This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/OZMA82xPSJu-yBhBRmE2uQQQB7c.roa
File: OZMA82xPSJu-yBhBRmE2uQQQB7c.roa (raw, json)
Hash identifier: hd/p26xBT3/OwpQY6ul+XP0iSi+M0eAbCh1LP64Oo+I=
Subject key identifier: 39:93:00:F3:6C:4F:48:9B:BE:C8:18:41:46:61:36:B9:04:10:07:B7
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019B7D5AAFEFF75D10FB628C64A58A44C0D5
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/OZMA82xPSJu-yBhBRmE2uQQQB7c.roa
Signing time: Fri 02 Jan 2026 06:17:33 +0000
ROA not before: Fri 02 Jan 2026 06:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48173
IP address blocks: 193.101.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:af:ef:f7:5d:10:fb:62:8c:64:a5:8a:44:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jan 2 06:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399300f36c4f489bbec81841466136b9041007b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:25:3c:b8:b5:f8:bd:1e:50:0b:f5:62:66:
10:42:56:c4:ee:78:c7:72:7b:b7:b4:db:c6:b1:e5:
f1:fc:77:f7:38:31:48:da:7b:15:02:fc:cb:e8:17:
fa:d0:ac:7b:de:73:09:2d:9e:02:17:69:01:c4:0d:
ab:90:05:55:11:e2:49:96:c6:7d:ff:cf:a6:fa:93:
17:0b:0b:6f:23:e8:3b:c4:37:c2:13:f1:cd:43:56:
f6:ce:e8:01:7c:b1:7a:d6:2b:30:c0:05:f4:70:f8:
f8:2f:35:a3:9d:f3:cb:ce:7e:66:49:61:8e:8e:f1:
d4:17:15:66:51:2a:a7:5c:4e:58:26:c4:48:d7:9e:
0d:1f:8c:ca:99:8b:f3:33:be:69:39:69:2c:42:a5:
91:89:e8:e9:9c:85:51:4b:32:4c:c0:09:a5:b1:74:
c6:d1:8e:02:c9:36:97:da:5a:b5:54:2a:bb:d8:d6:
2f:0f:ed:37:8e:5a:f7:4d:9e:80:a9:48:bf:f7:11:
ff:03:f2:5d:c3:64:90:86:85:3d:74:91:4d:87:b2:
86:eb:e6:f9:a6:ac:a6:13:35:0f:36:21:bd:9d:bf:
55:b9:56:5c:ad:60:b4:7c:08:c1:da:b8:29:1d:5e:
2f:56:15:ca:83:b2:96:0e:1a:32:9b:c6:d8:7b:b2:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:00:F3:6C:4F:48:9B:BE:C8:18:41:46:61:36:B9:04:10:07:B7
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/OZMA82xPSJu-yBhBRmE2uQQQB7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:90:6e:91:6f:18:ee:5a:f6:2f:73:ef:94:0c:32:ef:e9:b1:
10:38:e8:b0:2e:dd:ff:d3:62:9c:32:61:29:1d:70:cc:e5:ff:
9c:6d:43:c8:e7:12:a0:16:9d:50:75:e7:52:a2:de:44:f5:70:
92:25:10:17:aa:f2:6c:ce:29:2e:3c:48:89:48:9b:5d:06:20:
44:76:c3:39:6d:2c:33:ac:a8:b9:03:07:4a:e3:91:c1:75:f2:
b1:0c:73:4c:c0:a2:7e:66:5e:1e:ed:03:92:b5:b1:54:8d:43:
f7:c4:73:5a:ff:f0:c0:a1:57:22:d8:8c:89:cf:70:49:23:9e:
a5:8f:32:0c:4a:b3:6e:b6:a9:11:ad:98:b1:0a:26:c4:9c:a7:
77:dd:16:9c:30:c1:fd:c9:74:4b:ea:36:f4:01:17:3c:e7:56:
5f:95:1b:10:34:5d:81:92:6f:62:e6:71:99:3a:30:82:ea:43:
d9:f9:fa:56:86:47:0b:0c:8e:5e:be:68:d3:67:eb:04:68:db:
88:7e:3b:c2:c9:95:33:b8:81:6f:03:7e:25:22:65:4e:45:d3:
a3:fc:be:33:76:44:e0:16:cf:62:77:ef:03:ed:45:db:f6:db:
92:39:7a:fc:c0:b4:36:8a:91:2c:52:27:68:64:6d:8e:77:f4:
23:90:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:34 2026 by rpki-client