This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/OZZagCp_lbH3pvtJjJ0dboQuGBI.roa File: OZZagCp_lbH3pvtJjJ0dboQuGBI.roa (raw, json) Hash identifier: 6iWntlAxdQMLyYESgYnXC7ZaHlloi2wiFiJLObeApDc= Subject key identifier: 39:96:5A:80:2A:7F:95:B1:F7:A6:FB:49:8C:9D:1D:6E:84:2E:18:12 Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Certificate serial: 019B92B64AE36D2E4FF48E3358AA6231C6CF Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/OZZagCp_lbH3pvtJjJ0dboQuGBI.roa Signing time: Tue 06 Jan 2026 09:49:38 +0000 ROA not before: Tue 06 Jan 2026 09:49:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.9.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:b6:4a:e3:6d:2e:4f:f4:8e:33:58:aa:62:31:c6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Validity Not Before: Jan 6 09:49:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39965a802a7f95b1f7a6fb498c9d1d6e842e1812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:18:55:df:b1:a0:91:d9:2f:20:5c:5d:b4: 38:50:9a:c5:58:11:a7:f4:c6:90:61:fb:5b:c9:eb: 42:ab:11:a9:d9:14:72:12:13:11:87:e4:0d:59:09: 05:c3:5c:71:47:78:cc:ac:e9:7c:99:6f:28:de:78: af:8a:ac:2a:53:a0:4e:24:16:c8:d9:fd:b1:ae:d1: c8:01:24:c8:9c:6f:f5:9b:d4:c3:b9:d0:87:85:cb: 73:4a:e4:0f:e7:f3:a2:72:8a:94:0f:1d:89:2c:66: ff:3e:9e:be:c8:3d:31:a3:b8:c6:9d:c2:df:95:81: ef:39:fc:a7:57:b7:ec:c8:f5:fd:58:14:0d:a1:d7: 83:8d:7d:41:3c:89:71:02:ba:2e:f0:a2:7f:ff:67: cb:5e:62:54:31:f2:f2:25:d6:50:15:f3:bc:8c:83: 8c:9b:33:80:2a:08:ea:7b:d6:03:b3:ef:76:7d:e2: 5d:c7:58:91:38:34:34:a0:52:f7:7d:21:34:cd:75: 1e:6e:c7:ef:40:86:90:4d:2f:f6:ca:e2:c6:81:6a: ec:5c:88:bd:83:9e:2b:2d:14:aa:c9:3c:d3:31:bb: a5:ad:c3:9c:f7:fd:b1:0d:0b:a5:df:0b:0e:be:a5: 03:35:05:d5:0a:df:ec:91:63:b3:e3:4e:a1:3a:23: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:96:5A:80:2A:7F:95:B1:F7:A6:FB:49:8C:9D:1D:6E:84:2E:18:12 X509v3 Authority Key Identifier: keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/OZZagCp_lbH3pvtJjJ0dboQuGBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.16.0/24 Signature Algorithm: sha256WithRSAEncryption 47:49:97:e5:08:cc:e7:97:7c:75:a2:f4:a8:29:9e:35:01:d1: 78:ac:16:1b:15:63:26:39:42:0d:ae:c1:00:a7:f1:86:1c:c6: 25:69:8c:2a:64:85:35:21:2c:54:cd:7a:37:0d:34:49:0d:fd: c9:f2:8d:ce:50:25:a7:58:64:b2:e9:00:84:b6:07:fd:6f:18: c9:58:3e:6e:96:f4:8e:6e:69:bb:07:6f:a5:ed:aa:1a:f3:59: 8f:e7:25:1a:e6:4d:b8:e6:08:ed:da:8f:08:95:83:45:e6:82: 81:3a:38:cc:fd:41:58:8c:39:38:b2:9d:9a:bd:b8:3a:8c:18: 19:ac:8a:16:0f:15:79:ae:c2:21:fe:46:5c:c0:4e:8f:53:43: b6:fa:fa:b3:82:40:47:86:4c:03:8d:a0:da:0a:c4:53:d9:c3: d8:63:69:fb:94:fd:b2:c5:70:60:79:e2:e1:34:e4:e8:1b:27: 7a:f9:68:06:8c:26:f1:4e:ac:18:d9:2a:0c:75:3c:e1:0b:f5: 10:73:d2:2b:73:e4:d4:86:25:1c:b8:82:c2:6f:fc:e4:11:17: 4a:3e:65:cf:61:1a:e8:15:14:14:d9:b4:7c:36:77:d5:29:85: ff:15:7e:ac:cc:5c:dc:d1:0b:0b:d7:90:0f:ab:6e:f6:e9:22: 97:82:f6:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuStkrjbS5P9I4zWKpiMcbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVmMjQ2YmZjMWVhOGZjMzg2Yzg2ZGQ0OWZiYWE4ZDg4 YzQ4ODEwHhcNMjYwMTA2MDk0OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTk2NWE4MDJhN2Y5NWIxZjdhNmZiNDk4YzlkMWQ2ZTg0MmUxODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfAYVd+xoJHZLyBcXbQ4UJrFWBGn 9MaQYftbyetCqxGp2RRyEhMRh+QNWQkFw1xxR3jMrOl8mW8o3niviqwqU6BOJBbI 2f2xrtHIASTInG/1m9TDudCHhctzSuQP5/OicoqUDx2JLGb/Pp6+yD0xo7jGncLf lYHvOfynV7fsyPX9WBQNodeDjX1BPIlxArou8KJ//2fLXmJUMfLyJdZQFfO8jIOM mzOAKgjqe9YDs+92feJdx1iRODQ0oFL3fSE0zXUebsfvQIaQTS/2yuLGgWrsXIi9 g54rLRSqyTzTMbulrcOc9/2xDQul3wsOvqUDNQXVCt/skWOz406hOiMmfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmWWoAqf5Wx96b7SYydHW6ELhgSMB8GA1UdIwQY MBaAFOxl8ka/weqPw4bIbdSfuqjYjEiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTkt NzgxMjgwZmQyNDEyLzEvT1paYWdDcF9sYkgzcHZ0SmpKMGRib1F1R0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTktNzgxMjgwZmQyNDEy LzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQkQMA0G CSqGSIb3DQEBCwUAA4IBAQBHSZflCMznl3x1ovSoKZ41AdF4rBYbFWMmOUINrsEA p/GGHMYlaYwqZIU1ISxUzXo3DTRJDf3J8o3OUCWnWGSy6QCEtgf9bxjJWD5ulvSO bmm7B2+l7aoa81mP5yUa5k245gjt2o8IlYNF5oKBOjjM/UFYjDk4sp2avbg6jBgZ rIoWDxV5rsIh/kZcwE6PU0O2+vqzgkBHhkwDjaDaCsRT2cPYY2n7lP2yxXBgeeLh NOToGyd6+WgGjCbxTqwY2SoMdTzhC/UQc9Irc+TUhiUcuILCb/zkERdKPmXPYRro FRQU2bR8NnfVKYX/FX6szFzc0QsL15APq2726SKXgva9 -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:50 2026 by rpki-client