This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/oztBXyy3buPJ87mv28gbdNDGLjw.roa File: oztBXyy3buPJ87mv28gbdNDGLjw.roa (raw, json) Hash identifier: j94QmNmrVHRGHpcXkadwtbn926rIcrEUhkEOlIuoY3M= Subject key identifier: A3:3B:41:5F:2C:B7:6E:E3:C9:F3:B9:AF:DB:C8:1B:74:D0:C6:2E:3C Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Certificate serial: 019B797F18FEB3FB2D411303CF69BBBE0C1A Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/oztBXyy3buPJ87mv28gbdNDGLjw.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 146.19.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:fe:b3:fb:2d:41:13:03:cf:69:bb:be:0c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a33b415f2cb76ee3c9f3b9afdbc81b74d0c62e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:0e:2c:c8:bf:fb:b4:08:8b:3e:01:c9:98: fb:b2:6c:7e:b2:f3:98:8e:56:3a:e9:49:fb:2c:b2: f5:ca:44:ff:36:38:86:c9:2d:f8:64:af:48:3c:75: 07:1d:f9:14:60:5b:da:1b:8a:c8:74:ad:3a:49:ad: 89:0f:6d:96:1a:f1:4f:9a:f6:f8:fa:ea:05:ac:f4: 6e:53:9f:7f:47:3d:71:f0:70:59:d2:e4:d1:ba:87: ce:2b:4e:bf:bf:93:6b:3b:75:d6:5a:b8:26:9c:c7: e4:7f:ce:7e:a0:b1:a4:e5:73:11:fb:d4:aa:37:fa: c7:62:2d:fe:3c:3d:b3:04:13:7e:2c:f4:53:74:c9: 2a:fb:33:15:02:f9:ab:81:44:58:86:e2:ce:99:2f: a4:27:05:ae:65:36:6a:97:0d:28:7f:c4:e7:d6:6f: dd:dc:18:eb:9b:72:e1:f7:b0:50:42:ae:32:7f:3f: c3:30:9a:3d:95:da:f9:08:72:f9:75:ad:b5:62:8c: ed:97:88:d6:9c:2b:d5:a8:ab:29:f3:5c:22:1f:e5: 39:78:dd:d9:96:d3:2f:c9:29:45:8f:7c:76:26:49: 0b:8e:be:a7:c5:8b:09:c0:ee:16:4b:6f:bb:14:3c: b1:60:c6:09:73:32:d2:fb:ce:d9:38:6c:a8:3d:0c: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3B:41:5F:2C:B7:6E:E3:C9:F3:B9:AF:DB:C8:1B:74:D0:C6:2E:3C X509v3 Authority Key Identifier: keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/oztBXyy3buPJ87mv28gbdNDGLjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.193.0/24 Signature Algorithm: sha256WithRSAEncryption 37:d8:bb:bc:2e:21:ab:c8:40:d9:e0:3a:dd:84:19:81:47:a1: 14:cb:96:cb:ba:30:7a:53:64:d8:c8:8b:38:12:59:b5:55:85: 6d:00:c3:3b:99:99:b3:3c:f6:5c:8d:4a:75:55:3e:f2:bc:2c: 7e:30:ee:32:d0:0f:64:eb:d5:07:7c:6d:43:b8:d3:6a:20:3f: 16:8e:11:ee:4d:60:41:76:71:c5:1c:ec:1b:ba:dc:d2:8b:36: ee:08:91:c6:22:2c:9d:35:75:ce:72:97:d2:8b:50:1d:7b:52: bc:53:a1:ba:e9:bb:9b:8b:6c:56:ca:94:cc:9f:9c:c5:71:03: 9b:af:86:39:e4:ef:68:1e:24:90:e8:cd:4a:e5:9b:67:ea:7e: b2:2c:80:72:45:0c:24:f6:72:43:da:53:58:98:ec:dd:b3:1f: 86:10:65:b4:17:ee:d0:2a:7a:02:f7:bf:ce:90:ad:36:8e:df: ef:73:b0:aa:22:b0:d2:fe:82:aa:63:8d:d9:5e:a3:86:16:f7: 29:5f:ae:2d:95:62:97:2e:b5:76:b5:51:0f:72:db:74:a6:ae: 8c:87:36:2c:3b:f4:1f:73:99:65:b5:c0:5e:e4:19:9c:ee:ca: a5:b5:b3:6e:16:39:e7:3d:9f:9e:ce:4a:6e:eb:a4:26:d5:f5: f4:c7:24:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxj+s/stQRMDz2m7vgwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFm Mzg5ZjUwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzNiNDE1ZjJjYjc2ZWUzYzlmM2I5YWZkYmM4MWI3NGQwYzYyZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CgOLMi/+7QIiz4ByZj7smx+svOY jlY66Un7LLL1ykT/NjiGyS34ZK9IPHUHHfkUYFvaG4rIdK06Sa2JD22WGvFPmvb4 +uoFrPRuU59/Rz1x8HBZ0uTRuofOK06/v5NrO3XWWrgmnMfkf85+oLGk5XMR+9Sq N/rHYi3+PD2zBBN+LPRTdMkq+zMVAvmrgURYhuLOmS+kJwWuZTZqlw0of8Tn1m/d 3Bjrm3Lh97BQQq4yfz/DMJo9ldr5CHL5da21Yoztl4jWnCvVqKsp81wiH+U5eN3Z ltMvySlFj3x2JkkLjr6nxYsJwO4WS2+7FDyxYMYJczLS+87ZOGyoPQzTwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKM7QV8st27jyfO5r9vIG3TQxi48MB8GA1UdIwQY MBaAFEGWIw5Y3swMvPsV9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQt MmJlZmZmZDU3ZmI3LzEvb3p0Qlh5eTNidVBKODdtdjI4Z2JkTkRHTGp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3 LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPBMA0G CSqGSIb3DQEBCwUAA4IBAQA32Lu8LiGryEDZ4DrdhBmBR6EUy5bLujB6U2TYyIs4 Elm1VYVtAMM7mZmzPPZcjUp1VT7yvCx+MO4y0A9k69UHfG1DuNNqID8WjhHuTWBB dnHFHOwbutzSizbuCJHGIiydNXXOcpfSi1Ade1K8U6G66bubi2xWypTMn5zFcQOb r4Y55O9oHiSQ6M1K5Ztn6n6yLIByRQwk9nJD2lNYmOzdsx+GEGW0F+7QKnoC97/O kK02jt/vc7CqIrDS/oKqY43ZXqOGFvcpX64tlWKXLrV2tVEPctt0pq6MhzYsO/Qf c5lltcBe5Bmc7sqltbNuFjnnPZ+ezkpu66Qm1fX0xySj -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:08 2026 by rpki-client