This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/PzoT-5xGPRm676J72JBUj-xYGuM.roa File: PzoT-5xGPRm676J72JBUj-xYGuM.roa (raw, json) Hash identifier: aPId8XDIUKGrBkHFqg/5RSQZhTJ593TuWp9HokclViQ= Subject key identifier: 3F:3A:13:FB:9C:46:3D:19:BA:EF:A2:7B:D8:90:54:8F:EC:58:1A:E3 Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Certificate serial: 019B7AC958466AA626BC393E126628D4F057 Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/PzoT-5xGPRm676J72JBUj-xYGuM.roa Signing time: Thu 01 Jan 2026 18:19:34 +0000 ROA not before: Thu 01 Jan 2026 18:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51852 IP address blocks: 45.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:58:46:6a:a6:26:bc:39:3e:12:66:28:d4:f0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f3a13fb9c463d19baefa27bd890548fec581ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:9d:b2:4b:70:0e:e3:a1:00:ef:8f:cc:db: fb:52:fe:07:1b:78:bb:15:f4:18:7f:a9:67:45:28: 60:1a:7e:f0:af:3c:3e:b9:c8:2c:5b:d7:ad:fc:b3: 77:d8:ef:15:d6:18:b8:4e:03:3d:1f:0a:27:28:ce: 3f:7e:5e:33:38:6a:0e:a7:29:06:96:f0:5e:40:d0: cb:ea:ef:9b:72:9a:b7:dd:62:56:c5:79:65:69:6e: 06:f8:01:84:4e:e8:ab:b3:61:b6:9e:15:61:3e:9a: c9:8b:42:34:2b:71:95:fa:50:61:7d:b6:ff:40:5c: 39:e9:eb:55:c8:42:78:e6:86:d1:68:36:dc:51:9f: eb:87:b6:de:b7:ec:19:0a:48:e8:48:af:29:23:0e: 85:a5:1b:0f:21:e9:85:65:c7:de:d2:f5:64:db:20: 27:bb:1f:5c:e6:08:a8:b9:e4:cb:2b:b1:25:4a:ce: ea:be:67:1c:48:b0:8a:76:fb:06:d9:05:94:88:96: b6:4a:08:a0:53:85:09:0c:28:d6:23:19:3a:01:26: 5b:da:47:9a:bd:b9:af:e6:1c:53:97:2a:cf:02:5d: e9:7a:b2:16:c8:6a:27:a9:36:dc:fe:29:8d:fb:b1: 47:23:37:60:b9:8e:7d:84:28:fc:87:69:bf:57:46: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3A:13:FB:9C:46:3D:19:BA:EF:A2:7B:D8:90:54:8F:EC:58:1A:E3 X509v3 Authority Key Identifier: keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/PzoT-5xGPRm676J72JBUj-xYGuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.255.0/24 Signature Algorithm: sha256WithRSAEncryption 53:fb:06:ef:b5:f6:fc:79:2a:9d:8e:5a:bb:fc:5f:78:95:50: bd:dc:2e:dd:8d:02:97:d0:82:2b:86:bf:ef:46:2f:5e:92:97: 1d:fe:44:97:f2:76:c6:5e:64:6a:ac:8e:94:85:6b:bf:dc:28: af:9b:d7:5e:e2:7e:af:95:1c:4f:7d:de:02:45:1b:70:bc:67: e4:70:28:0f:ed:1e:79:b8:d4:61:1f:73:f0:4f:b3:f2:d9:66: 6a:8a:1e:3a:b1:1e:aa:f5:65:5c:fb:18:df:42:24:68:d0:05: 40:a4:0a:d1:07:d0:74:2e:32:fa:a8:79:3c:5d:a6:df:fe:9a: c6:3d:92:f9:2c:5a:1c:6b:67:be:60:f5:66:1e:34:ff:1a:1b: e7:db:25:10:7f:2d:b1:68:ce:fe:ef:e2:93:8a:8b:be:cb:b4: eb:0e:ec:12:ca:01:dd:ea:fb:b9:5d:95:ae:17:cd:b3:37:92: 23:0a:a7:d4:07:24:47:32:11:82:cc:f6:12:f1:49:33:1d:e2: 1a:e0:11:33:a6:d1:9b:a2:df:57:73:b0:84:77:75:af:70:e3: 74:76:74:95:4c:af:a0:01:e4:83:dc:33:3f:43:4d:21:18:f1: 36:f3:f3:a8:b5:4e:5c:9e:5e:58:d1:3b:81:1c:c5:12:7e:35: db:4d:fe:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVhGaqYmvDk+EmYo1PBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0 NzhjYjEwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjNhMTNmYjljNDYzZDE5YmFlZmEyN2JkODkwNTQ4ZmVjNTgxYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLidsktwDuOhAO+PzNv7Uv4HG3i7 FfQYf6lnRShgGn7wrzw+ucgsW9et/LN32O8V1hi4TgM9HwonKM4/fl4zOGoOpykG lvBeQNDL6u+bcpq33WJWxXllaW4G+AGETuirs2G2nhVhPprJi0I0K3GV+lBhfbb/ QFw56etVyEJ45obRaDbcUZ/rh7bet+wZCkjoSK8pIw6FpRsPIemFZcfe0vVk2yAn ux9c5gioueTLK7ElSs7qvmccSLCKdvsG2QWUiJa2SgigU4UJDCjWIxk6ASZb2kea vbmv5hxTlyrPAl3perIWyGonqTbc/imN+7FHIzdguY59hCj8h2m/V0aXXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD86E/ucRj0Zuu+ie9iQVI/sWBrjMB8GA1UdIwQY MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt YTM4YjY3OTVmYjI0LzEvUHpvVC01eEdQUm02NzZKNzJKQlVqLXhZR3VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0 LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVH/MA0G CSqGSIb3DQEBCwUAA4IBAQBT+wbvtfb8eSqdjlq7/F94lVC93C7djQKX0IIrhr/v Ri9ekpcd/kSX8nbGXmRqrI6UhWu/3Civm9de4n6vlRxPfd4CRRtwvGfkcCgP7R55 uNRhH3PwT7Py2WZqih46sR6q9WVc+xjfQiRo0AVApArRB9B0LjL6qHk8Xabf/prG PZL5LFoca2e+YPVmHjT/Ghvn2yUQfy2xaM7+7+KTiou+y7TrDuwSygHd6vu5XZWu F82zN5IjCqfUByRHMhGCzPYS8UkzHeIa4BEzptGbot9Xc7CEd3WvcON0dnSVTK+g AeSD3DM/Q00hGPE28/OotU5cnl5Y0TuBHMUSfjXbTf7u -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:14 2026 by rpki-client