This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Z3V9TUK8r_FHToolycVMTDaUt6s.roa File: Z3V9TUK8r_FHToolycVMTDaUt6s.roa (raw, json) Hash identifier: P5lyG9E35XlKCrzdnPlPZUSNkm6dswkn04uQqnS0qVI= Subject key identifier: 67:75:7D:4D:42:BC:AF:F1:47:4E:8A:25:C9:C5:4C:4C:36:94:B7:AB Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F1502BE1CC262B1974240B197D1293E Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Z3V9TUK8r_FHToolycVMTDaUt6s.roa Signing time: Fri 02 Jan 2026 14:20:41 +0000 ROA not before: Fri 02 Jan 2026 14:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 45.146.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:02:be:1c:c2:62:b1:97:42:40:b1:97:d1:29:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67757d4d42bcaff1474e8a25c9c54c4c3694b7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:8e:87:3c:22:23:57:99:5a:7f:7e:1f:06: de:cd:0b:01:ad:7b:1b:4e:90:31:3b:eb:f7:65:d3: e7:a3:66:fc:f2:dd:1b:64:45:f2:8b:32:35:20:b4: 73:d2:f0:42:10:53:6c:58:67:90:85:41:2b:d3:16: 8b:5c:ac:3a:2f:80:1b:e4:90:12:03:57:90:a2:38: 18:9c:36:2e:2e:88:4d:ed:60:ba:96:23:90:37:7f: dd:fc:a1:14:8d:39:66:da:20:b9:c2:0c:ae:b4:7c: d6:28:99:3a:6f:cd:98:e7:06:0a:f3:a9:37:63:ae: 9b:5d:13:e7:e7:33:f2:eb:05:2e:91:23:c0:36:8f: 5b:d1:6b:49:3a:30:49:76:8b:fe:c1:e9:2d:8a:81: e2:09:8a:ec:1e:ab:ee:47:54:a5:11:85:4c:a2:27: cc:8f:7f:94:bc:86:5e:8a:94:aa:de:27:f5:09:b0: 13:5a:1f:b7:78:e2:13:e7:36:cf:ea:fb:11:71:b6: dc:7f:f3:ab:83:be:bd:41:8b:88:96:2f:3e:eb:c1: 43:4d:b1:b5:30:68:13:65:c1:b6:d1:39:f3:69:17: 1f:f8:48:2e:e1:6b:e2:82:41:c8:eb:41:55:ec:3e: e8:2c:4f:f4:69:26:09:d8:c3:0c:5e:9a:8a:fb:f4: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:75:7D:4D:42:BC:AF:F1:47:4E:8A:25:C9:C5:4C:4C:36:94:B7:AB X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Z3V9TUK8r_FHToolycVMTDaUt6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.234.0/23 Signature Algorithm: sha256WithRSAEncryption 04:cd:e5:9d:ae:b8:3b:c4:bc:4c:90:39:c3:ff:51:22:84:5a: 6d:34:7e:08:5c:ad:8a:b0:b9:d4:22:38:ea:71:1f:0d:37:1a: 8c:d6:f8:98:c3:b2:6f:d5:f2:05:9e:38:ee:6b:c0:91:e2:cd: 62:3e:cf:87:c2:fc:5a:c0:a8:21:cb:ef:2e:5a:ab:80:e3:d6: 2b:07:99:d4:f6:d7:4a:02:b6:73:c3:46:10:9f:83:27:0d:8a: e1:87:7d:2f:80:e0:17:57:cd:d2:5a:48:d0:22:d5:42:04:dd: 39:3a:86:39:b2:a5:3f:d7:c1:c0:d2:0d:b5:63:3a:f4:bb:cc: 71:a8:25:d4:53:6d:c4:78:cd:ee:66:f7:cc:d8:ae:d7:3b:a9: b1:56:3c:4a:b8:66:7e:84:92:5c:21:7c:71:28:e7:a6:a5:61: 0b:96:c1:9a:a9:98:5e:8d:52:3a:8a:8b:71:66:28:a5:6b:cc: e6:0c:51:46:61:b3:54:d4:ff:c3:e1:50:24:e2:5a:4b:0d:63: 6c:a5:91:75:40:c1:3d:7f:f8:f2:07:dd:cd:d4:67:3a:ce:0c: e6:74:12:ac:cb:9d:09:bc:e2:24:17:32:6b:89:2f:17:c5:62: a2:80:70:51:83:22:b7:09:ae:01:74:96:4d:f8:96:76:c5:19: 72:76:a7:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQK+HMJisZdCQLGX0Sk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzc1N2Q0ZDQyYmNhZmYxNDc0ZThhMjVjOWM1NGM0YzM2OTRiN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrKOhzwiI1eZWn9+HwbezQsBrXsb TpAxO+v3ZdPno2b88t0bZEXyizI1ILRz0vBCEFNsWGeQhUEr0xaLXKw6L4Ab5JAS A1eQojgYnDYuLohN7WC6liOQN3/d/KEUjTlm2iC5wgyutHzWKJk6b82Y5wYK86k3 Y66bXRPn5zPy6wUukSPANo9b0WtJOjBJdov+wektioHiCYrsHqvuR1SlEYVMoifM j3+UvIZeipSq3if1CbATWh+3eOIT5zbP6vsRcbbcf/Org769QYuIli8+68FDTbG1 MGgTZcG20TnzaRcf+Egu4WvigkHI60FV7D7oLE/0aSYJ2MMMXpqK+/RgfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGd1fU1CvK/xR06KJcnFTEw2lLerMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvWjNWOVRVSzhyX0ZIVG9vbHljVk1URGFVdDZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZLqMA0G CSqGSIb3DQEBCwUAA4IBAQAEzeWdrrg7xLxMkDnD/1EihFptNH4IXK2KsLnUIjjq cR8NNxqM1viYw7Jv1fIFnjjua8CR4s1iPs+HwvxawKghy+8uWquA49YrB5nU9tdK ArZzw0YQn4MnDYrhh30vgOAXV83SWkjQItVCBN05OoY5sqU/18HA0g21Yzr0u8xx qCXUU23EeM3uZvfM2K7XO6mxVjxKuGZ+hJJcIXxxKOempWELlsGaqZhejVI6iotx Ziila8zmDFFGYbNU1P/D4VAk4lpLDWNspZF1QME9f/jyB93N1Gc6zgzmdBKsy50J vOIkFzJriS8XxWKigHBRgyK3Ca4BdJZN+JZ2xRlydqcJ -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:28 2026 by rpki-client