This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/ozNQN_NZFecNhoYlp5UO91vuHOs.roa File: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (raw, json) Hash identifier: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw= Subject key identifier: A3:33:50:37:F3:59:15:E7:0D:86:86:25:A7:95:0E:F7:5B:EE:1C:EB Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2 Certificate serial: 019B7AC81B0E1F673B6E104C927909B907A5 Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/ozNQN_NZFecNhoYlp5UO91vuHOs.roa Signing time: Thu 01 Jan 2026 18:18:12 +0000 ROA not before: Thu 01 Jan 2026 18:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21351 IP address blocks: 185.161.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1b:0e:1f:67:3b:6e:10:4c:92:79:09:b9:07:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2 Validity Not Before: Jan 1 18:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3335037f35915e70d868625a7950ef75bee1ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:f5:57:fb:63:5c:36:f3:28:07:fa:5d:b1: de:29:35:f5:f3:df:60:7d:af:27:57:2b:67:88:dd: dc:52:9d:27:a7:e2:78:ad:bf:29:62:53:ac:85:bf: f1:67:d6:78:9b:52:95:32:a3:63:50:c5:9b:11:29: 1c:14:aa:f2:ed:be:32:09:91:70:c0:bb:4c:39:2c: a6:10:ca:1d:ad:80:06:d2:01:e2:8e:17:8e:21:62: 46:f7:10:61:10:c0:5f:9f:90:d9:6e:ef:30:a1:f4: 5d:02:c9:85:74:76:94:ab:80:a9:92:cd:d5:aa:91: 41:c6:43:51:ce:ac:48:c0:cc:37:2f:8b:5e:06:6e: 51:db:35:10:f0:32:80:b1:12:48:de:07:73:91:e1: cb:c6:6a:dc:85:2e:ea:72:77:4d:b1:8e:97:6d:17: 4c:92:ca:7f:2c:53:68:fc:78:91:5c:76:e8:c5:57: 11:e9:39:2b:c6:0c:13:39:8b:87:58:47:5e:5f:69: 0b:07:f4:87:cf:d9:ce:79:c0:c1:fa:6c:47:d2:33: c7:f4:d1:2a:9b:2a:4a:0b:12:90:84:e8:26:8f:c0: 6a:51:bb:b4:d3:75:36:cf:57:1b:b3:a2:be:bb:5b: 4b:cd:26:7f:ce:05:c2:fb:a7:3d:e0:c6:95:c3:87: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:33:50:37:F3:59:15:E7:0D:86:86:25:A7:95:0E:F7:5B:EE:1C:EB X509v3 Authority Key Identifier: keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/ozNQN_NZFecNhoYlp5UO91vuHOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.8.0/24 Signature Algorithm: sha256WithRSAEncryption 99:31:ea:c2:c5:ce:fb:a5:de:87:1c:1d:3d:66:74:9c:eb:86: 42:a7:6e:aa:27:39:28:7d:3b:b9:d0:e4:93:44:8b:37:ea:7d: 7e:e9:51:db:ff:25:14:79:fb:19:b1:eb:5e:eb:d0:07:2f:e6: 59:c6:e9:2b:6b:0b:57:52:1c:eb:40:d2:91:cd:d2:8e:3a:c1: 70:61:13:e3:dd:eb:9f:91:67:c2:53:6a:69:65:89:56:6f:ef: 9a:b3:3f:88:bf:b2:c6:d2:03:b2:59:b5:45:3e:26:1e:0d:3e: 0c:72:9c:70:b1:39:82:34:b4:2b:cf:fe:8d:1a:c1:79:fd:05: a8:d4:35:f8:02:68:ea:fb:bd:73:eb:f1:27:82:a1:d4:57:1a: 65:66:f9:b7:bf:52:7c:aa:74:37:78:9d:d1:51:c8:2e:d9:d4: 3d:53:12:69:2c:a5:00:63:a5:61:d5:8e:28:96:ba:db:f1:8b: e3:ab:05:72:13:7f:e1:f6:6f:dd:14:91:69:6c:2c:87:27:4b: 86:59:7d:5f:11:1f:29:0b:1e:40:5a:2f:c9:19:eb:ff:63:c0: 5e:c1:8c:11:0e:da:5d:3a:f4:1e:73:5a:55:10:10:3a:25:c4: 7a:6a:b6:3c:1e:d5:c7:fd:b4:de:e6:33:36:a3:bc:e1:72:98: dc:1b:a1:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBsOH2c7bhBMknkJuQelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My MzgxZTIwHhcNMjYwMTAxMTgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzMzNTAzN2YzNTkxNWU3MGQ4Njg2MjVhNzk1MGVmNzViZWUxY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY/1V/tjXDbzKAf6XbHeKTX1899g fa8nVytniN3cUp0np+J4rb8pYlOshb/xZ9Z4m1KVMqNjUMWbESkcFKry7b4yCZFw wLtMOSymEModrYAG0gHijheOIWJG9xBhEMBfn5DZbu8wofRdAsmFdHaUq4Cpks3V qpFBxkNRzqxIwMw3L4teBm5R2zUQ8DKAsRJI3gdzkeHLxmrchS7qcndNsY6XbRdM ksp/LFNo/HiRXHboxVcR6TkrxgwTOYuHWEdeX2kLB/SHz9nOecDB+mxH0jPH9NEq mypKCxKQhOgmj8BqUbu003U2z1cbs6K+u1tLzSZ/zgXC+6c94MaVw4dIeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMzUDfzWRXnDYaGJaeVDvdb7hzrMB8GA1UdIwQY MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt Nzk3ZjRjYzRiNTAwLzEvb3pOUU5fTlpGZWNOaG9ZbHA1VU85MXZ1SE9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaEIMA0G CSqGSIb3DQEBCwUAA4IBAQCZMerCxc77pd6HHB09ZnSc64ZCp26qJzkofTu50OST RIs36n1+6VHb/yUUefsZsete69AHL+ZZxukrawtXUhzrQNKRzdKOOsFwYRPj3euf kWfCU2ppZYlWb++asz+Iv7LG0gOyWbVFPiYeDT4McpxwsTmCNLQrz/6NGsF5/QWo 1DX4Amjq+71z6/EngqHUVxplZvm3v1J8qnQ3eJ3RUcgu2dQ9UxJpLKUAY6Vh1Y4o lrrb8YvjqwVyE3/h9m/dFJFpbCyHJ0uGWX1fER8pCx5AWi/JGev/Y8BewYwRDtpd OvQec1pVEBA6JcR6arY8HtXH/bTe5jM2o7zhcpjcG6En -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:27 2026 by rpki-client