This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa File: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (raw, json) Hash identifier: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms= Subject key identifier: 39:98:56:53:01:93:24:98:32:48:EE:26:E1:0F:B5:73:7C:E0:EC:12 Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c Certificate serial: 019B7C800573581EE319D9BFCEB1C86B1720 Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 160.97.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:05:73:58:1e:e3:19:d9:bf:ce:b1:c8:6b:17:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39985653019324983248ee26e10fb5737ce0ec12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:31:fa:09:83:58:95:01:79:84:01:35:94: a2:b4:35:74:ef:a1:50:56:58:be:fe:7a:89:e4:ae: c8:cc:d7:9c:3e:2e:12:be:ae:e4:de:61:92:b9:be: 46:47:af:78:62:aa:02:bc:94:5f:25:eb:db:60:26: 1d:97:a6:38:d0:80:65:62:e0:9e:a0:5c:3e:51:27: a4:28:87:ed:3b:e9:a6:05:1b:f9:ba:ac:c2:db:f0: f2:4e:a6:1a:55:35:61:7d:88:ab:89:7d:60:29:47: 2a:a3:09:15:09:fb:bd:c7:b9:56:65:91:f0:48:b7: 45:cb:d3:e4:1b:87:d2:2a:7a:e2:c0:a5:04:bb:f2: 25:9b:12:88:9e:bc:08:39:75:ef:0b:39:79:64:ff: c8:99:16:3b:44:b1:97:c5:75:44:d5:4a:20:6d:e1: 85:a4:13:24:e8:06:e3:ae:e6:86:a1:49:de:75:14: 59:0e:77:97:f1:a5:e0:4c:22:a9:66:84:bb:fd:b0: 80:cf:5f:0b:6e:37:13:02:35:29:e8:4a:20:e3:50: 12:06:bc:13:4c:39:d8:50:da:37:07:14:db:1a:a6: 51:a5:03:cc:ad:23:0f:37:02:c5:23:3e:88:a8:7e: 1e:fa:3a:ca:1a:de:06:1a:1f:90:7f:90:ef:90:47: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:98:56:53:01:93:24:98:32:48:EE:26:E1:0F:B5:73:7C:E0:EC:12 X509v3 Authority Key Identifier: keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption c8:db:78:f4:e9:2c:2d:c9:24:76:f7:49:31:4e:c9:31:11:90: dc:54:f4:4f:80:4d:f3:09:40:6d:74:9f:d4:45:3b:3b:47:a8: 5b:a1:91:db:ec:32:51:86:d9:59:fc:f0:1a:1c:e9:8d:96:91: 23:11:a6:57:85:57:1d:70:39:9b:b3:0e:c6:c3:46:77:67:07: 66:f2:9d:74:4e:11:29:8a:00:b9:2f:6b:ce:22:5b:10:81:81: e0:c2:f4:9c:ac:91:90:df:e1:f3:e1:f5:03:29:9b:22:52:57: 93:ee:d7:0f:bb:92:88:17:62:89:45:7a:a4:98:0d:9a:d2:2c: 50:95:35:b2:6c:9c:79:11:08:92:e4:f6:6b:2a:62:0a:d7:50: 0f:a4:07:59:22:02:64:83:1e:e0:be:8b:7f:fe:66:2c:2f:6a: 3d:e4:f7:da:b2:db:9d:92:72:9b:fb:d5:a0:2d:4a:33:f2:8b: 99:c5:40:c9:94:ea:3f:50:ed:e4:e6:94:b0:17:9d:49:4f:ae: b2:20:93:2b:85:1f:54:74:d5:c9:a3:7b:0b:ff:9f:9e:4c:53: d4:68:73:1c:45:ed:41:8f:69:eb:13:0c:ea:3d:20:85:9b:97: 37:b8:c8:72:f2:57:c3:85:c5:c3:0b:80:56:af:11:73:4d:b9: dc:36:16:61 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8gAVzWB7jGdm/zrHIaxcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYjYxMzNkNWMyMTA5ZDhhNmY5YmJjYWE0OTZkYmVhZTM0 Nzk3NWMwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTk4NTY1MzAxOTMyNDk4MzI0OGVlMjZlMTBmYjU3MzdjZTBlYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt0x+gmDWJUBeYQBNZSitDV076FQ Vli+/nqJ5K7IzNecPi4Svq7k3mGSub5GR694YqoCvJRfJevbYCYdl6Y40IBlYuCe oFw+USekKIftO+mmBRv5uqzC2/DyTqYaVTVhfYiriX1gKUcqowkVCfu9x7lWZZHw SLdFy9PkG4fSKnriwKUEu/IlmxKInrwIOXXvCzl5ZP/ImRY7RLGXxXVE1UogbeGF pBMk6AbjruaGoUnedRRZDneX8aXgTCKpZoS7/bCAz18LbjcTAjUp6Eog41ASBrwT TDnYUNo3BxTbGqZRpQPMrSMPNwLFIz6IqH4e+jrKGt4GGh+Qf5DvkEd+7QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDmYVlMBkySYMkjuJuEPtXN84OwSMB8GA1UdIwQY MBaAFI+2Ez1cIQnYpvm7yqSW2+rjR5dcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQt NDUxYTlhZTRjZTUxLzEvT1poV1V3R1RKSmd5U080bTRRLTFjM3pnN0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQtNDUxYTlhZTRjZTUx LzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoGEwDQYJ KoZIhvcNAQELBQADggEBAMjbePTpLC3JJHb3STFOyTERkNxU9E+ATfMJQG10n9RF OztHqFuhkdvsMlGG2Vn88Boc6Y2WkSMRpleFVx1wOZuzDsbDRndnB2bynXROESmK ALkva84iWxCBgeDC9JyskZDf4fPh9QMpmyJSV5Pu1w+7kogXYolFeqSYDZrSLFCV NbJsnHkRCJLk9msqYgrXUA+kB1kiAmSDHuC+i3/+Ziwvaj3k99qy252Scpv71aAt SjPyi5nFQMmU6j9Q7eTmlLAXnUlPrrIgkyuFH1R01cmjewv/n55MU9RocxxF7UGP aesTDOo9IIWblze4yHLyV8OFxcMLgFavEXNNudw2FmE= -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:00 2026 by rpki-client