This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZNKvFPEQOxElP83PEas3vxV_rd8.roa File: ZNKvFPEQOxElP83PEas3vxV_rd8.roa (raw, json) Hash identifier: Yw7PJJLrozmu0y73W6WqhOH+ocmNk1/zb5Wm1iOru30= Subject key identifier: 64:D2:AF:14:F1:10:3B:11:25:3F:CD:CF:11:AB:37:BF:15:7F:AD:DF Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F84540564343D3D62514EFBFAE667D0 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZNKvFPEQOxElP83PEas3vxV_rd8.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213985 IP address blocks: 45.152.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:54:05:64:34:3d:3d:62:51:4e:fb:fa:e6:67:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d2af14f1103b11253fcdcf11ab37bf157faddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:5e:17:bc:31:f2:40:7a:8c:e2:b0:1e:7a: 45:a4:cd:ee:45:cd:f8:3c:c5:d8:e2:e1:89:e0:ca: a7:3d:a4:9e:11:42:f1:dc:1a:ad:41:20:06:47:9d: 80:d8:bf:67:7e:bc:a5:5c:93:d6:fb:98:b4:f0:c4: 9d:24:6e:24:91:e9:e5:75:62:ea:ed:1c:a1:1b:c5: ae:5b:f5:74:6e:fc:b4:ca:a9:d2:aa:e2:4b:45:f2: 98:d8:3b:57:50:4f:5d:db:57:15:5e:b8:b8:ca:56: 29:a0:75:44:3d:f7:92:4b:da:3e:a2:14:f3:d5:18: c2:05:d8:80:ea:0a:63:1c:3e:14:89:35:48:cd:5b: c1:29:16:0a:ad:58:04:8f:80:59:43:8e:85:53:0c: a8:25:47:28:99:dc:b7:1e:b6:a5:49:92:01:05:8f: d8:1f:ca:04:1b:7e:08:32:61:93:ff:67:0c:e4:26: 0f:34:7a:2c:4f:49:6c:2c:c1:6b:83:03:53:59:28: 47:4c:2f:f4:ea:5e:bf:29:05:8d:3d:e5:7f:f3:3e: 57:99:a3:42:e8:0a:5a:99:70:55:c9:5d:e3:33:da: 08:2b:3b:bb:a2:55:eb:a6:9f:be:d2:0d:89:0e:ef: 36:88:81:63:32:32:eb:eb:d4:e1:90:18:ef:05:7b: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D2:AF:14:F1:10:3B:11:25:3F:CD:CF:11:AB:37:BF:15:7F:AD:DF X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZNKvFPEQOxElP83PEas3vxV_rd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.36.0/24 Signature Algorithm: sha256WithRSAEncryption 04:6b:2f:6f:60:52:fe:0a:f6:1f:3e:35:16:46:56:46:5e:32: 95:46:df:f1:09:5f:90:b8:7d:27:2a:0c:f0:3c:00:3a:fe:5a: ba:89:9e:ad:78:26:1c:f3:3d:28:e5:fc:17:28:96:65:df:17: ec:dd:a9:01:0b:30:e2:68:75:bf:b4:c7:28:74:2f:df:a6:93: 9c:f8:bf:2e:68:9c:9f:7e:74:37:56:15:84:95:57:24:65:fc: 68:84:53:1c:90:44:9c:f3:46:5b:70:e2:d5:30:6a:c8:1d:d2: 2a:7c:71:4d:48:a2:51:9a:d5:26:60:b6:05:bf:e2:cb:5a:92: 71:4a:cf:15:43:4e:0a:b1:6d:e6:52:61:10:6e:d2:f8:1c:56: 61:a0:78:0d:51:f5:53:57:d7:e0:06:bf:bc:46:c1:e9:72:52: e3:53:d1:71:28:a3:2c:bb:88:92:c5:c8:eb:59:da:fc:aa:c7: 6e:c9:c8:89:d5:82:84:76:6b:d7:39:55:c8:0e:ed:54:7f:0b: 76:51:b0:1d:07:08:8f:77:5d:ee:24:d8:c0:4f:b0:03:07:ec: 5f:56:fe:c5:19:e6:e9:d6:e8:61:72:a4:a1:8f:82:e0:b4:ba: 1f:37:ab:3a:6a:99:d3:4b:98:a9:89:2c:18:9d:a5:11:72:18: d6:dd:00:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFQFZDQ9PWJRTvv65mfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQyYWYxNGYxMTAzYjExMjUzZmNkY2YxMWFiMzdiZjE1N2ZhZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RteF7wx8kB6jOKwHnpFpM3uRc34 PMXY4uGJ4MqnPaSeEULx3BqtQSAGR52A2L9nfrylXJPW+5i08MSdJG4kkenldWLq 7RyhG8WuW/V0bvy0yqnSquJLRfKY2DtXUE9d21cVXri4ylYpoHVEPfeSS9o+ohTz 1RjCBdiA6gpjHD4UiTVIzVvBKRYKrVgEj4BZQ46FUwyoJUcomdy3HralSZIBBY/Y H8oEG34IMmGT/2cM5CYPNHosT0lsLMFrgwNTWShHTC/06l6/KQWNPeV/8z5XmaNC 6ApamXBVyV3jM9oIKzu7olXrpp++0g2JDu82iIFjMjLr69ThkBjvBXtIbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTSrxTxEDsRJT/NzxGrN78Vf63fMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvWk5LdkZQRVFPeEVsUDgzUEVhczN2eFZfcmQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZgkMA0G CSqGSIb3DQEBCwUAA4IBAQAEay9vYFL+CvYfPjUWRlZGXjKVRt/xCV+QuH0nKgzw PAA6/lq6iZ6teCYc8z0o5fwXKJZl3xfs3akBCzDiaHW/tMcodC/fppOc+L8uaJyf fnQ3VhWElVckZfxohFMckESc80ZbcOLVMGrIHdIqfHFNSKJRmtUmYLYFv+LLWpJx Ss8VQ04KsW3mUmEQbtL4HFZhoHgNUfVTV9fgBr+8RsHpclLjU9FxKKMsu4iSxcjr Wdr8qsduyciJ1YKEdmvXOVXIDu1Ufwt2UbAdBwiPd13uJNjAT7ADB+xfVv7FGebp 1uhhcqShj4LgtLofN6s6apnTS5ipiSwYnaURchjW3QAT -----END CERTIFICATE-----Generated at Wed Jan 21 16:56:57 2026 by rpki-client