This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ozUGmLK3Ut-yqZizePD9jwgQRns.roa File: ozUGmLK3Ut-yqZizePD9jwgQRns.roa (raw, json) Hash identifier: tn5q3803T/X4BIVwqPPQiiMqFpSvWzy5A17hoVVzEoM= Subject key identifier: A3:35:06:98:B2:B7:52:DF:B2:A9:98:B3:78:F0:FD:8F:08:10:46:7B Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B95631B2B471D1EE11F305189517642C5 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ozUGmLK3Ut-yqZizePD9jwgQRns.roa Signing time: Tue 06 Jan 2026 22:17:38 +0000 ROA not before: Tue 06 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20915 IP address blocks: 87.254.0.0/19 maxlen: 19 87.254.25.0/24 maxlen: 24 217.25.0.0/20 maxlen: 24 2a00:eac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:63:1b:2b:47:1d:1e:e1:1f:30:51:89:51:76:42:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 6 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3350698b2b752dfb2a998b378f0fd8f0810467b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:ab:81:c3:30:35:a1:0a:ef:00:a6:64:d6: 7e:6f:90:b3:a7:35:79:04:fb:ad:83:f5:df:7b:a2: 67:35:1e:eb:b2:86:c4:25:56:80:9c:dd:79:35:f3: 2b:05:1b:8e:d3:37:ac:13:37:a6:1a:47:53:8b:78: eb:db:86:20:4d:8d:d5:62:e6:be:99:29:2e:a2:96: 04:21:e7:8b:b6:73:a3:b9:eb:3b:9c:32:4f:eb:72: 45:f9:da:b3:d0:73:34:fb:4b:be:b3:70:f2:28:be: b7:0c:28:b9:9a:d6:59:db:86:c7:41:8f:06:66:e2: 76:d4:a4:01:c4:4f:4b:73:03:14:32:ad:31:44:fe: 70:1a:fe:97:5a:df:c9:89:7a:71:a9:59:43:ea:24: 3b:b2:e8:dd:71:34:89:37:ad:de:98:2b:6d:c1:5b: 0b:3c:9a:ac:20:36:f6:79:42:0c:3f:0d:f2:3e:bd: b0:f6:6a:aa:4c:f4:09:e5:a6:9a:dd:37:0b:09:20: 2f:6f:a0:4f:5a:25:b7:61:7b:b9:85:de:a0:34:8c: ef:b5:48:5f:99:57:9e:a5:01:cd:f2:f0:5d:a1:f3: c6:54:4e:7e:37:d0:ff:b8:3c:69:ee:9c:30:b0:cd: e5:f1:d2:f4:f7:a7:2f:69:e0:10:af:89:95:21:7d: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:35:06:98:B2:B7:52:DF:B2:A9:98:B3:78:F0:FD:8F:08:10:46:7B X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ozUGmLK3Ut-yqZizePD9jwgQRns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.0.0/19 217.25.0.0/20 IPv6: 2a00:eac0::/32 Signature Algorithm: sha256WithRSAEncryption 47:ba:c0:14:31:bc:e1:63:08:3e:30:36:80:97:5c:25:74:7c: 1c:9d:78:1a:67:41:f5:dc:b6:4f:98:cb:a5:78:6a:3d:71:5e: 5b:63:bb:9e:3b:63:6a:d8:db:fd:59:12:a2:e0:48:f5:7d:be: 20:dc:fb:31:b7:53:51:ba:ed:4f:37:3b:cd:ba:b9:39:4a:06: 88:45:4c:e1:d5:61:50:e7:78:4f:bd:b5:71:fc:bc:3d:01:89: 40:c6:17:92:c1:3f:26:e2:87:5a:bc:c4:8b:2f:25:e7:b4:f9: 6e:4f:e1:1e:80:7e:14:e3:e0:f4:92:7f:a4:d9:31:93:54:00: cc:b0:c4:e9:bf:a3:64:5c:86:3e:7c:b8:4e:ef:a2:28:ae:49: 28:ce:21:eb:62:ee:fd:e3:90:0e:b2:22:ed:7c:3a:45:0d:d9: 96:a2:85:5b:d5:76:02:2c:49:b2:bf:c1:6f:aa:75:a9:c5:50: 2e:a7:c8:ff:23:c9:bf:ff:13:9e:55:21:65:be:6f:32:bf:11: 69:49:a9:a5:0f:34:85:4d:ad:0f:e1:ca:5e:25:7e:e6:83:7d: e8:9d:d5:35:38:d8:11:be:6a:60:67:d5:bf:89:ee:d3:ce:bb: 3c:b5:58:2b:56:c3:9d:de:c2:a3:0b:8f:aa:d8:d0:0e:ff:1b: b5:13:45:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZuVYxsrRx0e4R8wUYlRdkLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTA2MjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzM1MDY5OGIyYjc1MmRmYjJhOTk4YjM3OGYwZmQ4ZjA4MTA0NjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnqrgcMwNaEK7wCmZNZ+b5CzpzV5 BPutg/Xfe6JnNR7rsobEJVaAnN15NfMrBRuO0zesEzemGkdTi3jr24YgTY3VYua+ mSkuopYEIeeLtnOjues7nDJP63JF+dqz0HM0+0u+s3DyKL63DCi5mtZZ24bHQY8G ZuJ21KQBxE9LcwMUMq0xRP5wGv6XWt/JiXpxqVlD6iQ7sujdcTSJN63emCttwVsL PJqsIDb2eUIMPw3yPr2w9mqqTPQJ5aaa3TcLCSAvb6BPWiW3YXu5hd6gNIzvtUhf mVeepQHN8vBdofPGVE5+N9D/uDxp7pwwsM3l8dL096cvaeAQr4mVIX1VZwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKM1Bpiyt1LfsqmYs3jw/Y8IEEZ7MB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvb3pVR21MSzNVdC15cVppemVQRDlqd2dRUm5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFV/4AAwQE 2RkAMA0EAgACMAcDBQAqAOrAMA0GCSqGSIb3DQEBCwUAA4IBAQBHusAUMbzhYwg+ MDaAl1wldHwcnXgaZ0H13LZPmMuleGo9cV5bY7ueO2Nq2Nv9WRKi4Ej1fb4g3Psx t1NRuu1PNzvNurk5SgaIRUzh1WFQ53hPvbVx/Lw9AYlAxheSwT8m4odavMSLLyXn tPluT+EegH4U4+D0kn+k2TGTVADMsMTpv6NkXIY+fLhO76IorkkoziHrYu7945AO siLtfDpFDdmWooVb1XYCLEmyv8FvqnWpxVAup8j/I8m//xOeVSFlvm8yvxFpSaml DzSFTa0P4cpeJX7mg33ondU1ONgRvmpgZ9W/ie7Tzrs8tVgrVsOd3sKjC4+q2NAO /xu1E0Xf -----END CERTIFICATE-----Generated at Thu Jan 22 00:57:58 2026 by rpki-client