:e6:f4:4b:c8:51:33:06:b8:91: 90:46:da:bc:83:13:5e:17:aa:78:a9:5c:d2:ca:9e:c2:79:7d: 42:9a:23:f6:f9:19:32:a4:88:31:b7:29:69:32:6b:7c:66:d1: 19:d2:27:e3:dd:e6:95:56:22:78:63:21:78:a2:89:fc:01:00: 20:ef:ff:df -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ETfGalczrokJlxek7Sb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZjBhODRmZjhmNTA1N2Y5NDkxZGVmYmU2YWQ1NWVlYWU5 OGNjMDYwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGE0N2YxM2I0ZGU3ZGMyZjVhMDNiMzIyNDBjNDljM2Y3MGI4MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAjeiTungjmtc8oh3R2e6yjYZv+3 po+om/u9uqWgtRnuqRrk62dhKf6lf4uukxUoWn4Ys0/zzSdpEO+AhFahO1V9JLYY 545s+B5U1iqVV6g27AG3TssdHFvnsWtDpJjbOmyom9wvplwKAzrYhH12uGBf+Mny DTRHo65aQ2e6UxJiU/00pjD1kLoMvgTndG+2yQ8f2TJa7BkslFuhcCxaF2ansAqU WvQszErmfQ+M5Pj/eUMfzGbk/THb1UeG46SEUXA7l0gt7GgR2UJr4LRVJZJkzmqz +xVB3LHv+2nIHM0DQxlA+fPeqYtfRyuTrUPsm/5YMLEB2WpF/LniPvMIXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDikfxO03n3C9aA7MiQMScP3C4D1MB8GA1UdIwQY MBaAFKvwqE/49QV/lJHe++atVe6umMwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgt OTQ0Y2ExYTgwYjE4LzEvT0tSX0U3VGVmY0wxb0RzeUpBeEp3X2NMZ1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgtOTQ0Y2ExYTgwYjE4 LzEvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW+FgAwQC W/A0AwQAwSNvAwQAwy/zMA0GCSqGSIb3DQEBCwUAA4IBAQA8piA7NZTwhNJOwh58 VOR9u+YFkY9FA5EavYJdWSLeMds4PLRZBWnwEw15ioSVCIRyDOqRuC0NWDiVoYCi xaq2t9z/UbJzTAOqdOjY4L484nE60bL/9/3CRmnpjya8rLe5rj91nyF37bt9Fcb3 ZFjF7XJgvvdoPnMQ/qvyulAufLBXEO8qYstMZMtTsn4Iv5zAODyniezcDvdRFrE/ RD6S3uTTDsPwkjsa9koudoIIyDLfCXXbdkygt94Xrj3m9EvIUTMGuJGQRtq8gxNe F6p4qVzSyp7CeX1CmiP2+RkypIgxtylpMmt8ZtEZ0ifj3eaVViJ4YyF4oon8AQAg 7//f -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:43 2026 by rpki-client