This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/oZzPr194SGFDBoXBt9T9kB-yFLc.roa File: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (raw, json) Hash identifier: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg= Subject key identifier: A1:9C:CF:AF:5F:78:48:61:43:06:85:C1:B7:D4:FD:90:1F:B2:14:B7 Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc Certificate serial: 019B7AC8B2C44926F3BA3331E75501FD4DB6 Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/oZzPr194SGFDBoXBt9T9kB-yFLc.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50244 IP address blocks: 89.36.77.0/24 maxlen: 24 89.41.25.0/24 maxlen: 24 89.47.244.0/23 maxlen: 24 94.177.80.0/21 maxlen: 24 188.212.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b2:c4:49:26:f3:ba:33:31:e7:55:01:fd:4d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a19ccfaf5f784861430685c1b7d4fd901fb214b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:a5:a9:e9:05:0c:0f:95:4d:28:a4:00:23: 12:f5:cf:44:b1:13:12:c2:07:64:69:8a:58:6b:dc: 9a:89:68:3f:ca:45:57:e6:09:bd:0e:f0:46:f9:de: 4e:34:f1:b5:5b:36:7a:2a:e6:85:17:36:2f:4b:44: b1:92:a4:98:5a:9c:3b:a7:6d:c3:a9:47:72:8a:ab: 15:30:5a:30:2c:a4:ed:82:a1:10:d6:b6:c1:78:2b: 55:de:dc:97:1a:83:4c:ed:69:13:46:21:88:ef:25: 05:ae:93:00:82:e7:cb:c6:0d:17:27:44:01:7f:b5: b3:b1:f8:b2:f0:5b:f6:90:1b:74:5a:cc:8c:64:6c: 33:19:9e:85:50:bb:ab:95:fa:7e:3e:43:79:05:bf: 34:e7:a1:2d:28:2d:e9:bc:27:df:f1:55:ea:d7:4f: 2f:14:1e:0b:d5:84:cd:b8:bf:7b:1d:86:8c:5c:0a: 57:f0:6c:43:a2:91:f6:c2:51:1e:48:a2:ab:39:b9: d3:ab:29:6c:f7:4f:80:66:79:66:2c:70:af:3d:4e: cd:c1:c0:ad:0b:3a:9d:4a:bf:2f:ca:43:b6:96:25: 19:40:5b:d3:5f:3d:50:f2:bc:2f:21:c4:3c:45:62: 3d:51:ec:17:41:02:91:f8:84:69:b0:fe:3c:fd:09: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:CF:AF:5F:78:48:61:43:06:85:C1:B7:D4:FD:90:1F:B2:14:B7 X509v3 Authority Key Identifier: keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/oZzPr194SGFDBoXBt9T9kB-yFLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.77.0/24 89.41.25.0/24 89.47.244.0/23 94.177.80.0/21 188.212.129.0/24 Signature Algorithm: sha256WithRSAEncryption 87:dc:09:5c:b6:89:e3:23:71:39:9b:9b:55:b3:38:ec:94:a1: ea:bc:28:d0:7e:14:fd:bf:eb:e5:27:f6:49:1b:2b:a9:a8:ac: 39:17:f2:79:63:fd:d5:7d:37:76:9f:19:75:85:3a:29:86:b9: dc:6f:0a:8b:7b:0a:19:17:5d:e7:ad:9a:25:ae:5b:e7:af:ee: b4:91:44:35:d7:fd:70:eb:96:40:57:00:6d:f4:ba:87:53:8c: 92:7e:49:d4:9b:9d:b1:92:91:49:df:98:91:dc:9c:14:39:58: 20:12:d6:b0:10:0d:a9:48:d8:ea:18:89:7f:58:b3:77:c4:51: 8c:d0:5b:6d:c6:c1:43:82:f4:6a:bb:c6:5a:ed:d1:d1:5f:01: 0f:61:b0:f5:30:4f:82:79:2f:ca:05:b7:2a:15:19:da:d4:bc: db:27:d9:9a:81:b0:c5:f8:f8:fd:fc:7b:e3:6a:f9:6f:ad:ef: 4d:5e:12:bb:5d:ad:c6:a1:9a:54:68:80:4f:89:c1:6e:13:b6: 78:fe:14:21:9d:fc:27:dd:92:17:69:1c:24:90:97:fd:41:3b: ca:9a:aa:1e:fe:2f:aa:c3:d7:ba:f5:1d:48:be:44:61:61:24: f1:15:6f:e9:b4:0f:f1:dc:5c:59:56:7f:b9:c7:2e:68:86:7b: 7e:fa:04:fe -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6yLLESSbzujMx51UB/U22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz Y2UxYmMwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTljY2ZhZjVmNzg0ODYxNDMwNjg1YzFiN2Q0ZmQ5MDFmYjIxNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBalqekFDA+VTSikACMS9c9EsRMS wgdkaYpYa9yaiWg/ykVX5gm9DvBG+d5ONPG1WzZ6KuaFFzYvS0SxkqSYWpw7p23D qUdyiqsVMFowLKTtgqEQ1rbBeCtV3tyXGoNM7WkTRiGI7yUFrpMAgufLxg0XJ0QB f7Wzsfiy8Fv2kBt0WsyMZGwzGZ6FULurlfp+PkN5Bb8056EtKC3pvCff8VXq108v FB4L1YTNuL97HYaMXApX8GxDopH2wlEeSKKrObnTqyls90+AZnlmLHCvPU7NwcCt CzqdSr8vykO2liUZQFvTXz1Q8rwvIcQ8RWI9UewXQQKR+IRpsP48/Qn5nwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKGcz69feEhhQwaFwbfU/ZAfshS3MB8GA1UdIwQY MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct MmFkMTk1MjY0YzcyLzEvb1p6UHIxOTRTR0ZEQm9YQnQ5VDlrQi15RkxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWSRNAwQA WSkZAwQBWS/0AwQDXrFQAwQAvNSBMA0GCSqGSIb3DQEBCwUAA4IBAQCH3Alctonj I3E5m5tVszjslKHqvCjQfhT9v+vlJ/ZJGyupqKw5F/J5Y/3VfTd2nxl1hTophrnc bwqLewoZF13nrZolrlvnr+60kUQ11/1w65ZAVwBt9LqHU4ySfknUm52xkpFJ35iR 3JwUOVggEtawEA2pSNjqGIl/WLN3xFGM0FttxsFDgvRqu8Za7dHRXwEPYbD1ME+C eS/KBbcqFRna1LzbJ9magbDF+Pj9/Hvjavlvre9NXhK7Xa3GoZpUaIBPicFuE7Z4 /hQhnfwn3ZIXaRwkkJf9QTvKmqoe/i+qw9e69R1IvkRhYSTxFW/ptA/x3FxZVn+5 xy5ohnt++gT+ -----END CERTIFICATE-----Generated at Sat Jan 10 22:33:20 2026 by rpki-client