This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OCkHgGu4V9ODoBdTq_ZOC0SsaKU.roa File: OCkHgGu4V9ODoBdTq_ZOC0SsaKU.roa (raw, json) Hash identifier: V6yuedPc1SUVuv+WViee3UolyBD1EUSyHOiixhPpCEE= Subject key identifier: 38:29:07:80:6B:B8:57:D3:83:A0:17:53:AB:F6:4E:0B:44:AC:68:A5 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F851353E7AE97B71BF0C448B3B637D5 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OCkHgGu4V9ODoBdTq_ZOC0SsaKU.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212366 IP address blocks: 95.47.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:13:53:e7:ae:97:b7:1b:f0:c4:48:b3:b6:37:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382907806bb857d383a01753abf64e0b44ac68a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:0b:24:df:75:1c:c8:11:9d:73:8e:78:87: fd:df:38:a6:9b:f0:a6:77:71:cf:3a:08:9d:63:b7: 4a:9a:fd:0c:2b:e2:62:e7:54:46:19:40:8a:74:bf: 82:5b:20:57:37:b1:76:2c:21:be:46:3b:63:82:d9: 2a:65:db:38:f5:be:bd:4d:6d:d0:eb:f2:a7:bf:26: 8b:dd:85:97:52:b5:b2:cf:42:cc:ec:4d:33:aa:d5: 4a:a4:10:0c:59:21:ec:6f:f8:5a:ce:f1:26:fb:c4: 19:95:78:99:c7:08:7a:f3:01:23:1c:39:a8:c8:85: 9f:05:26:99:5f:15:01:b6:3d:c4:10:5f:99:17:7c: 4c:fd:16:71:36:00:41:68:90:81:39:75:ac:6b:55: 85:05:71:56:93:15:9b:a5:24:ed:04:9c:5e:76:4c: a9:f7:89:62:e4:19:08:51:cc:e6:75:34:6d:7c:7a: 45:d5:b3:e7:dd:03:cf:22:4e:a6:8e:be:10:92:00: 5c:5d:3e:35:79:5c:19:85:25:f7:36:07:2f:1b:95: 0b:48:75:09:5b:87:9c:a2:93:1e:62:bf:99:f6:33: 26:03:ea:b7:e5:15:f2:f4:83:cb:36:fb:80:71:78: 7e:8b:1c:d9:6d:23:79:46:82:22:33:7b:fe:68:e7: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:29:07:80:6B:B8:57:D3:83:A0:17:53:AB:F6:4E:0B:44:AC:68:A5 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OCkHgGu4V9ODoBdTq_ZOC0SsaKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.190.0/24 Signature Algorithm: sha256WithRSAEncryption 96:9c:de:a1:9a:47:38:91:10:8b:e0:21:3e:83:c6:e7:6c:6a: 91:45:ad:41:90:3f:61:42:57:0a:79:8d:10:03:af:3d:c9:d6: 81:81:f6:99:74:9e:fe:9f:5f:a7:04:d8:6a:cb:0e:20:77:14: cf:b0:22:f9:ea:08:6d:3b:01:19:b2:89:48:53:77:e4:43:7d: b4:66:57:ea:ed:16:89:87:14:cd:9a:9a:d2:02:27:ff:11:d2: d4:79:b3:e4:0e:2d:64:d9:a9:80:a6:11:46:e1:e5:c7:9a:f4: aa:8e:dc:c2:f7:f5:1b:e0:35:1f:f4:bf:a2:34:9e:52:5a:3f: 1c:05:22:40:c9:35:e2:d4:60:e3:c4:e3:d2:ec:46:b9:6c:b5: e9:e0:35:8d:fe:b8:f6:ac:fd:66:f9:b1:9a:5a:7f:ac:a8:95: f4:7a:c4:c9:57:19:be:61:ef:71:3a:70:12:b6:0b:5b:b3:1e: 36:2d:97:88:e5:3d:f2:2e:ad:ec:de:d7:68:94:3c:08:b5:b8: a9:e0:37:0a:1c:9b:0d:c8:d6:ed:e0:cc:5f:20:ec:7b:5b:8d: 95:0f:b3:e5:03:20:0a:b7:66:d1:13:98:e6:06:7b:7b:00:ed: bf:d4:f8:39:63:2e:be:67:2a:fe:71:a1:91:49:68:35:74:54: 77:51:d3:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRNT566XtxvwxEiztjfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODI5MDc4MDZiYjg1N2QzODNhMDE3NTNhYmY2NGUwYjQ0YWM2OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCALJN91HMgRnXOOeIf93zimm/Cm d3HPOgidY7dKmv0MK+Ji51RGGUCKdL+CWyBXN7F2LCG+RjtjgtkqZds49b69TW3Q 6/KnvyaL3YWXUrWyz0LM7E0zqtVKpBAMWSHsb/hazvEm+8QZlXiZxwh68wEjHDmo yIWfBSaZXxUBtj3EEF+ZF3xM/RZxNgBBaJCBOXWsa1WFBXFWkxWbpSTtBJxedkyp 94li5BkIUczmdTRtfHpF1bPn3QPPIk6mjr4QkgBcXT41eVwZhSX3NgcvG5ULSHUJ W4ecopMeYr+Z9jMmA+q35RXy9IPLNvuAcXh+ixzZbSN5RoIiM3v+aOfn1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgpB4BruFfTg6AXU6v2TgtErGilMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvT0NrSGdHdTRWOU9Eb0JkVHFfWk9DMFNzYUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy++MA0G CSqGSIb3DQEBCwUAA4IBAQCWnN6hmkc4kRCL4CE+g8bnbGqRRa1BkD9hQlcKeY0Q A689ydaBgfaZdJ7+n1+nBNhqyw4gdxTPsCL56ghtOwEZsolIU3fkQ320Zlfq7RaJ hxTNmprSAif/EdLUebPkDi1k2amAphFG4eXHmvSqjtzC9/Ub4DUf9L+iNJ5SWj8c BSJAyTXi1GDjxOPS7Ea5bLXp4DWN/rj2rP1m+bGaWn+sqJX0esTJVxm+Ye9xOnAS tgtbsx42LZeI5T3yLq3s3tdolDwItbip4DcKHJsNyNbt4MxfIOx7W42VD7PlAyAK t2bRE5jmBnt7AO2/1Pg5Yy6+Zyr+caGRSWg1dFR3UdNI -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:42 2026 by rpki-client