This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oRiz_ZtsIjBBqoxShbfsa0k5dSE.roa File: oRiz_ZtsIjBBqoxShbfsa0k5dSE.roa (raw, json) Hash identifier: 4bPkyjEs2uoIe4JbfhkCImTydeuEuRfrqJlAWWD4+jo= Subject key identifier: A1:18:B3:FD:9B:6C:22:30:41:AA:8C:52:85:B7:EC:6B:49:39:75:21 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C40342CDE49E407AD2671DA2C6C3 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oRiz_ZtsIjBBqoxShbfsa0k5dSE.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 159.148.134.0/24 maxlen: 24 159.148.136.0/24 maxlen: 24 159.148.137.0/24 maxlen: 24 159.148.140.0/24 maxlen: 24 159.148.184.0/24 maxlen: 24 159.148.186.0/24 maxlen: 24 159.148.224.0/24 maxlen: 24 159.148.225.0/24 maxlen: 24 159.148.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c4:03:42:cd:e4:9e:40:7a:d2:67:1d:a2:c6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a118b3fd9b6c223041aa8c5285b7ec6b49397521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:0a:19:7f:89:13:ec:51:a5:c7:e7:57:76: 92:38:cb:12:1c:17:26:ef:31:07:63:27:8f:f9:c1: 36:5c:34:ce:b0:89:0b:b9:2a:b3:29:7d:df:c8:e6: 30:33:d4:d9:71:ca:81:12:50:5c:d6:bc:6a:ad:f4: d6:06:50:61:e7:6e:b6:45:bc:8f:d4:1a:22:43:1a: 96:c7:af:8e:42:09:c7:ef:47:01:91:77:df:10:96: 0f:d2:d3:5a:62:af:1b:32:3a:48:42:52:b4:91:7a: 9a:95:ee:7d:02:48:f7:fe:9d:4f:6a:6c:e2:cb:1d: 37:5c:fe:80:f3:a3:b0:0f:bc:0d:09:26:0c:d2:0e: ec:3b:92:e2:ae:96:23:9c:82:e8:5a:7d:94:02:90: e6:e9:1d:60:a1:5c:8b:24:5e:00:f2:b1:62:e3:1a: 5c:4a:93:99:c7:39:ff:d2:96:d8:f2:47:18:77:e4: 27:e0:7e:82:3a:8c:b8:75:17:07:36:ee:97:a3:2e: 67:43:17:a1:07:24:28:b3:9e:07:5f:73:73:d1:63: f5:01:aa:ce:52:90:ce:e1:6a:f5:bd:a4:ce:53:fb: 9f:25:37:3c:44:5f:e8:38:aa:fd:0d:b5:88:f0:d5: b2:c7:c2:41:88:57:ba:d7:e0:36:3c:c8:70:79:96: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:B3:FD:9B:6C:22:30:41:AA:8C:52:85:B7:EC:6B:49:39:75:21 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oRiz_ZtsIjBBqoxShbfsa0k5dSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.134.0/24 159.148.136.0/23 159.148.140.0/24 159.148.184.0/24 159.148.186.0/24 159.148.224.0-159.148.226.255 Signature Algorithm: sha256WithRSAEncryption 52:b7:2b:20:5c:b0:d2:d1:ee:1c:c6:5c:de:9f:45:4f:6c:23: cb:f0:af:c3:f1:37:bd:70:73:66:f8:09:99:8a:20:fd:8a:04: e2:6d:18:96:d1:15:d0:e0:ed:7d:31:64:05:11:60:4a:c1:f1: a6:92:35:87:86:6f:9b:a5:ee:c5:83:7b:a0:ad:be:fb:38:08: 48:e2:7b:68:22:3a:f3:56:f2:cf:cd:9d:48:82:8c:fa:70:b9: b5:94:22:63:3f:6b:ed:86:dd:95:f6:46:e1:e3:48:d5:81:df: d8:8c:9e:fd:b2:a3:c8:7f:5d:19:0a:31:c8:b5:b9:49:cf:9c: 9f:6b:a7:be:27:98:24:23:2d:06:1b:9c:35:62:72:f8:f5:9f: 5d:af:25:4c:03:c2:54:a9:2a:44:ff:bf:f9:15:84:02:f2:df: da:ba:76:b1:dd:eb:f8:a9:74:92:05:6f:d4:b3:dc:94:cf:1a: 6e:db:08:e7:d3:5b:ae:a8:e5:13:0a:d1:5b:dd:51:cb:cf:c4: 82:fa:d7:22:18:3b:6a:69:de:9e:76:20:62:c7:c7:40:17:9b: 59:d9:45:f1:db:bd:4b:1c:0d:b5:62:6a:3c:e1:a9:1e:2d:16: 89:42:a0:92:41:b4:7f:fa:4d:9a:d6:5d:bc:3e:a9:5d:22:99: 89:00:1f:3d -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt6x8QDQs3knkB60mcdosbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTE4YjNmZDliNmMyMjMwNDFhYThjNTI4NWI3ZWM2YjQ5Mzk3NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FsKGX+JE+xRpcfnV3aSOMsSHBcm 7zEHYyeP+cE2XDTOsIkLuSqzKX3fyOYwM9TZccqBElBc1rxqrfTWBlBh5262RbyP 1BoiQxqWx6+OQgnH70cBkXffEJYP0tNaYq8bMjpIQlK0kXqale59Akj3/p1Pamzi yx03XP6A86OwD7wNCSYM0g7sO5LirpYjnILoWn2UApDm6R1goVyLJF4A8rFi4xpc SpOZxzn/0pbY8kcYd+Qn4H6COoy4dRcHNu6Xoy5nQxehByQos54HX3Nz0WP1AarO UpDO4Wr1vaTOU/ufJTc8RF/oOKr9DbWI8NWyx8JBiFe61+A2PMhweZaRSQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFKEYs/2bbCIwQaqMUoW37GtJOXUhMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvb1Jpel9adHNJakJCcW94U2hiZnNhMGs1ZFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAn5SGAwQB n5SIAwQAn5SMAwQAn5S4AwQAn5S6MAwDBAWflOADBACflOIwDQYJKoZIhvcNAQEL BQADggEBAFK3KyBcsNLR7hzGXN6fRU9sI8vwr8PxN71wc2b4CZmKIP2KBOJtGJbR FdDg7X0xZAURYErB8aaSNYeGb5ul7sWDe6Ctvvs4CEjie2giOvNW8s/NnUiCjPpw ubWUImM/a+2G3ZX2RuHjSNWB39iMnv2yo8h/XRkKMci1uUnPnJ9rp74nmCQjLQYb nDVicvj1n12vJUwDwlSpKkT/v/kVhALy39q6drHd6/ipdJIFb9Sz3JTPGm7bCOfT W66o5RMK0VvdUcvPxIL61yIYO2pp3p52IGLHx0AXm1nZRfHbvUscDbViajzhqR4t FolCoJJBtH/6TZrWXbw+qV0imYkAHz0= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:14 2026 by rpki-client