This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/OZz5Z73RCocTg0hscsirqJpi9Vg.roa File: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (raw, json) Hash identifier: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4= Subject key identifier: 39:9C:F9:67:BD:D1:0A:87:13:83:48:6C:72:C8:AB:A8:9A:62:F5:58 Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B7A5B14DB00F10F5EB10DFD3D56832594 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/OZz5Z73RCocTg0hscsirqJpi9Vg.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53007 IP address blocks: 153.112.195.0/24 maxlen: 24 153.112.203.0/24 maxlen: 24 192.157.16.0/23 maxlen: 23 192.157.16.0/24 maxlen: 24 192.157.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:14:db:00:f1:0f:5e:b1:0d:fd:3d:56:83:25:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=399cf967bdd10a871383486c72c8aba89a62f558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:84:d0:87:ba:75:80:c3:ee:d3:3a:96:8b: 2c:57:1f:8f:2c:9e:86:0e:04:eb:c0:af:ed:94:ad: c0:1f:dd:fc:09:a1:06:79:33:6b:dd:b4:b9:67:29: f4:65:1e:01:29:70:a9:fe:6d:9a:a6:0d:b1:03:56: 88:c0:32:e3:01:93:b5:16:bf:14:e6:af:12:81:a9: 4c:ce:f1:d1:70:da:20:ac:38:f2:85:cd:9b:a7:56: 25:66:74:74:22:a5:5f:e9:d9:4b:e0:b0:af:8b:2a: 51:b7:f7:67:12:80:75:57:2b:5c:37:6e:5d:4e:97: f6:f5:5c:cd:c7:2b:44:c6:6f:3d:0b:ba:24:b1:a7: 5b:b1:94:04:6a:e7:ae:39:0e:d3:09:6a:22:a1:99: 10:b7:32:2f:fc:04:20:be:e7:f8:ab:92:79:13:bd: 6a:57:d6:d7:8c:aa:5b:74:ac:d3:51:4e:58:14:f0: 0b:6b:29:51:52:96:1f:2b:16:98:5a:03:94:17:0b: 82:04:e4:29:52:51:2e:f1:71:c2:fb:ab:7c:28:1f: 8f:b1:9a:c9:31:b9:67:c4:2c:45:b6:67:12:d7:8a: 6c:e1:75:ed:90:25:fd:48:03:3d:6c:68:6b:20:a1: 35:90:4c:10:15:ac:7f:2c:9e:41:59:89:b6:e6:8b: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:F9:67:BD:D1:0A:87:13:83:48:6C:72:C8:AB:A8:9A:62:F5:58 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/OZz5Z73RCocTg0hscsirqJpi9Vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.112.195.0/24 153.112.203.0/24 192.157.16.0/23 Signature Algorithm: sha256WithRSAEncryption 14:ba:8f:92:97:d2:6d:86:36:ee:31:cd:58:4d:6b:49:6d:17: 93:93:06:57:b7:8c:69:a6:36:9d:e3:56:c6:4f:45:9e:57:79: cc:5e:12:5c:ac:90:82:34:2d:10:3c:2b:17:ab:3b:b4:3c:5b: 8e:81:39:01:79:ed:94:c1:2e:eb:c3:13:08:5c:ac:2e:1c:18: f6:6a:82:3f:a9:cf:00:54:e8:c0:e6:1c:07:ae:7d:c4:8c:35: cd:28:32:7b:f3:7e:c6:a8:32:33:84:35:33:e3:5d:db:ec:90: 05:bd:7d:c0:28:32:8e:8e:89:4e:50:c6:e8:ad:09:35:60:92: fc:77:b4:ab:9e:ce:52:2f:fe:e6:c1:35:70:7b:b1:ef:0f:f5: 11:e7:31:53:07:0d:29:67:d0:a3:95:31:54:79:71:ce:21:13: 9b:7f:d8:e1:81:83:0d:93:dc:df:c0:ba:e2:18:05:a2:d2:7e: 38:a6:23:50:8a:7c:0d:04:ff:4a:f5:36:74:5f:91:f0:6c:26: 3d:f9:29:7c:52:c5:bc:4d:1f:c5:f4:4c:19:34:0a:5f:b1:03: b7:d3:dd:22:49:ac:7e:a8:21:dc:3c:09:28:31:f4:23:c1:e6: 8e:6b:a4:3c:fe:3d:49:15:4c:53:40:f3:16:c7:12:33:ad:c7: 60:ff:19:ee -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WxTbAPEPXrEN/T1WgyWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTljZjk2N2JkZDEwYTg3MTM4MzQ4NmM3MmM4YWJhODlhNjJmNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmmE0Ie6dYDD7tM6lossVx+PLJ6G DgTrwK/tlK3AH938CaEGeTNr3bS5Zyn0ZR4BKXCp/m2apg2xA1aIwDLjAZO1Fr8U 5q8SgalMzvHRcNogrDjyhc2bp1YlZnR0IqVf6dlL4LCviypRt/dnEoB1VytcN25d Tpf29VzNxytExm89C7oksadbsZQEaueuOQ7TCWoioZkQtzIv/AQgvuf4q5J5E71q V9bXjKpbdKzTUU5YFPALaylRUpYfKxaYWgOUFwuCBOQpUlEu8XHC+6t8KB+PsZrJ MblnxCxFtmcS14ps4XXtkCX9SAM9bGhrIKE1kEwQFax/LJ5BWYm25osbQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDmc+We90QqHE4NIbHLIq6iaYvVYMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvT1p6NVo3M1JDb2NUZzBoc2NzaXJxSnBpOVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmXDDAwQA mXDLAwQBwJ0QMA0GCSqGSIb3DQEBCwUAA4IBAQAUuo+Sl9JthjbuMc1YTWtJbReT kwZXt4xppjad41bGT0WeV3nMXhJcrJCCNC0QPCsXqzu0PFuOgTkBee2UwS7rwxMI XKwuHBj2aoI/qc8AVOjA5hwHrn3EjDXNKDJ7837GqDIzhDUz413b7JAFvX3AKDKO jolOUMborQk1YJL8d7Srns5SL/7mwTVwe7HvD/UR5zFTBw0pZ9CjlTFUeXHOIROb f9jhgYMNk9zfwLriGAWi0n44piNQinwNBP9K9TZ0X5HwbCY9+Sl8UsW8TR/F9EwZ NApfsQO3090iSax+qCHcPAkoMfQjweaOa6Q8/j1JFUxTQPMWxxIzrcdg/xnu -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:00 2026 by rpki-client