This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/ozLeruCkBhC4yZCUw5lMFfl-TtM.roa File: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (raw, json) Hash identifier: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4= Subject key identifier: A3:32:DE:AE:E0:A4:06:10:B8:C9:90:94:C3:99:4C:15:F9:7E:4E:D3 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B797EA1C415598B1F25058547C77FE2BB Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/ozLeruCkBhC4yZCUw5lMFfl-TtM.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8841 IP address blocks: 193.220.180.0/22 maxlen: 22 193.220.208.0/21 maxlen: 21 193.220.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a1:c4:15:59:8b:1f:25:05:85:47:c7:7f:e2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a332deaee0a40610b8c99094c3994c15f97e4ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:ba:70:af:2c:d4:d1:ed:64:95:8e:fc:63: a7:75:22:d4:0e:1e:e4:42:a0:30:82:97:d9:a7:87: 79:11:05:a6:b8:cd:56:03:3e:84:74:69:b9:c7:18: 3f:f9:02:ea:77:8b:67:ee:cd:db:d2:5c:71:3c:4f: 60:b5:45:c3:79:fe:9d:c8:b5:fe:02:a4:d1:0d:5e: 18:1e:a1:ad:20:4f:22:d6:8c:3d:6c:4a:34:2d:f9: 65:71:93:07:03:64:1b:f4:dc:b1:2d:30:6c:7d:6c: 76:be:83:e9:81:9a:78:2a:ed:f6:81:d1:75:36:37: aa:f3:fc:87:07:28:9a:4e:b7:01:d4:5e:a8:8d:e1: 3f:f3:ac:0a:c4:30:99:b2:83:73:b8:0a:f7:da:be: 24:71:9e:c7:b6:15:5b:86:4d:35:be:f5:b4:cf:c7: 00:09:f7:a1:09:c9:d9:5d:7c:db:46:1d:f3:ff:35: cf:12:74:58:10:f9:26:ca:13:0d:4e:a4:4b:f0:fc: bf:32:60:6a:44:5e:0b:91:a8:e7:f4:4c:43:f0:7c: 87:83:a0:44:8f:c7:4e:a2:bc:3c:13:5d:b7:2e:07: 0d:d2:9d:72:4c:11:32:f6:e1:c0:f6:5f:ee:72:83: f2:d2:cd:d3:22:6c:1c:07:f4:18:55:21:9c:a7:b0: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:DE:AE:E0:A4:06:10:B8:C9:90:94:C3:99:4C:15:F9:7E:4E:D3 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/ozLeruCkBhC4yZCUw5lMFfl-TtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.220.180.0/22 193.220.208.0-193.220.219.255 Signature Algorithm: sha256WithRSAEncryption 1f:bc:71:5b:15:dd:ec:cb:f0:bd:43:36:cd:74:06:0b:18:69: 7c:99:3b:32:4e:fb:39:6b:68:d3:08:8e:77:57:3c:9e:a2:34: 18:2b:3b:5b:1a:13:b6:4f:1f:65:ae:f0:71:4e:d6:21:46:9e: 2b:c2:01:a5:37:9f:db:25:fd:c5:4d:2f:bf:81:c3:66:11:bc: 99:47:74:f6:e5:72:05:ce:cb:1f:ad:28:0b:03:a5:01:17:a0: 3e:eb:cc:f7:27:49:7f:66:e7:e9:68:b0:19:b4:98:40:a8:fa: 4f:18:5f:57:5e:b5:05:df:e3:bb:87:38:35:b6:29:e1:63:89: 5c:1d:c6:29:a2:29:41:ec:56:fe:47:f4:58:6a:bc:60:34:26: 0f:a8:5b:95:da:3b:23:3c:65:0b:d5:8c:b0:03:ca:c0:f4:a1: ec:bb:bd:c9:be:53:76:dc:5c:51:b3:42:30:86:fe:4c:be:20: 3f:47:d9:b7:da:5e:a8:72:6c:f4:eb:be:e3:a0:37:61:ff:ca: 57:48:b8:eb:8c:54:11:63:ff:03:64:ee:19:5e:1f:3d:16:f5: 8f:6b:99:09:cc:25:d4:d3:e8:07:09:ae:80:57:59:7d:4f:b5: ce:91:4c:5a:c2:da:b7:ef:59:43:57:d0:b8:d8:ef:ad:a0:a8: 08:6f:a0:89 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fqHEFVmLHyUFhUfHf+K7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzMyZGVhZWUwYTQwNjEwYjhjOTkwOTRjMzk5NGMxNWY5N2U0ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4u6cK8s1NHtZJWO/GOndSLUDh7k QqAwgpfZp4d5EQWmuM1WAz6EdGm5xxg/+QLqd4tn7s3b0lxxPE9gtUXDef6dyLX+ AqTRDV4YHqGtIE8i1ow9bEo0LfllcZMHA2Qb9NyxLTBsfWx2voPpgZp4Ku32gdF1 Njeq8/yHByiaTrcB1F6ojeE/86wKxDCZsoNzuAr32r4kcZ7HthVbhk01vvW0z8cA CfehCcnZXXzbRh3z/zXPEnRYEPkmyhMNTqRL8Py/MmBqRF4Lkajn9ExD8HyHg6BE j8dOorw8E123LgcN0p1yTBEy9uHA9l/ucoPy0s3TImwcB/QYVSGcp7DqlwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKMy3q7gpAYQuMmQlMOZTBX5fk7TMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvb3pMZXJ1Q2tCaEM0eVpDVXc1bE1GZmwtVHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCwdy0MAwD BATB3NADBALB3NgwDQYJKoZIhvcNAQELBQADggEBAB+8cVsV3ezL8L1DNs10BgsY aXyZOzJO+zlraNMIjndXPJ6iNBgrO1saE7ZPH2Wu8HFO1iFGnivCAaU3n9sl/cVN L7+Bw2YRvJlHdPblcgXOyx+tKAsDpQEXoD7rzPcnSX9m5+losBm0mECo+k8YX1de tQXf47uHODW2KeFjiVwdximiKUHsVv5H9FhqvGA0Jg+oW5XaOyM8ZQvVjLADysD0 oey7vcm+U3bcXFGzQjCG/ky+ID9H2bfaXqhybPTrvuOgN2H/yldIuOuMVBFj/wNk 7hleHz0W9Y9rmQnMJdTT6AcJroBXWX1Ptc6RTFrC2rfvWUNX0LjY762gqAhvoIk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:56 2026 by rpki-client