This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OzhFXyA00__fB9uqQwmcQCQoW60.roa File: OzhFXyA00__fB9uqQwmcQCQoW60.roa (raw, json) Hash identifier: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984= Subject key identifier: 3B:38:45:5F:20:34:D3:FF:DF:07:DB:AA:43:09:9C:40:24:28:5B:AD Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791016107B792E6274BC271FE65DF12F Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OzhFXyA00__fB9uqQwmcQCQoW60.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 46.37.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:16:10:7b:79:2e:62:74:bc:27:1f:e6:5d:f1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b38455f2034d3ffdf07dbaa43099c4024285bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:9e:b6:e7:53:e7:0e:33:50:06:34:c1:54: 31:55:a0:74:38:a5:9f:6c:96:05:b3:82:dc:f7:0d: e0:df:c6:48:9a:c9:33:7e:1d:50:a2:1d:71:38:f9: f2:71:14:af:bc:c3:18:d0:b2:04:83:b1:f2:e3:7d: f1:f0:c3:db:f7:91:13:b9:9e:55:b1:a6:43:4d:37: 4a:7d:ef:23:c1:11:20:57:4f:5c:d8:fc:e9:2b:cb: bc:70:bb:9c:56:1c:f1:45:c2:ca:c1:c6:2b:e7:29: 39:01:fd:c3:9d:56:50:a3:24:6a:50:a0:24:6e:7e: 10:83:23:88:84:6f:2b:44:1e:ff:0a:66:14:aa:87: b9:61:9d:75:f2:2e:8f:94:f7:0d:fb:f3:45:eb:03: c5:86:7c:46:0b:41:42:b7:1a:8f:0f:b5:8c:f9:6b: cf:ca:12:2a:3a:5b:a7:5b:9a:23:d4:61:03:e2:09: 17:68:45:06:0d:fd:49:af:01:48:a7:bb:11:5b:b8: 3d:0c:6c:cd:87:25:7c:ec:bc:da:3d:ae:ae:74:07: 99:d2:66:14:6c:b9:2e:cb:d9:73:0a:8f:c3:cc:40: 3d:43:24:08:4e:77:71:5f:77:bc:d7:23:d0:2c:98: fc:80:3e:b6:7a:c2:9f:aa:c8:fe:21:73:73:12:66: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:38:45:5F:20:34:D3:FF:DF:07:DB:AA:43:09:9C:40:24:28:5B:AD X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OzhFXyA00__fB9uqQwmcQCQoW60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.110.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:86:83:ea:b9:40:46:66:db:a9:60:d4:5b:ca:36:42:85:fa: 85:a7:b5:6b:86:5c:a3:51:de:3f:61:4a:f0:42:50:4f:fd:b5: 8b:f0:b9:f8:d0:e7:5f:44:f5:fe:55:f5:91:2a:cd:9c:a0:29: 82:32:78:11:71:e5:5f:65:fe:59:e0:4b:3e:9e:2c:e2:bc:7d: e3:a2:d4:30:ca:8e:a0:23:23:71:49:d9:a5:ac:fd:1f:39:7f: 3e:6b:3b:ef:33:fc:2f:2e:2f:67:25:e1:fe:01:37:a2:83:1d: 52:c8:98:30:68:94:0e:d7:25:23:80:70:47:e6:5f:68:39:37: 0f:a8:84:c1:7f:93:77:96:11:33:40:ac:e9:c3:f5:92:5a:bc: 47:79:8d:b2:69:8b:95:ba:ea:75:85:24:48:be:ee:84:6c:77: 99:37:e7:f3:de:aa:02:cd:f1:ee:5d:93:d5:66:d4:bd:6d:ca: 04:d1:5c:22:0c:45:9f:4d:d7:f0:04:3d:13:8e:69:44:bd:59: 9c:e3:f2:33:ed:1b:1c:77:f8:b9:98:a4:9d:2d:dc:3d:f5:0c: 42:22:44:5a:81:77:a5:b7:1c:f0:30:cd:c9:37:2b:5c:bd:68: cc:fb:bf:fd:03:b9:bc:68:b9:31:3a:77:39:64:95:ab:bc:69: 5d:0a:7e:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBYQe3kuYnS8Jx/mXfEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjM4NDU1ZjIwMzRkM2ZmZGYwN2RiYWE0MzA5OWM0MDI0Mjg1YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbietudT5w4zUAY0wVQxVaB0OKWf bJYFs4Lc9w3g38ZImskzfh1Qoh1xOPnycRSvvMMY0LIEg7Hy433x8MPb95ETuZ5V saZDTTdKfe8jwREgV09c2PzpK8u8cLucVhzxRcLKwcYr5yk5Af3DnVZQoyRqUKAk bn4QgyOIhG8rRB7/CmYUqoe5YZ118i6PlPcN+/NF6wPFhnxGC0FCtxqPD7WM+WvP yhIqOlunW5oj1GED4gkXaEUGDf1JrwFIp7sRW7g9DGzNhyV87LzaPa6udAeZ0mYU bLkuy9lzCo/DzEA9QyQITndxX3e81yPQLJj8gD62esKfqsj+IXNzEmZWkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDs4RV8gNNP/3wfbqkMJnEAkKFutMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvT3poRlh5QTAwX19mQjl1cVF3bWNRQ1FvVzYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVuMA0G CSqGSIb3DQEBCwUAA4IBAQALhoPquUBGZtupYNRbyjZChfqFp7VrhlyjUd4/YUrw QlBP/bWL8Ln40OdfRPX+VfWRKs2coCmCMngRceVfZf5Z4Es+nizivH3jotQwyo6g IyNxSdmlrP0fOX8+azvvM/wvLi9nJeH+ATeigx1SyJgwaJQO1yUjgHBH5l9oOTcP qITBf5N3lhEzQKzpw/WSWrxHeY2yaYuVuup1hSRIvu6EbHeZN+fz3qoCzfHuXZPV ZtS9bcoE0VwiDEWfTdfwBD0TjmlEvVmc4/Iz7Rscd/i5mKSdLdw99QxCIkRagXel txzwMM3JNytcvWjM+7/9A7m8aLkxOnc5ZJWrvGldCn7w -----END CERTIFICATE-----Generated at Mon Jan 19 17:06:13 2026 by rpki-client