This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/okNjrlPSLJ97WbWID906BW9GXVE.roa File: okNjrlPSLJ97WbWID906BW9GXVE.roa (raw, json) Hash identifier: fy4ogOK2Fv9dbPv7c8Pqqph2SfYRiTtApiDX9S9KzIY= Subject key identifier: A2:43:63:AE:53:D2:2C:9F:7B:59:B5:88:0F:DD:3A:05:6F:46:5D:51 Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Certificate serial: 019B7EA548A7FA1EB7C1D25615424187104A Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/okNjrlPSLJ97WbWID906BW9GXVE.roa Signing time: Fri 02 Jan 2026 12:18:39 +0000 ROA not before: Fri 02 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214515 IP address blocks: 193.24.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:48:a7:fa:1e:b7:c1:d2:56:15:42:41:87:10:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Validity Not Before: Jan 2 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a24363ae53d22c9f7b59b5880fdd3a056f465d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:81:c8:65:7a:af:57:c8:69:91:1f:47:a8: 99:44:b2:2c:64:c8:09:0f:45:77:0b:f1:b4:de:be: f7:ed:03:15:7e:62:b5:aa:b1:5b:a4:b1:ca:e7:c3: a8:0a:82:d4:93:c2:f0:47:8f:4f:12:17:3b:29:2f: 98:9d:d2:22:90:ac:61:0a:6a:da:79:14:d2:34:cc: ee:6c:f9:49:72:b2:21:fd:1c:c2:b5:d9:82:8b:45: c8:b1:d6:e1:a8:11:ad:42:87:52:37:c0:fe:30:73: 76:6b:67:a9:d7:f2:b4:20:56:78:37:25:de:fe:dc: f6:bd:b6:d6:66:b4:f6:3a:6c:11:b8:46:d4:d7:cc: 9a:b4:4d:f2:1d:aa:a2:b1:db:13:1d:3c:11:b2:db: 22:9f:de:f1:d1:89:f3:47:41:b5:b7:6d:8d:dd:f0: 1e:56:99:18:c0:a8:67:75:34:fa:1c:03:7b:d2:34: bf:3f:da:34:70:66:f9:3f:77:18:22:74:a2:07:5d: 6c:1d:b5:1e:8d:e5:e5:63:73:b2:0e:5e:85:d8:6c: ce:86:27:08:5c:30:f3:ab:4b:3a:20:d2:49:3b:17: 79:ca:cb:ab:03:99:3b:4b:66:8c:5c:58:46:83:25: 38:9b:0b:dd:25:f0:e9:bf:55:f9:ef:93:96:d6:05: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:63:AE:53:D2:2C:9F:7B:59:B5:88:0F:DD:3A:05:6F:46:5D:51 X509v3 Authority Key Identifier: keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/okNjrlPSLJ97WbWID906BW9GXVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.121.0/24 Signature Algorithm: sha256WithRSAEncryption d5:1b:48:ea:93:01:c1:94:fb:73:ae:b7:d1:5e:89:23:0a:17: af:20:46:95:6c:59:06:f1:49:5e:c6:57:02:3f:db:e1:e4:24: 15:48:1a:7c:6a:e1:da:b1:02:36:2f:24:89:f6:4d:de:40:0b: 6f:fc:d9:e7:86:3d:17:ee:6c:22:48:58:05:87:9a:44:5f:60: 26:ae:09:e4:4b:11:77:91:9e:bf:e3:94:94:46:16:f5:b5:48: e1:a1:f2:ef:66:23:70:0b:bf:f6:19:de:56:89:c6:75:f8:5a: 1e:04:43:d0:22:7a:4a:f6:a0:42:1e:67:3d:7c:40:68:55:e5: 9b:66:02:2b:59:a3:a4:14:e3:de:28:a8:4f:87:dd:a0:5a:8b: 4a:30:f5:de:70:e3:7d:f7:fc:9e:52:34:5f:67:05:b9:78:cf: 7d:41:a5:66:c5:16:78:3a:b6:31:b0:e0:52:fa:f4:b9:bb:70: 5c:bd:ee:00:f3:d2:d5:39:e8:de:02:1a:2f:31:5e:88:64:35: 99:86:70:4f:58:fe:22:74:6f:32:53:75:ef:dc:40:be:3a:7c: 29:3d:aa:61:76:f5:9d:7b:b1:e6:80:90:e0:81:09:13:0c:88: d6:85:69:67:c3:1c:6e:7d:5d:c5:47:34:5b:bb:d7:1d:68:00: 8e:aa:49:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pUin+h63wdJWFUJBhxBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk OTBiODcwHhcNMjYwMTAyMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjQzNjNhZTUzZDIyYzlmN2I1OWI1ODgwZmRkM2EwNTZmNDY1ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVeByGV6r1fIaZEfR6iZRLIsZMgJ D0V3C/G03r737QMVfmK1qrFbpLHK58OoCoLUk8LwR49PEhc7KS+YndIikKxhCmra eRTSNMzubPlJcrIh/RzCtdmCi0XIsdbhqBGtQodSN8D+MHN2a2ep1/K0IFZ4NyXe /tz2vbbWZrT2OmwRuEbU18yatE3yHaqisdsTHTwRstsin97x0YnzR0G1t22N3fAe VpkYwKhndTT6HAN70jS/P9o0cGb5P3cYInSiB11sHbUejeXlY3OyDl6F2GzOhicI XDDzq0s6INJJOxd5ysurA5k7S2aMXFhGgyU4mwvdJfDpv1X575OW1gV+FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJDY65T0iyfe1m1iA/dOgVvRl1RMB8GA1UdIwQY MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt OWZkYjVjNTVhZTUwLzEvb2tOanJsUFNMSjk3V2JXSUQ5MDZCVzlHWFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRh5MA0G CSqGSIb3DQEBCwUAA4IBAQDVG0jqkwHBlPtzrrfRXokjChevIEaVbFkG8UlexlcC P9vh5CQVSBp8auHasQI2LySJ9k3eQAtv/Nnnhj0X7mwiSFgFh5pEX2AmrgnkSxF3 kZ6/45SURhb1tUjhofLvZiNwC7/2Gd5WicZ1+FoeBEPQInpK9qBCHmc9fEBoVeWb ZgIrWaOkFOPeKKhPh92gWotKMPXecON99/yeUjRfZwW5eM99QaVmxRZ4OrYxsOBS +vS5u3Bcve4A89LVOejeAhovMV6IZDWZhnBPWP4idG8yU3Xv3EC+OnwpPaphdvWd e7HmgJDggQkTDIjWhWlnwxxufV3FRzRbu9cdaACOqklX -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:45 2026 by rpki-client