This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZQ3U9ZtspklhTyevHNoSUOGIn7E.roa File: ZQ3U9ZtspklhTyevHNoSUOGIn7E.roa (raw, json) Hash identifier: t46jiapHXtgk0LYmWa7UZxxVyT0Nbnf2BJa+dIDsOig= Subject key identifier: 65:0D:D4:F5:9B:6C:A6:49:61:4F:27:AF:1C:DA:12:50:E1:88:9F:B1 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C80351EB10C86A4BD20164E2201581C Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZQ3U9ZtspklhTyevHNoSUOGIn7E.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398779 IP address blocks: 45.133.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:35:1e:b1:0c:86:a4:bd:20:16:4e:22:01:58:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=650dd4f59b6ca649614f27af1cda1250e1889fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:68:71:5d:83:dc:8f:6c:71:a9:be:7e:0f: 13:b7:f2:b8:b5:13:a0:9c:7f:9d:5c:c3:27:b7:5b: 00:2f:ec:2e:6e:e6:39:eb:15:75:b4:d5:52:9e:b8: 37:97:0b:ae:dc:39:4c:42:e3:9b:b2:3e:87:9b:88: 00:dd:04:92:f0:1a:2f:c3:6e:21:ad:7a:a2:d1:23: 87:f3:a6:98:34:a7:be:c9:35:9e:b9:5e:d8:75:a0: fe:1e:fa:e5:7b:55:39:b5:f3:fa:44:78:8c:5c:12: ec:f7:74:1f:37:4b:4f:ee:3e:49:68:52:21:b5:5b: 80:fe:52:95:dc:63:c3:87:9f:58:97:c5:72:7c:7f: 84:ed:0b:4b:55:13:92:61:ec:c4:7a:36:5f:2f:49: 48:b6:1a:fb:2d:82:c4:12:5a:64:06:3f:d3:37:8c: 5e:6c:11:c8:0c:0d:72:a6:71:cd:84:fe:3a:95:ce: 71:f9:3c:83:df:75:8e:51:12:8f:2b:95:c2:63:5a: c6:95:47:f1:3f:e0:db:66:ae:9a:48:70:20:8d:53: 29:ed:15:ae:3f:c6:96:1d:2b:8c:81:90:f4:43:f1: 2a:30:71:5d:95:e4:46:73:23:40:34:96:5a:56:5a: 27:1f:2b:bf:a2:fe:a2:96:f8:a7:29:f1:45:d6:42: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0D:D4:F5:9B:6C:A6:49:61:4F:27:AF:1C:DA:12:50:E1:88:9F:B1 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZQ3U9ZtspklhTyevHNoSUOGIn7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.72.0/24 Signature Algorithm: sha256WithRSAEncryption 29:b6:3b:dc:1c:07:00:80:b1:e3:1a:35:00:7b:f2:db:49:fe: 70:b9:89:69:4d:a9:df:44:5c:2a:12:a5:be:9a:76:66:64:13: 6a:8e:25:da:2b:43:80:23:26:81:4c:40:4c:49:75:87:ea:c8: e3:b0:00:63:07:71:f5:a0:19:45:62:88:8b:ac:14:1d:f0:66: 20:4a:97:99:1e:98:50:46:3c:8d:5d:c9:5a:9a:5e:46:a3:06: a2:c7:36:c1:86:3d:69:9d:ba:5e:b9:98:00:3f:09:45:ef:1c: 40:e1:25:11:1d:35:b9:37:65:29:84:6a:3b:04:1a:1b:c6:e0: cc:b3:d9:91:72:60:e0:fb:f2:fa:69:5a:d6:df:ab:3e:a0:71: 06:1a:85:c4:74:df:33:9a:29:18:40:ca:91:7a:e0:cc:83:90: 46:46:b9:58:7f:db:fe:48:13:0d:4f:88:92:75:7a:5b:63:cd: 64:53:24:6e:37:70:c0:ec:32:c6:10:67:a8:9f:83:7a:b1:62: 5f:0f:c8:42:13:f6:30:ef:3e:35:96:6f:6d:7d:86:32:7c:89: 7f:6d:58:55:99:69:e1:84:a0:cd:a3:6e:09:bc:57:bb:ea:2d: f9:1c:5a:f9:b8:66:7f:0a:26:e8:d1:3e:38:9c:8e:c4:51:c0: cc:92:ce:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDUesQyGpL0gFk4iAVgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTBkZDRmNTliNmNhNjQ5NjE0ZjI3YWYxY2RhMTI1MGUxODg5ZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7docV2D3I9scam+fg8Tt/K4tROg nH+dXMMnt1sAL+wubuY56xV1tNVSnrg3lwuu3DlMQuObsj6Hm4gA3QSS8Bovw24h rXqi0SOH86aYNKe+yTWeuV7YdaD+Hvrle1U5tfP6RHiMXBLs93QfN0tP7j5JaFIh tVuA/lKV3GPDh59Yl8VyfH+E7QtLVROSYezEejZfL0lIthr7LYLEElpkBj/TN4xe bBHIDA1ypnHNhP46lc5x+TyD33WOURKPK5XCY1rGlUfxP+DbZq6aSHAgjVMp7RWu P8aWHSuMgZD0Q/EqMHFdleRGcyNANJZaVlonHyu/ov6ilvinKfFF1kIPVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUN1PWbbKZJYU8nrxzaElDhiJ+xMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvWlEzVTladHNwa2xoVHlldkhOb1NVT0dJbjdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYVIMA0G CSqGSIb3DQEBCwUAA4IBAQAptjvcHAcAgLHjGjUAe/LbSf5wuYlpTanfRFwqEqW+ mnZmZBNqjiXaK0OAIyaBTEBMSXWH6sjjsABjB3H1oBlFYoiLrBQd8GYgSpeZHphQ RjyNXclaml5GowaixzbBhj1pnbpeuZgAPwlF7xxA4SURHTW5N2UphGo7BBobxuDM s9mRcmDg+/L6aVrW36s+oHEGGoXEdN8zmikYQMqReuDMg5BGRrlYf9v+SBMNT4iS dXpbY81kUyRuN3DA7DLGEGeon4N6sWJfD8hCE/Yw7z41lm9tfYYyfIl/bVhVmWnh hKDNo24JvFe76i35HFr5uGZ/Cibo0T44nI7EUcDMks45 -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:00 2026 by rpki-client