This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ozaWo0KwzXlTDDMNGIN9Oh6_1G8.roa File: ozaWo0KwzXlTDDMNGIN9Oh6_1G8.roa (raw, json) Hash identifier: KZJSx3qW0uUiecQVsBeBVEHaMiHc39LHJYCjD72U8wU= Subject key identifier: A3:36:96:A3:42:B0:CD:79:53:0C:33:0D:18:83:7D:3A:1E:BF:D4:6F Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5 Certificate serial: 019B7758CD5FD4B66D158151203DAA2ED0FA Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ozaWo0KwzXlTDDMNGIN9Oh6_1G8.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35365 IP address blocks: 2a0c:6580:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cd:5f:d4:b6:6d:15:81:51:20:3d:aa:2e:d0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a33696a342b0cd79530c330d18837d3a1ebfd46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:75:ff:d6:6a:f5:ae:a1:49:06:d0:a0:07: 6a:53:a9:96:eb:c3:e0:b1:2d:3d:2c:f1:62:79:f9: 3f:58:6a:5b:e6:22:8f:44:f8:f8:cd:4d:a9:e9:aa: 7a:86:07:44:62:4f:cc:41:66:67:ab:33:7e:f8:07: 1c:d1:ff:6e:03:e1:54:80:51:ea:b2:80:4f:a9:d4: 85:8c:6d:7c:86:86:b5:48:6c:d7:39:de:ad:e0:c0: 78:72:f6:b3:29:a1:b2:22:34:63:2e:48:00:bf:0a: 7f:7f:13:2c:50:1a:3d:d7:cf:a8:e8:6e:9f:db:d1: c9:ed:2e:00:d2:c0:18:58:8d:ce:47:74:53:56:ca: ae:f8:bc:9c:f2:a3:6c:a6:67:6c:2b:39:6d:a0:63: fd:a9:95:75:1e:3f:f0:12:bd:31:0f:27:a5:1c:66: a0:bf:44:78:12:de:54:51:45:0c:22:42:87:84:2f: 24:73:c3:74:65:b4:15:a2:f6:0b:50:33:18:59:19: f9:cc:9c:d6:49:98:74:e5:12:b4:ad:c9:e5:39:8a: c2:94:50:b2:4e:e8:72:fb:06:ff:44:4e:fd:5f:cb: 25:1d:d6:9a:23:7f:3d:c0:8c:a3:7c:7c:24:17:39: da:62:3e:82:25:c0:19:1d:4c:0d:fa:03:dc:2b:f6: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:36:96:A3:42:B0:CD:79:53:0C:33:0D:18:83:7D:3A:1E:BF:D4:6F X509v3 Authority Key Identifier: keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ozaWo0KwzXlTDDMNGIN9Oh6_1G8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:6580:2::/48 Signature Algorithm: sha256WithRSAEncryption 94:d7:8c:d4:60:cf:00:90:50:b6:13:6e:a8:73:da:ea:c1:c0: e7:a6:0a:23:b9:f1:f7:85:3a:90:39:3e:27:de:a0:61:e9:70: 14:ce:9e:d6:0a:dd:ff:89:a8:85:a4:56:bf:18:f1:a8:89:85: fb:cd:70:a9:47:75:4e:28:3f:cf:52:d7:5f:0d:74:25:9c:3f: 9d:0f:f6:3e:0a:2b:cc:33:80:26:61:0a:ea:3f:91:c1:03:f6: c9:77:71:df:f1:97:65:44:b2:55:b4:1f:c1:15:a6:13:a7:0d: 85:3c:ae:4c:09:ab:3e:d0:75:38:93:26:70:92:91:f8:eb:81: 4a:d8:17:a0:0d:7f:af:39:49:f4:10:90:ae:44:a2:13:6a:d9: c4:75:02:92:90:e8:81:51:26:7e:9f:89:9c:bf:af:72:a9:46: 55:6c:d9:57:c5:0d:b7:ed:3d:5b:bf:e2:b4:04:d0:e3:1d:9c: 79:51:a2:fb:0b:87:f1:2c:e8:9d:a6:e7:39:71:cf:c1:11:f7: d9:66:a0:19:41:44:e9:15:89:c0:d8:a4:63:4e:54:7c:03:c8: f3:74:88:01:eb:00:1f:b2:ac:15:d0:d5:c4:d7:f0:7d:2b:3d: 30:6c:5c:ec:ea:bd:e4:85:22:48:f9:a8:d9:64:50:82:5a:10: 5b:4d:5e:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WM1f1LZtFYFRID2qLtD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0 M2ViYzUwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzM2OTZhMzQyYjBjZDc5NTMwYzMzMGQxODgzN2QzYTFlYmZkNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp91/9Zq9a6hSQbQoAdqU6mW68Pg sS09LPFiefk/WGpb5iKPRPj4zU2p6ap6hgdEYk/MQWZnqzN++Acc0f9uA+FUgFHq soBPqdSFjG18hoa1SGzXOd6t4MB4cvazKaGyIjRjLkgAvwp/fxMsUBo918+o6G6f 29HJ7S4A0sAYWI3OR3RTVsqu+Lyc8qNspmdsKzltoGP9qZV1Hj/wEr0xDyelHGag v0R4Et5UUUUMIkKHhC8kc8N0ZbQVovYLUDMYWRn5zJzWSZh05RK0rcnlOYrClFCy Tuhy+wb/RE79X8slHdaaI389wIyjfHwkFznaYj6CJcAZHUwN+gPcK/aZrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKM2lqNCsM15UwwzDRiDfToev9RvMB8GA1UdIwQY MBaAFOd3vI4+wlDOhfuQkTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWIt ZmFlMGU1ZDJlZWJmLzEvb3phV28wS3d6WGxURERNTkdJTjlPaDZfMUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJm LzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxlgAAC MA0GCSqGSIb3DQEBCwUAA4IBAQCU14zUYM8AkFC2E26oc9rqwcDnpgojufH3hTqQ OT4n3qBh6XAUzp7WCt3/iaiFpFa/GPGoiYX7zXCpR3VOKD/PUtdfDXQlnD+dD/Y+ CivMM4AmYQrqP5HBA/bJd3Hf8ZdlRLJVtB/BFaYTpw2FPK5MCas+0HU4kyZwkpH4 64FK2BegDX+vOUn0EJCuRKITatnEdQKSkOiBUSZ+n4mcv69yqUZVbNlXxQ237T1b v+K0BNDjHZx5UaL7C4fxLOidpuc5cc/BEffZZqAZQUTpFYnA2KRjTlR8A8jzdIgB 6wAfsqwV0NXE1/B9Kz0wbFzs6r3khSJI+ajZZFCCWhBbTV7b -----END CERTIFICATE-----Generated at Mon Jan 26 10:54:27 2026 by rpki-client