This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/oZr_EXsyQjW2TSmeXVYxNow-uRc.roa File: oZr_EXsyQjW2TSmeXVYxNow-uRc.roa (raw, json) Hash identifier: MMqu7TNNLRdy1w2DS9JU9E6roUikurSMo3WnZQdO9kU= Subject key identifier: A1:9A:FF:11:7B:32:42:35:B6:4D:29:9E:5D:56:31:36:8C:3E:B9:17 Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Certificate serial: 019B7AC7971B80C2FB6AFABA5CF0119DE823 Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/oZr_EXsyQjW2TSmeXVYxNow-uRc.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44756 IP address blocks: 89.44.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:97:1b:80:c2:fb:6a:fa:ba:5c:f0:11:9d:e8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a19aff117b324235b64d299e5d5631368c3eb917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b2:ac:59:4e:be:42:73:27:e5:dd:4c:98:5b: f2:49:d1:e8:04:8a:60:74:fa:28:be:01:6a:68:83: 2b:6c:7a:ab:18:bf:c6:d6:a2:b6:eb:fe:1e:64:95: 92:c5:82:2a:dd:0b:50:d2:93:9b:65:67:16:a5:03: 9d:16:c2:45:3e:0b:50:59:cf:37:93:4f:02:41:95: 3f:9c:4c:c1:34:cc:79:e2:19:3a:d8:8b:e2:9c:8c: 4a:37:70:f8:3c:bd:9a:65:a7:49:d8:78:51:12:53: 24:6d:98:64:a6:0b:cc:ee:92:fd:f7:93:6a:7b:76: ba:45:45:fb:9e:16:c9:e7:3b:d3:28:98:25:3f:90: 19:64:1b:ed:a8:4f:7c:96:c7:2c:f4:51:6a:49:ba: 70:f7:ed:f7:a3:bf:3b:ac:18:d9:3a:02:2a:fa:5a: 83:84:63:57:ed:88:77:a9:2c:70:4e:4f:a3:0b:dc: 99:51:f2:ce:97:6e:33:58:92:f4:29:7c:f8:74:f0: 07:65:0c:c9:f9:92:24:d5:8f:28:65:3d:d2:0c:ec: 18:16:57:e9:08:13:91:83:53:a1:25:cf:73:ed:6b: 79:ed:03:d3:14:85:a4:d9:ae:9c:f9:a5:e6:7d:55: 37:84:cc:2c:15:17:97:00:41:04:e5:db:34:b2:a9: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:FF:11:7B:32:42:35:B6:4D:29:9E:5D:56:31:36:8C:3E:B9:17 X509v3 Authority Key Identifier: keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/oZr_EXsyQjW2TSmeXVYxNow-uRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.110.0/23 Signature Algorithm: sha256WithRSAEncryption 23:9f:9c:0c:62:e9:d5:d1:ee:83:cb:9f:49:cd:06:fe:a5:00: b8:e4:8d:26:30:01:01:63:bb:6e:7f:4c:59:dc:5b:b5:4e:a5: b7:e6:58:d8:f2:3a:e6:ab:21:e8:50:fc:87:b6:08:c0:26:12: 64:74:12:18:c2:ed:5b:33:9d:fe:0e:ac:18:69:ad:68:a5:23: 45:75:9c:97:a1:42:c8:f1:06:39:91:a5:12:09:a3:11:50:f8: 1c:d6:4c:45:bf:a8:66:97:f7:66:5a:48:7d:ec:dd:f9:cf:97: 25:24:6d:68:eb:08:97:73:dd:77:4c:6a:1d:d7:5a:7c:e5:84: f2:ec:e7:05:15:aa:d8:d9:dd:bf:d4:20:97:6e:39:ab:ea:a7: 77:d1:b7:ec:16:73:af:0d:2a:c6:85:8a:f2:ee:39:d8:1c:99: 6a:78:90:33:a1:e8:ed:bb:12:c5:dc:4d:df:47:82:2d:c5:53: fc:34:90:43:ae:af:79:93:96:0b:79:79:ea:99:b1:1c:97:1a: 95:2c:03:ed:a1:45:02:b4:12:8d:74:e9:29:a2:99:99:16:2c: 95:5d:b0:90:25:6c:bd:e2:98:05:4e:2c:f1:7c:02:18:3d:7e: e7:20:93:96:bb:5b:c6:09:9f:47:10:9f:10:1c:ca:b6:51:16: ae:7a:88:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5cbgML7avq6XPARnegjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjRiZjM3ZjM5ZWVjNjI5ODJjNGI2MzcwOWZhYjVkMTQ2 YzczNzMwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTlhZmYxMTdiMzI0MjM1YjY0ZDI5OWU1ZDU2MzEzNjhjM2ViOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7KsWU6+QnMn5d1MmFvySdHoBIpg dPoovgFqaIMrbHqrGL/G1qK26/4eZJWSxYIq3QtQ0pObZWcWpQOdFsJFPgtQWc83 k08CQZU/nEzBNMx54hk62IvinIxKN3D4PL2aZadJ2HhRElMkbZhkpgvM7pL995Nq e3a6RUX7nhbJ5zvTKJglP5AZZBvtqE98lscs9FFqSbpw9+33o787rBjZOgIq+lqD hGNX7Yh3qSxwTk+jC9yZUfLOl24zWJL0KXz4dPAHZQzJ+ZIk1Y8oZT3SDOwYFlfp CBORg1OhJc9z7Wt57QPTFIWk2a6c+aXmfVU3hMwsFReXAEEE5ds0sqnC1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKGa/xF7MkI1tk0pnl1WMTaMPrkXMB8GA1UdIwQY MBaAFAm0vzfznuximCxLY3Cfq10UbHNzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMt MjRlNmMwZDRmYWQ3LzEvb1pyX0VYc3lRalcyVFNtZVhWWXhOb3ctdVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMtMjRlNmMwZDRmYWQ3 LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSxuMA0G CSqGSIb3DQEBCwUAA4IBAQAjn5wMYunV0e6Dy59JzQb+pQC45I0mMAEBY7tuf0xZ 3Fu1TqW35ljY8jrmqyHoUPyHtgjAJhJkdBIYwu1bM53+DqwYaa1opSNFdZyXoULI 8QY5kaUSCaMRUPgc1kxFv6hml/dmWkh97N35z5clJG1o6wiXc913TGod11p85YTy 7OcFFarY2d2/1CCXbjmr6qd30bfsFnOvDSrGhYry7jnYHJlqeJAzoejtuxLF3E3f R4ItxVP8NJBDrq95k5YLeXnqmbEclxqVLAPtoUUCtBKNdOkpopmZFiyVXbCQJWy9 4pgFTizxfAIYPX7nIJOWu1vGCZ9HEJ8QHMq2URaueogQ -----END CERTIFICATE-----Generated at Mon Jan 26 12:18:26 2026 by rpki-client