This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/jzZ4tYbzqiuSSftAW3fppDa1Wqc.roa File: jzZ4tYbzqiuSSftAW3fppDa1Wqc.roa (raw, json) Hash identifier: hnzQ/ndmvGoDKQ41tJpQwJMDQ2yQeCPQibsiuKB0+OU= Subject key identifier: 8F:36:78:B5:86:F3:AA:2B:92:49:FB:40:5B:77:E9:A4:36:B5:5A:A7 Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6 Certificate serial: 019A793BDD23BE045267850BB0E86222FEE8 Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/jzZ4tYbzqiuSSftAW3fppDa1Wqc.roa Signing time: Wed 12 Nov 2025 18:02:37 +0000 ROA not before: Wed 12 Nov 2025 18:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 45.147.164.0/24 maxlen: 24 45.147.165.0/24 maxlen: 24 45.147.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:3b:dd:23:be:04:52:67:85:0b:b0:e8:62:22:fe:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6 Validity Not Before: Nov 12 18:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f3678b586f3aa2b9249fb405b77e9a436b55aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:70:d7:b2:0b:ac:64:6f:53:4b:ef:87:25: e8:84:6a:39:ad:f9:69:dd:c6:32:37:48:4e:08:ad: 1d:48:97:46:dd:5a:6b:f6:0f:9f:b0:d7:c7:0e:ec: f4:70:16:59:20:d3:43:b7:af:f4:dc:16:9a:55:77: d4:4a:d1:12:cd:8a:7c:8c:43:af:b6:2b:67:fa:59: bd:bc:a0:19:85:ce:53:79:2f:71:c0:f8:13:2f:03: 19:8a:65:fa:35:8f:be:1c:9f:3b:c9:38:8d:19:86: d3:ea:d1:54:e6:8f:f4:ff:60:ed:61:41:7b:35:0c: 3a:65:ac:94:1d:77:27:e3:10:47:8c:79:39:7a:e2: c4:48:b5:8c:3f:1f:b4:cf:2f:e9:e3:f6:58:71:7d: 35:3b:3f:87:71:f8:a7:b4:fd:5d:f0:65:10:2f:d7: e3:6e:a5:8a:d7:82:81:8a:d3:92:c9:eb:10:c2:d7: 34:22:28:9a:d3:e4:ed:b2:44:f0:e4:b3:c4:32:b4: 60:e3:c8:fd:87:4e:43:10:e5:35:f8:fb:a5:40:26: 46:35:f8:d0:0a:c0:7b:d0:e7:c1:6c:7b:4c:94:49: 61:a9:da:b1:a5:20:b8:45:cd:d6:2f:c6:15:4d:01: 1d:28:9f:34:b7:02:aa:ef:81:26:92:ce:96:e8:e5: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:78:B5:86:F3:AA:2B:92:49:FB:40:5B:77:E9:A4:36:B5:5A:A7 X509v3 Authority Key Identifier: keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/jzZ4tYbzqiuSSftAW3fppDa1Wqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.164.0/23 45.147.167.0/24 Signature Algorithm: sha256WithRSAEncryption 47:02:3f:c0:2e:07:17:c5:a0:c3:15:5f:b0:21:5f:53:07:ac: 07:de:70:6f:01:94:b0:0e:9e:51:ba:42:1d:57:32:cc:3d:c3: 9b:07:2d:1c:08:d3:7c:21:cc:09:f4:f7:b3:57:4f:f3:5a:8d: 61:b0:92:a9:96:66:30:be:ec:7b:c4:ab:f7:2e:01:c9:16:46: 8a:91:14:ca:1e:3d:f8:f8:71:a1:60:4a:23:f6:0f:b6:1b:e9: 87:c8:85:be:cd:26:2f:8f:19:e6:9b:08:8c:dc:3a:e7:74:fa: c4:e4:c9:c2:3d:50:43:96:0d:b5:00:7f:ed:be:46:13:3b:80: 92:1f:5f:86:d5:16:32:3b:15:3a:15:4e:1b:2d:a5:1a:db:fb: ab:b9:81:2f:fb:f9:00:58:84:4a:2e:18:39:ee:a3:a5:5b:a4: 72:63:38:a7:b0:c9:a9:af:0f:95:22:3e:e3:26:a8:34:5c:ac: 9c:0b:db:10:6c:6e:c0:fd:5b:56:9e:ae:b3:cc:27:b1:5b:39: 98:e4:65:11:28:77:7a:a1:6a:35:b7:fa:ca:12:b9:92:bd:c8: 99:db:07:20:63:80:71:c6:d3:c6:ba:0d:51:58:3e:ce:c3:08: 38:67:2a:0e:f8:dc:66:43:99:3a:af:55:75:89:4d:ab:ce:7c: fd:97:33:fb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp5O90jvgRSZ4ULsOhiIv7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4 ZDIwZjYwHhcNMjUxMTEyMTgwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjM2NzhiNTg2ZjNhYTJiOTI0OWZiNDA1Yjc3ZTlhNDM2YjU1YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK5w17ILrGRvU0vvhyXohGo5rflp 3cYyN0hOCK0dSJdG3Vpr9g+fsNfHDuz0cBZZINNDt6/03BaaVXfUStESzYp8jEOv titn+lm9vKAZhc5TeS9xwPgTLwMZimX6NY++HJ87yTiNGYbT6tFU5o/0/2DtYUF7 NQw6ZayUHXcn4xBHjHk5euLESLWMPx+0zy/p4/ZYcX01Oz+HcfintP1d8GUQL9fj bqWK14KBitOSyesQwtc0Iiia0+TtskTw5LPEMrRg48j9h05DEOU1+PulQCZGNfjQ CsB70OfBbHtMlElhqdqxpSC4Rc3WL8YVTQEdKJ80twKq74Emks6W6OX9lwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI82eLWG86orkkn7QFt36aQ2tVqnMB8GA1UdIwQY MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt ZjYwZDZmNzE4MmExLzEvanpaNHRZYnpxaXVTU2Z0QVczZnBwRGExV3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZOkAwQA LZOnMA0GCSqGSIb3DQEBCwUAA4IBAQBHAj/ALgcXxaDDFV+wIV9TB6wH3nBvAZSw Dp5RukIdVzLMPcObBy0cCNN8IcwJ9PezV0/zWo1hsJKplmYwvux7xKv3LgHJFkaK kRTKHj34+HGhYEoj9g+2G+mHyIW+zSYvjxnmmwiM3DrndPrE5MnCPVBDlg21AH/t vkYTO4CSH1+G1RYyOxU6FU4bLaUa2/uruYEv+/kAWIRKLhg57qOlW6RyYzinsMmp rw+VIj7jJqg0XKycC9sQbG7A/VtWnq6zzCexWzmY5GURKHd6oWo1t/rKErmSvciZ 2wcgY4BxxtPGug1RWD7Owwg4ZyoO+NxmQ5k6r1V1iU2rznz9lzP7 -----END CERTIFICATE-----Generated at Sat Nov 22 21:04:11 2025 by rpki-client