This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/OK14eevAKdeAPJmbmDqPtR4gKY4.roa File: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (raw, json) Hash identifier: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs= Subject key identifier: 38:AD:78:79:EB:C0:29:D7:80:3C:99:9B:98:3A:8F:B5:1E:20:29:8E Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89 Certificate serial: 019B7F8135C732B203DCC83A8A9A8D4EA32E Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/OK14eevAKdeAPJmbmDqPtR4gKY4.roa Signing time: Fri 02 Jan 2026 16:18:52 +0000 ROA not before: Fri 02 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198595 IP address blocks: 91.236.57.0/24 maxlen: 24 185.202.124.0/24 maxlen: 24 185.202.125.0/24 maxlen: 24 185.202.126.0/24 maxlen: 24 185.202.127.0/24 maxlen: 24 2001:67c:104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:35:c7:32:b2:03:dc:c8:3a:8a:9a:8d:4e:a3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c54067385a765b1d5617c43331956fb208e89 Validity Not Before: Jan 2 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38ad7879ebc029d7803c999b983a8fb51e20298e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:4b:9d:6e:19:03:38:f0:2b:fb:ba:fc:36: d7:7f:97:c5:19:cb:9f:d1:e8:b0:0f:1d:3b:1e:4f: 9b:4a:ee:a6:0b:2f:e9:f6:58:7a:73:11:5e:b4:6f: b8:19:eb:ce:a4:dd:44:e1:c8:f9:5c:d3:d7:84:04: f3:27:c9:5d:7b:de:dd:e4:db:89:ad:44:28:9a:09: 6e:a0:4d:57:d2:4b:b1:a7:0a:3e:68:b8:31:69:fe: 71:97:22:d1:37:33:1f:26:81:2e:e2:4a:67:01:f9: 3e:31:03:b7:ea:5a:75:c7:b7:da:95:8c:8b:78:7d: 61:22:56:d0:af:67:68:c4:5e:b7:ce:11:26:b9:6a: 97:4b:b0:10:51:8f:20:84:9c:94:9e:6c:51:0e:e5: e1:4c:7e:95:19:ac:8b:67:5e:ad:30:cc:75:59:4a: 56:39:4f:6f:e0:2b:83:3e:7a:ba:b1:ee:3b:a1:a2: 64:38:aa:91:f7:0f:60:ac:1c:86:b0:2b:c5:03:dc: f2:9c:b2:00:a0:40:3d:dc:8b:39:08:e4:95:59:25: 06:0e:d7:00:fa:65:a5:a5:50:87:53:37:1e:9d:a1: 9a:1d:5d:6b:ca:b8:e3:b7:c5:88:52:c7:8d:3d:70: 9c:c0:63:5a:fe:86:20:17:6d:9d:37:28:64:83:81: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:78:79:EB:C0:29:D7:80:3C:99:9B:98:3A:8F:B5:1E:20:29:8E X509v3 Authority Key Identifier: keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/OK14eevAKdeAPJmbmDqPtR4gKY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.57.0/24 185.202.124.0/22 IPv6: 2001:67c:104::/48 Signature Algorithm: sha256WithRSAEncryption 2e:e0:b9:c5:c3:ba:92:68:96:50:60:38:61:8f:f0:ff:19:f2: 57:41:b9:d1:ad:73:af:d6:95:71:6c:aa:76:ea:68:ac:f6:eb: 29:50:2c:8c:f4:a1:64:71:0f:57:f1:e5:49:d1:e1:0c:27:cd: e3:87:d7:0f:af:27:f8:17:e5:ee:d8:84:89:4d:04:14:5e:0e: 58:50:86:21:2c:83:a0:ff:ec:1b:00:00:7d:6a:62:bc:f3:78: cb:53:02:0a:98:30:36:c0:a0:56:62:0f:e0:1d:87:60:49:e3: 69:50:c6:48:c5:0e:52:3f:f3:07:63:a7:f1:f1:6e:1d:91:c7: c9:54:c4:f7:45:f8:1a:42:08:77:a7:45:69:80:f0:5f:70:72: 12:67:5a:e5:68:2a:73:5e:c3:74:db:ec:d9:74:21:ac:56:8f: 90:ac:3e:da:c5:15:8c:81:01:72:21:c0:98:1b:37:ed:38:65: a2:77:d0:a4:dc:e1:38:fc:e8:0e:20:50:45:f8:e4:0d:82:57: 1b:18:fa:43:b3:3c:04:5b:4e:c6:f8:eb:74:07:19:2f:60:d7: 45:06:19:5a:36:63:28:9e:aa:50:72:c6:6a:56:67:1e:8d:d9: e7:af:53:27:5e:be:51:b0:cc:71:cc:9d:87:cc:06:b4:16:16: c1:ab:e9:17 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/gTXHMrID3Mg6ipqNTqMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy MDhlODkwHhcNMjYwMTAyMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGFkNzg3OWViYzAyOWQ3ODAzYzk5OWI5ODNhOGZiNTFlMjAyOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEFLnW4ZAzjwK/u6/DbXf5fFGcuf 0eiwDx07Hk+bSu6mCy/p9lh6cxFetG+4GevOpN1E4cj5XNPXhATzJ8lde97d5NuJ rUQomgluoE1X0kuxpwo+aLgxaf5xlyLRNzMfJoEu4kpnAfk+MQO36lp1x7falYyL eH1hIlbQr2doxF63zhEmuWqXS7AQUY8ghJyUnmxRDuXhTH6VGayLZ16tMMx1WUpW OU9v4CuDPnq6se47oaJkOKqR9w9grByGsCvFA9zynLIAoEA93Is5COSVWSUGDtcA +mWlpVCHUzcenaGaHV1ryrjjt8WIUseNPXCcwGNa/oYgF22dNyhkg4EtxwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDiteHnrwCnXgDyZm5g6j7UeICmOMB8GA1UdIwQY MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct YTQxYTQ4MzRlY2FhLzEvT0sxNGVldkFLZGVBUEptYm1EcVB0UjRnS1k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW+w5AwQC ucp8MA8EAgACMAkDBwAgAQZ8AQQwDQYJKoZIhvcNAQELBQADggEBAC7gucXDupJo llBgOGGP8P8Z8ldBudGtc6/WlXFsqnbqaKz26ylQLIz0oWRxD1fx5UnR4QwnzeOH 1w+vJ/gX5e7YhIlNBBReDlhQhiEsg6D/7BsAAH1qYrzzeMtTAgqYMDbAoFZiD+Ad h2BJ42lQxkjFDlI/8wdjp/Hxbh2Rx8lUxPdF+BpCCHenRWmA8F9wchJnWuVoKnNe w3Tb7Nl0IaxWj5CsPtrFFYyBAXIhwJgbN+04ZaJ30KTc4Tj86A4gUEX45A2CVxsY +kOzPARbTsb463QHGS9g10UGGVo2YyieqlByxmpWZx6N2eevUydevlGwzHHMnYfM BrQWFsGr6Rc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:39 2026 by rpki-client