This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/ozr_7U6YddsAki_u1IviseVnGr8.roa File: ozr_7U6YddsAki_u1IviseVnGr8.roa (raw, json) Hash identifier: A2gLyHJgOlcq2fhQNul6Az4HfqR7wlY8G6yuIpKn2sg= Subject key identifier: A3:3A:FF:ED:4E:98:75:DB:00:92:2F:EE:D4:8B:E2:B1:E5:67:1A:BF Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Certificate serial: 019B7F8189A9BE824B1AD785C08E3E36B8E4 Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/ozr_7U6YddsAki_u1IviseVnGr8.roa Signing time: Fri 02 Jan 2026 16:19:14 +0000 ROA not before: Fri 02 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.233.132.0/24 maxlen: 24 185.233.134.0/24 maxlen: 24 185.233.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:89:a9:be:82:4b:1a:d7:85:c0:8e:3e:36:b8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Validity Not Before: Jan 2 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a33affed4e9875db00922feed48be2b1e5671abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:32:f0:c7:a4:90:1f:de:f9:c9:bd:10:63: 36:c5:7a:97:b3:45:ac:03:ef:81:ea:6b:d1:c4:ed: e5:62:74:0f:3d:c7:4b:14:09:33:b8:83:01:c2:74: 5e:c6:a0:52:4b:c2:14:cb:c0:0e:c0:5d:a7:27:a6: cc:6a:1a:13:9e:da:dd:f6:8e:55:bb:d7:dc:d2:5d: 4f:14:50:43:8b:9d:86:cc:b5:3b:49:73:60:6d:71: ce:e1:4f:d2:3c:b0:40:86:53:d7:a9:ba:a2:04:12: 31:05:53:82:5f:8a:ab:5f:80:be:a1:68:10:27:22: 54:7c:3a:fe:8f:28:c3:a6:95:52:3b:d4:08:60:ff: 48:5b:60:99:69:d4:f9:1c:e4:af:ad:d7:09:3c:63: 7f:17:0b:9f:ad:55:5f:b9:c1:f3:95:98:10:b9:9f: de:11:6b:56:28:30:1d:d3:73:3e:46:43:8b:64:d6: b4:a9:db:ac:4d:45:5e:df:8d:ac:da:05:23:36:ea: 46:a1:89:5e:15:91:f8:45:1e:e7:97:4d:cd:46:04: 9a:28:4c:50:9e:cd:2a:0c:65:01:05:59:f7:90:75: fd:dc:18:72:5f:46:38:af:98:7f:df:2a:40:c9:45: 13:3b:2e:fb:d4:ba:94:22:3c:da:07:7f:68:d1:81: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:FF:ED:4E:98:75:DB:00:92:2F:EE:D4:8B:E2:B1:E5:67:1A:BF X509v3 Authority Key Identifier: keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/ozr_7U6YddsAki_u1IviseVnGr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.132.0/24 185.233.134.0/23 Signature Algorithm: sha256WithRSAEncryption 13:f4:ae:14:e1:83:5e:16:e9:81:77:b9:1e:99:51:71:09:b2: de:a4:37:ef:03:4e:eb:97:6d:2c:6c:c9:db:f9:4f:76:10:4d: 32:b9:7c:57:46:ad:0a:16:2a:f9:19:8e:1b:40:4c:a5:0c:70: d2:c8:af:84:be:0e:b5:bd:a8:4a:c8:5c:23:98:41:26:dc:c0: bd:2e:ad:1e:de:2d:a4:cc:ef:a9:82:19:9b:84:56:14:68:af: 6e:47:b3:e0:e8:dd:99:fe:da:01:c0:23:30:a9:9e:ed:ef:df: 92:1f:b1:0d:7d:fc:7e:9d:59:1b:21:ed:58:50:dc:3a:67:14: eb:f4:a1:ad:20:cb:12:80:cc:fe:d0:e9:86:12:e7:c8:db:fe: a6:ed:22:30:94:ea:b7:f0:d3:a9:0e:5e:5c:3e:cf:81:32:35: a9:0c:ab:1f:05:75:b8:19:91:cf:ba:cb:27:84:b8:a5:f2:51: 84:15:f4:d9:8c:fb:18:f8:39:fd:30:ea:b9:a2:b4:ac:3d:3d: cd:06:df:64:ed:94:40:fb:5a:30:f4:74:99:cb:f6:5f:f1:10: 44:d8:d9:f1:9e:59:6e:b5:b0:ad:eb:a1:c0:5d:15:13:e5:02: 79:64:4b:80:dd:16:c7:05:f7:1d:9b:6b:51:03:65:66:97:88: f0:93:92:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gYmpvoJLGteFwI4+NrjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTFkZTE3NDM3YTAwMjVmZDFlZGUxMGY3MTBmMTdhMzA4 MGIzYWIwHhcNMjYwMTAyMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzNhZmZlZDRlOTg3NWRiMDA5MjJmZWVkNDhiZTJiMWU1NjcxYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgMy8MekkB/e+cm9EGM2xXqXs0Ws A++B6mvRxO3lYnQPPcdLFAkzuIMBwnRexqBSS8IUy8AOwF2nJ6bMahoTntrd9o5V u9fc0l1PFFBDi52GzLU7SXNgbXHO4U/SPLBAhlPXqbqiBBIxBVOCX4qrX4C+oWgQ JyJUfDr+jyjDppVSO9QIYP9IW2CZadT5HOSvrdcJPGN/FwufrVVfucHzlZgQuZ/e EWtWKDAd03M+RkOLZNa0qdusTUVe342s2gUjNupGoYleFZH4RR7nl03NRgSaKExQ ns0qDGUBBVn3kHX93BhyX0Y4r5h/3ypAyUUTOy771LqUIjzaB39o0YGpQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKM6/+1OmHXbAJIv7tSL4rHlZxq/MB8GA1UdIwQY MBaAFA6R3hdDegAl/R7eEPcQ8XowgLOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUt ODhlYmJmOTk3ODBiLzEvb3pyXzdVNllkZHNBa2lfdTFJdmlzZVZuR3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUtODhlYmJmOTk3ODBi LzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuemEAwQB uemGMA0GCSqGSIb3DQEBCwUAA4IBAQAT9K4U4YNeFumBd7kemVFxCbLepDfvA07r l20sbMnb+U92EE0yuXxXRq0KFir5GY4bQEylDHDSyK+Evg61vahKyFwjmEEm3MC9 Lq0e3i2kzO+pghmbhFYUaK9uR7Pg6N2Z/toBwCMwqZ7t79+SH7ENffx+nVkbIe1Y UNw6ZxTr9KGtIMsSgMz+0OmGEufI2/6m7SIwlOq38NOpDl5cPs+BMjWpDKsfBXW4 GZHPussnhLil8lGEFfTZjPsY+Dn9MOq5orSsPT3NBt9k7ZRA+1ow9HSZy/Zf8RBE 2NnxnllutbCt66HAXRUT5QJ5ZEuA3RbHBfcdm2tRA2Vml4jwk5Kb -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:06 2026 by rpki-client