This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/uOzpjBk7slHfeOzi3MJqnwEN7YQ.roa File: uOzpjBk7slHfeOzi3MJqnwEN7YQ.roa (raw, json) Hash identifier: tW3kdkE5KJTm4Mv1vVZwbhHutmtQd9MezaPIS3SJUW8= Subject key identifier: B8:EC:E9:8C:19:3B:B2:51:DF:78:EC:E2:DC:C2:6A:9F:01:0D:ED:84 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B7C1358228B7A5700B1E65407248D99EF Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/uOzpjBk7slHfeOzi3MJqnwEN7YQ.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 217.22.230.0/23 maxlen: 23 217.22.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:58:22:8b:7a:57:00:b1:e6:54:07:24:8d:99:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8ece98c193bb251df78ece2dcc26a9f010ded84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:97:ed:d1:5d:bb:1e:7e:e5:89:ea:fc:e0: 9b:69:85:93:ae:82:64:08:32:09:43:17:3b:fc:f2: e9:1a:8e:f3:66:0f:66:c8:55:be:50:ec:0a:52:1b: f3:7c:13:14:21:58:d5:bb:22:63:55:c9:8f:92:e7: 84:bb:20:40:80:63:87:31:33:56:5f:e2:0c:8e:29: 89:f7:81:ab:81:fc:64:8f:fc:86:0a:7a:61:c7:b9: 50:89:d9:3d:26:7b:76:24:07:65:50:73:3e:a5:5c: 76:20:30:f1:d3:7f:73:09:fe:ea:f0:83:70:1a:dd: 2d:5e:c7:13:ce:58:69:08:8e:62:2c:d5:f8:57:c9: dc:19:06:40:38:9b:a3:b1:24:23:29:ae:fb:1f:5c: 6f:06:70:00:1c:0f:e8:00:98:ab:25:cf:27:51:66: 72:79:a2:96:ac:59:03:53:08:80:24:5b:e7:3b:83: 1b:dc:f4:f0:78:0e:f4:df:74:08:66:62:96:bb:5c: b5:e0:09:d7:33:95:56:38:f2:37:dd:75:22:ef:9f: 6d:27:f1:fe:f3:64:bf:d1:8d:62:8d:3d:c1:ef:0e: a3:5c:fa:b4:72:f9:e3:dd:55:52:1b:ea:b3:a0:4a: 87:1c:e2:9f:2d:88:fb:80:54:b7:d8:05:28:c9:05: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EC:E9:8C:19:3B:B2:51:DF:78:EC:E2:DC:C2:6A:9F:01:0D:ED:84 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/uOzpjBk7slHfeOzi3MJqnwEN7YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.230.0/23 217.22.252.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:d6:e6:29:73:5f:4b:c1:48:bb:84:cf:5b:13:e7:cc:bb:b7: 57:4d:73:71:c7:5d:47:df:b0:17:c4:b1:7b:1b:94:4c:65:62: a9:44:12:f6:2f:2a:d6:c0:2d:6d:69:75:94:3d:3f:ca:58:de: a2:7d:e6:e2:c9:97:ae:42:be:10:cb:91:f9:43:a6:3c:83:40: 7a:a5:71:19:7f:0d:a0:eb:ab:d5:ac:dc:d7:24:99:75:08:ad: 24:9b:fb:9e:3a:1d:3c:7f:63:23:7d:a4:be:c2:87:b9:7a:26: 17:55:5f:4d:50:38:05:b9:b8:c0:7d:9b:9f:31:0c:f4:ed:38: ab:a4:6a:e7:74:ec:c2:14:f5:15:33:8f:90:fa:c5:9b:e2:19: 9e:bb:9a:5c:8d:1f:1b:09:a3:57:41:a9:a4:91:dd:f6:cd:8c: 90:cb:e1:e4:ec:04:b9:6c:7a:e1:0e:5d:1a:7e:7b:6d:41:cb: f9:04:a2:6a:61:bf:35:82:ae:6d:e4:39:19:48:4c:0a:b0:43: c0:9b:4a:3d:ee:b1:91:59:8d:e9:88:af:b0:f0:e9:cd:00:95: 47:8a:0e:22:7a:1f:81:f0:d5:82:4c:a6:2f:6f:e7:8f:f6:19: ac:7e:6e:70:5f:c7:e7:a1:e4:95:0d:2b:aa:b9:9d:7f:18:6e: 27:9f:94:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E1gii3pXALHmVAckjZnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGVjZTk4YzE5M2JiMjUxZGY3OGVjZTJkY2MyNmE5ZjAxMGRlZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwaX7dFdux5+5Ynq/OCbaYWTroJk CDIJQxc7/PLpGo7zZg9myFW+UOwKUhvzfBMUIVjVuyJjVcmPkueEuyBAgGOHMTNW X+IMjimJ94Grgfxkj/yGCnphx7lQidk9Jnt2JAdlUHM+pVx2IDDx039zCf7q8INw Gt0tXscTzlhpCI5iLNX4V8ncGQZAOJujsSQjKa77H1xvBnAAHA/oAJirJc8nUWZy eaKWrFkDUwiAJFvnO4Mb3PTweA7033QIZmKWu1y14AnXM5VWOPI33XUi759tJ/H+ 82S/0Y1ijT3B7w6jXPq0cvnj3VVSG+qzoEqHHOKfLYj7gFS32AUoyQV92QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLjs6YwZO7JR33js4tzCap8BDe2EMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvdU96cGpCazdzbEhmZU96aTNNSnFud0VON1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2RbmAwQB 2Rb8MA0GCSqGSIb3DQEBCwUAA4IBAQBf1uYpc19LwUi7hM9bE+fMu7dXTXNxx11H 37AXxLF7G5RMZWKpRBL2LyrWwC1taXWUPT/KWN6ifebiyZeuQr4Qy5H5Q6Y8g0B6 pXEZfw2g66vVrNzXJJl1CK0km/ueOh08f2MjfaS+woe5eiYXVV9NUDgFubjAfZuf MQz07TirpGrndOzCFPUVM4+Q+sWb4hmeu5pcjR8bCaNXQamkkd32zYyQy+Hk7AS5 bHrhDl0afnttQcv5BKJqYb81gq5t5DkZSEwKsEPAm0o97rGRWY3piK+w8OnNAJVH ig4ieh+B8NWCTKYvb+eP9hmsfm5wX8fnoeSVDSuquZ1/GG4nn5RY -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:49 2026 by rpki-client