This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZyVnmvJN0yIID0-dwQrcXmjY9VA.roa File: ZyVnmvJN0yIID0-dwQrcXmjY9VA.roa (raw, json) Hash identifier: q9igcRUqon9S/2eYkbsUmIWEB+JdxtvBxWbuRQimv3Y= Subject key identifier: 67:25:67:9A:F2:4D:D3:22:08:0F:4F:9D:C1:0A:DC:5E:68:D8:F5:50 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F150391C23DD9034FED8489FCBD6767 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZyVnmvJN0yIID0-dwQrcXmjY9VA.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 45.146.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:03:91:c2:3d:d9:03:4f:ed:84:89:fc:bd:67:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6725679af24dd322080f4f9dc10adc5e68d8f550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:2c:8a:ff:7d:1c:6e:2b:3f:71:d9:5c:af: 39:20:26:71:8d:14:d6:e7:33:27:ed:cb:3b:1b:a2: c7:a2:89:41:06:af:89:e0:39:48:5a:ae:8f:87:ba: 0a:24:0b:59:73:2b:1a:65:ae:4a:4c:32:2d:9f:f8: e8:68:f0:e1:6b:dc:1f:75:96:7e:53:a3:66:34:7b: 91:04:ff:8e:4d:85:4a:47:fd:e2:a1:38:89:3b:9a: ec:44:cd:e6:37:9f:b0:18:47:23:d9:b5:43:a1:10: 4a:b9:12:3d:d0:8d:ab:5d:05:46:6e:c8:11:8c:72: 20:6c:d4:18:84:32:4a:d6:30:f8:19:48:41:ac:1f: 5d:44:ff:a3:27:a8:da:d6:f3:25:48:5e:1f:ea:5a: 2b:30:5e:f0:28:ce:b8:99:a5:3b:b1:7c:08:9b:13: 74:59:b1:26:8d:69:13:30:d8:fe:26:8e:b0:8d:92: 17:b0:90:e2:6b:5f:40:44:41:52:1a:2c:14:4f:76: 42:d6:6c:1c:6e:e9:71:ae:0a:91:00:42:30:10:c9: e9:67:1d:da:6f:53:29:4d:9c:18:da:1d:02:c6:bc: 67:02:67:b2:93:f4:13:1e:60:f4:6c:5a:cd:e9:0d: 6f:b7:d8:bf:5a:5a:1a:80:c2:df:7e:4f:00:80:b3: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:25:67:9A:F2:4D:D3:22:08:0F:4F:9D:C1:0A:DC:5E:68:D8:F5:50 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZyVnmvJN0yIID0-dwQrcXmjY9VA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.234.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:1a:c9:b0:fb:5b:81:be:a5:70:aa:9f:27:3a:19:d2:8c:0f: c5:73:df:65:e7:b1:17:68:db:3a:90:ca:94:c9:d9:15:2f:2d: f3:c0:e2:15:8f:21:b5:b0:41:84:33:69:7a:9a:9c:27:b6:0f: 29:88:db:30:a2:62:99:d0:19:a2:76:ec:8b:74:92:f1:bf:5e: f0:a4:76:18:ae:80:58:70:49:fc:56:67:bb:6e:f1:67:54:e6: 94:c5:fd:22:64:1a:9e:52:21:70:92:ab:e6:1d:32:22:c6:ac: 2a:b5:39:06:56:da:62:43:f2:2c:84:03:b6:c7:fe:19:72:ba: ed:ee:bf:6f:6d:48:4a:73:bf:83:6f:4a:92:a0:87:78:bc:cb: 9b:1d:19:c9:f8:e3:40:23:90:2f:98:ac:2b:4c:25:ee:00:f5: 1e:55:1e:9f:6c:68:cf:8a:e6:46:0a:a0:99:8d:8b:4d:b4:df: b4:65:76:12:08:5d:1e:e5:a7:a4:a5:c4:9a:43:6e:fa:9f:9c: f6:c8:a9:d2:c3:e5:2a:81:29:f8:92:6f:0b:d1:3c:c3:9a:76: 0d:51:56:08:d4:12:31:17:f1:27:71:e1:36:6e:a2:b5:01:e7: 6d:44:af:da:24:81:67:31:5b:8c:d0:c5:a0:09:b3:7a:1b:7b: ea:a8:e0:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQORwj3ZA0/thIn8vWdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzI1Njc5YWYyNGRkMzIyMDgwZjRmOWRjMTBhZGM1ZTY4ZDhmNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j0siv99HG4rP3HZXK85ICZxjRTW 5zMn7cs7G6LHoolBBq+J4DlIWq6Ph7oKJAtZcysaZa5KTDItn/joaPDha9wfdZZ+ U6NmNHuRBP+OTYVKR/3ioTiJO5rsRM3mN5+wGEcj2bVDoRBKuRI90I2rXQVGbsgR jHIgbNQYhDJK1jD4GUhBrB9dRP+jJ6ja1vMlSF4f6lorMF7wKM64maU7sXwImxN0 WbEmjWkTMNj+Jo6wjZIXsJDia19AREFSGiwUT3ZC1mwcbulxrgqRAEIwEMnpZx3a b1MpTZwY2h0CxrxnAmeyk/QTHmD0bFrN6Q1vt9i/WloagMLffk8AgLP4EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGclZ5ryTdMiCA9PncEK3F5o2PVQMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvWnlWbm12Sk4weUlJRDAtZHdRcmNYbWpZOVZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZLqMA0G CSqGSIb3DQEBCwUAA4IBAQB/Gsmw+1uBvqVwqp8nOhnSjA/Fc99l57EXaNs6kMqU ydkVLy3zwOIVjyG1sEGEM2l6mpwntg8piNswomKZ0BmiduyLdJLxv17wpHYYroBY cEn8Vme7bvFnVOaUxf0iZBqeUiFwkqvmHTIixqwqtTkGVtpiQ/IshAO2x/4Zcrrt 7r9vbUhKc7+Db0qSoId4vMubHRnJ+ONAI5AvmKwrTCXuAPUeVR6fbGjPiuZGCqCZ jYtNtN+0ZXYSCF0e5aekpcSaQ276n5z2yKnSw+UqgSn4km8L0TzDmnYNUVYI1BIx F/EnceE2bqK1AedtRK/aJIFnMVuM0MWgCbN6G3vqqOA2 -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:40 2026 by rpki-client