This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa File: OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa (raw, json) Hash identifier: UMdzymruvfotkFYiGIjdIXyvlwL7DTcm4OFrb3LPVB0= Subject key identifier: 3B:38:4A:C0:DE:F5:6B:91:0E:82:6A:12:D5:3C:6F:6C:8E:E2:2D:44 Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Certificate serial: 019B7E388AB4D1102C8F726D6DC457791583 Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199042 IP address blocks: 176.115.168.0/21 maxlen: 21 176.115.168.0/24 maxlen: 24 176.115.169.0/24 maxlen: 24 176.115.170.0/24 maxlen: 24 176.115.171.0/24 maxlen: 24 176.115.172.0/24 maxlen: 24 176.115.173.0/24 maxlen: 24 176.115.174.0/24 maxlen: 24 176.115.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8a:b4:d1:10:2c:8f:72:6d:6d:c4:57:79:15:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b384ac0def56b910e826a12d53c6f6c8ee22d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:92:20:4d:83:96:22:bd:42:68:d0:ae:94:aa: 84:57:5c:b8:9c:94:6e:32:31:3d:45:fe:fb:8a:dd: 84:b3:cf:d8:8d:b8:49:e6:29:7a:b0:44:33:25:34: 8d:d1:ae:e2:f7:17:7b:5f:02:df:cd:e1:32:55:9b: 2a:aa:d6:a8:06:da:68:67:88:ab:ce:af:a2:de:1c: e3:f5:fc:05:ae:ac:3f:75:4b:58:fe:95:80:eb:ac: b4:36:c1:e9:0b:7c:2d:aa:e2:5e:d5:76:37:f1:36: 7f:17:ee:5a:1d:87:b3:ea:24:09:95:13:d1:cd:47: ea:9d:5a:c9:2e:16:a3:7b:04:f9:27:24:8d:df:bf: 8b:35:c0:be:2d:f1:35:d5:b2:20:11:3c:90:3f:e3: 33:d6:6d:90:09:25:f0:0b:57:e0:9b:9c:d8:2e:57: b6:cf:47:28:3e:48:30:96:91:94:1a:1a:cc:6c:72: 72:66:7a:7e:18:53:ef:ee:e3:cf:18:e0:9b:fc:03: 86:2e:89:46:e9:cd:4c:f2:a8:71:ba:44:2b:f3:a2: 0e:6f:e7:69:8a:80:67:b1:e7:29:24:40:35:1f:02: da:7f:3f:cb:a5:90:3e:18:f8:03:62:a3:ac:70:12: 83:50:34:30:73:38:dc:16:e5:25:fa:cb:5a:7d:76: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:38:4A:C0:DE:F5:6B:91:0E:82:6A:12:D5:3C:6F:6C:8E:E2:2D:44 X509v3 Authority Key Identifier: keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.115.168.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:e0:d6:9a:6d:e5:aa:2a:1b:87:c7:89:4f:0d:b4:38:76:e8: 98:e1:44:ec:b8:55:fc:64:26:b8:cd:42:ac:17:3a:f7:2c:84: 54:68:88:4a:64:ca:08:13:b3:a0:ee:9c:d0:86:e1:c0:15:33: 25:d2:04:eb:5b:78:32:0b:39:51:ad:e2:ff:f6:21:8f:7b:7c: b2:c0:95:5e:5d:20:53:6c:de:d5:24:94:0b:39:b3:52:37:1b: 62:a6:ff:e1:3a:b0:90:74:bb:c8:7b:8c:7c:07:37:e1:8e:f2: 68:43:af:f6:17:35:63:9e:2e:d7:14:8f:79:d8:90:1b:6d:8b: 5e:1b:8d:22:f2:f8:fa:73:f8:78:fc:ea:2f:d8:9d:64:d1:4a: f0:f7:37:7b:c8:61:c4:fd:66:87:2d:c3:3b:48:98:a2:dc:d4: bc:b2:65:31:b9:44:77:8c:9b:01:b0:ae:d9:d3:c0:06:d0:8b: 23:a9:7e:f1:b8:52:73:69:bf:09:44:36:ce:5b:63:48:8a:2b: 4f:1a:ea:af:37:d2:35:57:7e:47:7d:a3:a1:18:d8:76:bf:09: 36:b4:4a:c0:93:be:ac:9d:ef:03:a5:cd:63:32:e3:2d:9f:bb: 1a:0a:b9:54:ee:fe:31:a6:f8:e3:c2:bd:d3:62:a9:f1:0d:8f: 74:c7:db:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIq00RAsj3JtbcRXeRWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy ZTRiMDQwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjM4NGFjMGRlZjU2YjkxMGU4MjZhMTJkNTNjNmY2YzhlZTIyZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZIgTYOWIr1CaNCulKqEV1y4nJRu MjE9Rf77it2Es8/YjbhJ5il6sEQzJTSN0a7i9xd7XwLfzeEyVZsqqtaoBtpoZ4ir zq+i3hzj9fwFrqw/dUtY/pWA66y0NsHpC3wtquJe1XY38TZ/F+5aHYez6iQJlRPR zUfqnVrJLhajewT5JySN37+LNcC+LfE11bIgETyQP+Mz1m2QCSXwC1fgm5zYLle2 z0coPkgwlpGUGhrMbHJyZnp+GFPv7uPPGOCb/AOGLolG6c1M8qhxukQr86IOb+dp ioBnsecpJEA1HwLafz/LpZA+GPgDYqOscBKDUDQwczjcFuUl+stafXbArQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDs4SsDe9WuRDoJqEtU8b2yO4i1EMB8GA1UdIwQY MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt YTA0NzgxNmQ2MjgzLzEvT3poS3dONzFhNUVPZ21vUzFUeHZiSTdpTFVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHOoMA0G CSqGSIb3DQEBCwUAA4IBAQCe4NaabeWqKhuHx4lPDbQ4duiY4UTsuFX8ZCa4zUKs Fzr3LIRUaIhKZMoIE7Og7pzQhuHAFTMl0gTrW3gyCzlRreL/9iGPe3yywJVeXSBT bN7VJJQLObNSNxtipv/hOrCQdLvIe4x8BzfhjvJoQ6/2FzVjni7XFI952JAbbYte G40i8vj6c/h4/Oov2J1k0Urw9zd7yGHE/WaHLcM7SJii3NS8smUxuUR3jJsBsK7Z 08AG0IsjqX7xuFJzab8JRDbOW2NIiitPGuqvN9I1V35HfaOhGNh2vwk2tErAk76s ne8Dpc1jMuMtn7saCrlU7v4xpvjjwr3TYqnxDY90x9tA -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:26 2026 by rpki-client