This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OKYChaN81pM0S03CKWkKHiwLGh4.roa File: OKYChaN81pM0S03CKWkKHiwLGh4.roa (raw, json) Hash identifier: 9t9dX225dhj6t8dO64Gnk0rph1x6tkTtFVt2UQ1SjiI= Subject key identifier: 38:A6:02:85:A3:7C:D6:93:34:4B:4D:C2:29:69:0A:1E:2C:0B:1A:1E Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C76C8EF2FBA6660F580B1A90A51531 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OKYChaN81pM0S03CKWkKHiwLGh4.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213861 IP address blocks: 2a0c:2844::/32 maxlen: 32 2a11:2c40::/29 maxlen: 29 2a12:2cc6::/32 maxlen: 32 2a12:3bc0::/32 maxlen: 32 2a12:3bc1::/32 maxlen: 32 2a14:9703::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:8e:f2:fb:a6:66:0f:58:0b:1a:90:a5:15:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38a60285a37cd693344b4dc229690a1e2c0b1a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6d:86:db:72:44:92:40:76:06:47:ae:2b:e4: a4:bc:a5:08:10:d0:57:0e:78:09:4c:ff:e8:d8:70: d8:2d:3d:c8:b5:51:ad:9d:d3:f5:51:8b:37:0b:18: 45:12:91:9c:da:d6:06:c1:a4:94:fb:81:94:32:69: df:81:e8:9d:e0:22:56:69:00:5e:17:af:88:cc:22: ba:65:1a:25:99:80:ff:15:c2:0d:0c:ad:93:72:02: 02:61:91:c3:31:2d:2c:4d:2a:fd:c1:1a:ab:b6:9f: e2:a6:d0:83:a5:7f:79:99:dc:34:b5:27:37:26:64: 86:94:e9:86:21:30:e8:76:e6:c9:2e:55:e2:c6:a8: da:46:f8:8a:7b:e4:98:1b:7c:c4:c2:a3:09:6a:2c: 60:cb:82:93:9e:6d:cc:0a:8b:d3:ff:31:fb:c2:95: fb:1b:c4:a6:08:e4:76:e2:0d:68:c8:4e:6b:63:eb: 5e:91:5d:c3:66:31:ba:9c:68:e3:bb:77:59:9f:7d: 6e:54:7f:6c:b4:b0:a8:4b:97:23:a3:eb:a1:48:1d: 93:24:b3:70:78:c3:30:02:16:45:8d:64:a4:50:2e: 57:7c:34:8c:1a:7c:cc:31:aa:94:d8:5f:3b:28:40: 8f:a6:f0:bb:52:8a:3c:19:f9:a0:ec:02:19:53:ab: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A6:02:85:A3:7C:D6:93:34:4B:4D:C2:29:69:0A:1E:2C:0B:1A:1E X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OKYChaN81pM0S03CKWkKHiwLGh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:2844::/32 2a11:2c40::/29 2a12:2cc6::/32 2a12:3bc0::/31 2a14:9703::/32 Signature Algorithm: sha256WithRSAEncryption a4:7f:83:a2:4d:0f:aa:02:88:91:a4:a3:6c:23:27:4d:09:38: 12:3b:56:a5:57:71:2c:33:02:ed:ae:12:74:2a:ec:46:9e:84: c5:f6:c1:ce:48:44:0b:d3:8f:58:7e:ba:90:9e:2b:f4:f2:24: cc:bf:8a:b1:66:9a:ce:22:72:36:40:e3:2c:f9:1c:5d:33:ba: 90:f1:0f:d5:78:3e:e4:93:5b:8e:21:4d:7e:a1:2b:29:be:10: 10:39:20:1a:79:54:ad:4a:fe:74:8f:3c:9f:07:27:29:87:8d: ac:a9:3d:1f:53:be:6e:24:22:ff:07:25:41:fe:3e:a8:63:9b: 79:2c:ea:02:0c:b5:e4:49:72:16:04:ab:0c:67:3d:b7:21:f4: 1b:c4:ea:dc:ca:a3:41:13:16:59:2e:e4:79:90:0a:95:70:57: 27:31:90:ad:a1:d6:4c:ca:3f:14:97:cb:70:f9:be:a8:4e:1f: 9b:17:68:37:1a:82:b9:5c:b1:06:92:26:ad:3f:36:a8:02:0a: 3c:ba:8d:00:3d:44:9b:db:aa:ef:45:8e:29:13:cb:eb:81:19: 7e:6f:0e:f2:01:cd:cc:e8:14:2b:46:07:96:55:da:ea:97:ef: 41:b6:72:88:ec:fa:6d:36:53:83:0e:53:df:3a:f4:c9:26:7f: 52:b3:83:c2 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt3x2yO8vumZg9YCxqQpRUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGE2MDI4NWEzN2NkNjkzMzQ0YjRkYzIyOTY5MGExZTJjMGIxYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m2G23JEkkB2BkeuK+SkvKUIENBX DngJTP/o2HDYLT3ItVGtndP1UYs3CxhFEpGc2tYGwaSU+4GUMmnfgeid4CJWaQBe F6+IzCK6ZRolmYD/FcINDK2TcgICYZHDMS0sTSr9wRqrtp/iptCDpX95mdw0tSc3 JmSGlOmGITDodubJLlXixqjaRviKe+SYG3zEwqMJaixgy4KTnm3MCovT/zH7wpX7 G8SmCOR24g1oyE5rY+tekV3DZjG6nGjju3dZn31uVH9stLCoS5cjo+uhSB2TJLNw eMMwAhZFjWSkUC5XfDSMGnzMMaqU2F87KECPpvC7Uoo8Gfmg7AIZU6vNxwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFDimAoWjfNaTNEtNwilpCh4sCxoeMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvT0tZQ2hhTjgxcE0wUzAzQ0tXa0tIaXdMR2g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKgwoRAMF AyoRLEADBQAqEizGAwUBKhI7wAMFACoUlwMwDQYJKoZIhvcNAQELBQADggEBAKR/ g6JND6oCiJGko2wjJ00JOBI7VqVXcSwzAu2uEnQq7EaehMX2wc5IRAvTj1h+upCe K/TyJMy/irFmms4icjZA4yz5HF0zupDxD9V4PuSTW44hTX6hKym+EBA5IBp5VK1K /nSPPJ8HJymHjaypPR9Tvm4kIv8HJUH+Pqhjm3ks6gIMteRJchYEqwxnPbch9BvE 6tzKo0ETFlku5HmQCpVwVycxkK2h1kzKPxSXy3D5vqhOH5sXaDcagrlcsQaSJq0/ NqgCCjy6jQA9RJvbqu9FjikTy+uBGX5vDvIBzczoFCtGB5ZV2uqX70G2cojs+m02 U4MOU9869Mkmf1Kzg8I= -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:41 2026 by rpki-client