This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/A30zx-NikLziyE9-uJRZQlvzoJc.roa File: A30zx-NikLziyE9-uJRZQlvzoJc.roa (raw, json) Hash identifier: xY7m+ul5tQp1ZewKmtGQVZeGolfqO2cZVc4Mv/68Cf0= Subject key identifier: 03:7D:33:C7:E3:62:90:BC:E2:C8:4F:7E:B8:94:59:42:5B:F3:A0:97 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E2763D04FB3BB4C521402E00E570 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/A30zx-NikLziyE9-uJRZQlvzoJc.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 45.155.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e2:76:3d:04:fb:3b:b4:c5:21:40:2e:00:e5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037d33c7e36290bce2c84f7eb89459425bf3a097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:b7:b2:89:ca:de:fc:9d:5e:1d:02:56:65: fb:9a:9c:55:ac:99:82:8c:5a:7a:af:8e:e2:cf:ad: 22:04:81:71:5e:65:5c:d5:d8:53:dd:47:bf:ab:d3: ac:bb:82:19:06:c0:a5:a1:37:74:67:4f:60:c9:03: 0b:3e:a6:df:52:c8:1a:22:3f:14:8b:40:f4:32:bd: ba:61:19:f2:e6:58:2a:5e:9a:ce:d7:3a:dd:b0:55: eb:9c:cc:0f:ba:ef:a0:af:45:49:9c:ff:98:91:69: 18:b0:a3:74:31:ab:9b:f4:eb:4a:2f:c5:6d:ab:74: 07:c3:35:45:34:be:37:01:32:c3:49:0d:32:58:a6: 87:e4:03:79:88:4b:a2:8d:58:88:a1:26:e8:54:18: 47:77:0b:b0:dd:e8:12:9d:15:38:92:6b:ab:d2:2a: 99:a6:af:ae:26:2b:2e:fd:69:f1:48:bc:5e:6d:bb: 01:1e:ba:1e:33:06:e0:06:0b:86:ac:c1:31:b0:0c: 52:97:83:0f:8d:34:1c:0c:51:42:4d:f6:6e:66:34: f9:7d:20:02:43:06:29:76:36:aa:c3:e0:8f:0b:82: 52:f1:7c:2a:9d:4b:1e:19:3c:ee:38:06:06:fd:1b: ea:f6:1f:69:ff:47:cf:47:c6:74:a7:cc:9c:d2:b5: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7D:33:C7:E3:62:90:BC:E2:C8:4F:7E:B8:94:59:42:5B:F3:A0:97 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/A30zx-NikLziyE9-uJRZQlvzoJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.250.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:d7:bc:8a:9e:b5:db:26:b4:83:56:4a:ca:56:3a:b1:c1:60: 2c:78:17:9f:c1:d5:82:13:be:af:6a:a0:13:d1:bf:6b:ae:42: fe:1d:cb:30:b1:9f:84:19:5c:df:3a:44:13:2c:96:e0:50:85: 2b:8a:c0:a0:fc:12:28:46:fb:e7:1d:83:6b:67:40:e0:d6:19: c4:4d:91:59:fa:f4:7e:63:d4:0a:87:b0:ff:58:5b:37:81:e6: 8a:3e:7d:fe:37:67:5f:a1:cf:4f:3f:ca:24:f0:ca:41:2f:bf: c8:6c:62:a6:71:d8:47:62:6e:18:35:c8:7c:62:31:91:d0:2a: 76:9f:7f:9c:9a:b7:62:27:a2:f1:72:1e:ab:b3:c2:b5:11:f7: c6:d3:8b:5d:e3:21:c1:a0:07:0b:fa:7b:65:cf:02:38:e9:01: e0:6b:4b:da:40:cd:62:1e:fd:91:cb:69:b1:3e:b2:da:2f:c6: a0:c6:23:44:08:99:59:6c:e2:08:e9:11:2f:f4:46:1e:ce:fc: e0:fa:49:40:92:fc:e4:5b:97:b4:f8:03:b0:cb:2d:ea:b0:0a: e1:80:de:4a:08:ac:16:6d:27:9d:ed:ca:7b:d5:34:9f:60:94: f9:4b:f3:18:9d:54:6a:ab:d2:a6:db:5c:c8:67:8a:63:88:a3: 7b:f7:1a:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOJ2PQT7O7TFIUAuAOVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdkMzNjN2UzNjI5MGJjZTJjODRmN2ViODk0NTk0MjViZjNhMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvS3sonK3vydXh0CVmX7mpxVrJmC jFp6r47iz60iBIFxXmVc1dhT3Ue/q9Osu4IZBsCloTd0Z09gyQMLPqbfUsgaIj8U i0D0Mr26YRny5lgqXprO1zrdsFXrnMwPuu+gr0VJnP+YkWkYsKN0Maub9OtKL8Vt q3QHwzVFNL43ATLDSQ0yWKaH5AN5iEuijViIoSboVBhHdwuw3egSnRU4kmur0iqZ pq+uJisu/WnxSLxebbsBHroeMwbgBguGrMExsAxSl4MPjTQcDFFCTfZuZjT5fSAC QwYpdjaqw+CPC4JS8XwqnUseGTzuOAYG/Rvq9h9p/0fPR8Z0p8yc0rUQuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAN9M8fjYpC84shPfriUWUJb86CXMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvQTMwengtTmlrTHppeUU5LXVKUlpRbHZ6b0pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZv6MA0G CSqGSIb3DQEBCwUAA4IBAQAP17yKnrXbJrSDVkrKVjqxwWAseBefwdWCE76vaqAT 0b9rrkL+HcswsZ+EGVzfOkQTLJbgUIUrisCg/BIoRvvnHYNrZ0Dg1hnETZFZ+vR+ Y9QKh7D/WFs3geaKPn3+N2dfoc9PP8ok8MpBL7/IbGKmcdhHYm4YNch8YjGR0Cp2 n3+cmrdiJ6Lxch6rs8K1EffG04td4yHBoAcL+ntlzwI46QHga0vaQM1iHv2Ry2mx PrLaL8agxiNECJlZbOII6REv9EYezvzg+klAkvzkW5e0+AOwyy3qsArhgN5KCKwW bSed7cp71TSfYJT5S/MYnVRqq9Km21zIZ4pjiKN79xr1 -----END CERTIFICATE-----Generated at Mon Jan 19 17:50:59 2026 by rpki-client