This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/k_OhzQ9IKtoX5MHU0uv3ErlmoGA.roa File: k_OhzQ9IKtoX5MHU0uv3ErlmoGA.roa (raw, json) Hash identifier: 2MHirBNy5PUbj7VzbihwSdz/DftkwZWPxx3lzZRCc9U= Subject key identifier: 93:F3:A1:CD:0F:48:2A:DA:17:E4:C1:D4:D2:EB:F7:12:B9:66:A0:60 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B7C13549664D01B16319741F201A9AEB8 Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/k_OhzQ9IKtoX5MHU0uv3ErlmoGA.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19695 IP address blocks: 82.119.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:54:96:64:d0:1b:16:31:97:41:f2:01:a9:ae:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93f3a1cd0f482ada17e4c1d4d2ebf712b966a060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:3e:10:8a:f2:66:4e:14:47:aa:e8:ed:06: 03:4a:78:cb:d9:b3:6b:cc:11:9a:d8:b3:04:7f:1f: 13:5a:e9:fa:a9:21:4c:72:58:ea:e5:d1:43:b1:17: ff:e3:53:9a:ef:70:cf:a8:f1:49:fb:19:be:2e:e3: d4:94:f8:55:54:94:01:3b:dc:24:79:3a:ef:97:85: 99:34:da:a3:73:47:b3:f8:63:b2:a9:96:be:60:18: 40:6f:40:69:23:d4:fb:04:f2:43:56:35:0b:5b:26: 97:b0:df:ab:5c:eb:31:86:bc:7d:d6:c2:82:ba:cb: 6f:7a:6d:4d:65:b2:ab:ce:32:e0:02:c8:a2:6e:a8: 07:19:75:54:55:8c:22:22:59:78:7d:4f:02:f1:24: 01:04:92:bb:a7:28:03:f5:1a:47:aa:98:f7:d8:0b: 94:5f:58:84:03:b9:9e:25:5d:18:36:c9:64:1c:b2: 09:c4:d3:e0:af:8e:6c:b4:11:55:84:8f:23:b3:04: af:fe:f5:61:a2:ac:47:79:87:9b:c9:00:5c:46:75: 57:6b:71:e0:80:2b:a8:cc:ef:c6:5f:57:c7:4a:f6: 6a:e3:76:9b:db:b0:8d:a9:be:78:96:ee:70:2b:bf: 70:cb:78:85:99:50:2b:1d:8c:8c:c9:69:79:f7:99: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F3:A1:CD:0F:48:2A:DA:17:E4:C1:D4:D2:EB:F7:12:B9:66:A0:60 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/k_OhzQ9IKtoX5MHU0uv3ErlmoGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.192.0/22 Signature Algorithm: sha256WithRSAEncryption 10:6b:f4:fc:f4:b9:69:49:4a:43:1e:5c:a5:5a:c7:c7:70:6f: d1:a9:48:c8:13:73:b1:a1:2c:69:1e:7c:dd:38:07:4b:12:84: 86:95:6c:3c:72:ff:e2:30:29:c8:be:2a:3f:3b:2d:d6:f3:9f: e7:ea:5f:7f:7c:a5:b9:c1:84:1d:50:34:04:e8:fc:76:c1:6b: 92:e2:8d:c6:ed:4e:d9:fb:ac:7d:5d:67:91:d5:74:0f:5f:be: 90:26:96:a1:93:a4:f7:76:12:07:03:15:6b:6c:e8:c2:eb:9d: cd:32:34:5e:81:9d:cb:58:58:1d:a7:d2:98:88:6d:0b:8d:17: 09:0e:f6:29:0e:6c:fb:f2:94:6d:e1:de:0f:3c:83:39:5c:b0: db:83:e4:58:16:1d:d3:88:1c:51:c7:bb:38:f9:93:e8:5f:bf: a8:b5:e9:3c:5d:d3:7b:ce:9b:a2:42:12:a2:5c:32:fe:3e:40: f0:3d:4f:e7:18:83:c5:9a:b2:e2:0f:83:04:ce:7b:b7:65:2e: f4:f2:aa:11:f0:ab:c8:c3:f1:2e:06:88:59:96:27:54:ab:6f: 15:b8:89:2d:62:7a:0e:f4:09:2b:69:9c:f9:44:80:41:02:b1: ac:5c:1d:88:0a:c3:67:d1:31:a5:e0:e4:2f:dc:8c:38:da:fb: fd:da:6f:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1SWZNAbFjGXQfIBqa64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2YzYTFjZDBmNDgyYWRhMTdlNGMxZDRkMmViZjcxMmI5NjZhMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WQ+EIryZk4UR6ro7QYDSnjL2bNr zBGa2LMEfx8TWun6qSFMcljq5dFDsRf/41Oa73DPqPFJ+xm+LuPUlPhVVJQBO9wk eTrvl4WZNNqjc0ez+GOyqZa+YBhAb0BpI9T7BPJDVjULWyaXsN+rXOsxhrx91sKC ustvem1NZbKrzjLgAsiibqgHGXVUVYwiIll4fU8C8SQBBJK7pygD9RpHqpj32AuU X1iEA7meJV0YNslkHLIJxNPgr45stBFVhI8jswSv/vVhoqxHeYebyQBcRnVXa3Hg gCuozO/GX1fHSvZq43ab27CNqb54lu5wK79wy3iFmVArHYyMyWl595lxbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJPzoc0PSCraF+TB1NLr9xK5ZqBgMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEva19PaHpROUlLdG9YNU1IVTB1djNFcmxtb0dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUnfAMA0G CSqGSIb3DQEBCwUAA4IBAQAQa/T89LlpSUpDHlylWsfHcG/RqUjIE3OxoSxpHnzd OAdLEoSGlWw8cv/iMCnIvio/Oy3W85/n6l9/fKW5wYQdUDQE6Px2wWuS4o3G7U7Z +6x9XWeR1XQPX76QJpahk6T3dhIHAxVrbOjC653NMjRegZ3LWFgdp9KYiG0LjRcJ DvYpDmz78pRt4d4PPIM5XLDbg+RYFh3TiBxRx7s4+ZPoX7+otek8XdN7zpuiQhKi XDL+PkDwPU/nGIPFmrLiD4MEznu3ZS708qoR8KvIw/EuBohZlidUq28VuIktYnoO 9AkraZz5RIBBArGsXB2ICsNn0TGl4OQv3Iw42vv92m+3 -----END CERTIFICATE-----Generated at Tue Jan 13 00:49:16 2026 by rpki-client