This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OK50xjYplC0sZ4FsA2daQm877Ks.roa File: OK50xjYplC0sZ4FsA2daQm877Ks.roa (raw, json) Hash identifier: itiCnPD3IgWBnGUw5q3uw6ezaO3kZHhxkY8+wMlMC10= Subject key identifier: 38:AE:74:C6:36:29:94:2D:2C:67:81:6C:03:67:5A:42:6F:3B:EC:AB Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A21D725D2C28A86EA5BDAA47E2DB6E Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OK50xjYplC0sZ4FsA2daQm877Ks.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215819 IP address blocks: 2001:3184::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1d:72:5d:2c:28:a8:6e:a5:bd:aa:47:e2:db:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38ae74c63629942d2c67816c03675a426f3becab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:22:b2:37:f0:d6:96:a6:4b:01:41:f0:77:fb: 7e:3d:2e:2b:f3:d2:1a:f6:82:e2:c4:f2:64:d4:8c: 52:95:fb:64:52:53:f9:20:2e:d2:db:75:22:be:fa: 19:18:ec:6d:cc:dd:51:13:c1:e1:e9:22:8c:63:01: 3c:7a:b5:0a:fb:cd:2c:cf:4b:3e:f4:f4:7a:61:d2: 83:b6:5a:3c:e1:8e:5c:0a:85:35:dd:d6:a1:80:55: 45:46:d5:eb:20:bf:68:b7:d7:6a:d4:2a:ed:29:df: 26:89:70:19:c0:5c:0e:8a:c1:88:e1:47:a4:38:61: 5b:82:68:59:9e:3d:28:16:2b:cb:e3:f6:49:4c:2a: 9c:61:39:41:dc:91:f8:20:66:61:43:b2:db:ab:e9: af:2b:f3:a9:f6:13:89:a4:c0:e5:82:a8:c6:4e:42: e4:be:36:10:e6:e3:6a:b0:b0:d2:96:c2:cf:43:50: fd:1d:cf:37:1b:42:89:f5:bb:26:9c:08:10:35:27: f6:b5:d5:79:74:f0:e9:0a:7c:8c:23:6a:6f:ec:a4: 65:bc:3b:21:e8:c4:fc:19:ec:2c:d1:62:fb:43:5a: f4:e2:04:58:9a:54:eb:3e:05:e2:32:a4:bd:d8:78: 7f:ca:70:e7:6e:a4:f1:6a:19:a3:99:96:a2:50:3b: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AE:74:C6:36:29:94:2D:2C:67:81:6C:03:67:5A:42:6F:3B:EC:AB X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OK50xjYplC0sZ4FsA2daQm877Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3184::/32 Signature Algorithm: sha256WithRSAEncryption 25:25:68:21:df:cb:a9:c1:b6:c5:05:1b:8f:ed:f0:66:2e:56: 5c:83:37:e0:ca:4a:c3:77:17:0a:75:e0:ee:90:b7:d6:8f:22: a6:21:b7:e3:5e:26:05:95:89:cd:ce:9f:f4:d9:5b:71:92:2f: 77:a8:78:4c:b3:b3:aa:3d:22:36:2d:11:4a:ba:1c:09:5e:3a: 78:cc:a0:8d:dd:02:31:1b:59:46:e6:a3:81:f8:2b:b6:66:67: 34:57:df:57:ad:52:d6:49:51:26:1f:b1:b9:f3:67:ec:fb:b6: ae:0f:b3:50:5b:21:79:89:10:a5:72:fa:55:1a:ef:4e:6d:d1: b8:93:16:38:e3:01:70:4c:bf:7c:46:62:f7:2d:a2:56:8c:93: bf:dc:a7:93:48:73:62:ec:c0:45:4b:ac:89:4c:66:d1:a9:48: 2b:bc:e7:e9:84:a5:4e:c7:43:c9:62:06:4b:8d:ca:cb:bd:8c: 73:b4:93:b4:2a:67:06:23:f3:42:ee:de:a7:44:a1:7d:ea:54: 95:5e:bf:5e:7a:6e:93:4a:51:5d:3c:83:12:33:e8:64:ea:f4: 87:f0:7a:05:f6:7f:5b:0d:14:e2:d6:c6:ba:b3:aa:ef:44:33: d9:84:18:60:83:c4:94:d5:c0:ce:4a:bf:35:4b:9b:3e:c8:c7: ee:53:3a:13 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oh1yXSwoqG6lvapH4ttuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGFlNzRjNjM2Mjk5NDJkMmM2NzgxNmMwMzY3NWE0MjZmM2JlY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/iKyN/DWlqZLAUHwd/t+PS4r89Ia 9oLixPJk1IxSlftkUlP5IC7S23UivvoZGOxtzN1RE8Hh6SKMYwE8erUK+80sz0s+ 9PR6YdKDtlo84Y5cCoU13dahgFVFRtXrIL9ot9dq1CrtKd8miXAZwFwOisGI4Uek OGFbgmhZnj0oFivL4/ZJTCqcYTlB3JH4IGZhQ7Lbq+mvK/Op9hOJpMDlgqjGTkLk vjYQ5uNqsLDSlsLPQ1D9Hc83G0KJ9bsmnAgQNSf2tdV5dPDpCnyMI2pv7KRlvDsh 6MT8Gews0WL7Q1r04gRYmlTrPgXiMqS92Hh/ynDnbqTxahmjmZaiUDvAKQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDiudMY2KZQtLGeBbANnWkJvO+yrMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvT0s1MHhqWXBsQzBzWjRGc0EyZGFRbTg3N0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAExhDAN BgkqhkiG9w0BAQsFAAOCAQEAJSVoId/LqcG2xQUbj+3wZi5WXIM34MpKw3cXCnXg 7pC31o8ipiG3414mBZWJzc6f9NlbcZIvd6h4TLOzqj0iNi0RSrocCV46eMygjd0C MRtZRuajgfgrtmZnNFffV61S1klRJh+xufNn7Pu2rg+zUFsheYkQpXL6VRrvTm3R uJMWOOMBcEy/fEZi9y2iVoyTv9ynk0hzYuzARUusiUxm0alIK7zn6YSlTsdDyWIG S43Ky72Mc7STtCpnBiPzQu7ep0ShfepUlV6/Xnpuk0pRXTyDEjPoZOr0h/B6BfZ/ Ww0U4tbGurOq70Qz2YQYYIPElNXAzkq/NUubPsjH7lM6Ew== -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:23 2026 by rpki-client