This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ZDSoVMaxuelayYkHDT1Cece0cLM.roa File: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (raw, json) Hash identifier: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA= Subject key identifier: 64:34:A8:54:C6:B1:B9:E9:5A:C9:89:07:0D:3D:42:79:C7:B4:70:B3 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347C463B913D332C89CDD677F0EC97 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ZDSoVMaxuelayYkHDT1Cece0cLM.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.140.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7c:46:3b:91:3d:33:2c:89:cd:d6:77:f0:ec:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6434a854c6b1b9e95ac989070d3d4279c7b470b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:5f:35:1c:46:b2:8c:35:f7:32:dc:f9:0c: e9:a9:97:e1:68:91:12:35:75:f0:8e:cb:6a:2a:2a: 05:0d:9e:ac:52:4b:5f:19:a9:50:e9:86:83:b3:7d: 28:29:6e:fd:aa:50:c8:1c:d2:72:15:bd:f6:c0:e4: 4a:f9:21:4b:8b:5b:96:e9:95:64:99:1b:6d:41:6d: be:d7:37:d0:6d:f7:51:a9:76:40:85:74:c3:24:92: 29:06:4a:7e:5d:2b:bb:d8:c3:ec:ee:1b:4f:72:b1: c2:73:52:4b:54:e2:bb:a9:3e:0a:0b:e3:67:d8:76: 20:f9:83:6e:95:f4:bf:e2:d3:3b:b4:d3:66:0c:31: 2e:a2:5d:0b:83:14:3a:b5:b9:01:ca:44:41:f1:4a: 83:74:1a:90:68:51:48:1f:93:b4:f7:9b:b3:82:23: 83:12:8b:e2:3d:7c:ee:e1:4e:60:6c:ea:f8:e4:27: d0:ca:fc:2a:41:e3:23:89:c3:9f:89:52:b7:94:c4: f9:88:c2:24:6c:e5:0c:1e:0f:7e:4c:59:55:d2:ab: 8d:03:3d:b4:75:54:68:c7:ce:f6:f1:92:a0:ab:d4: d4:c8:08:b6:c6:c1:45:bd:e2:3b:30:e7:82:29:66: 16:cf:a5:23:83:f2:e0:ad:e7:51:d9:cd:80:23:64: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:A8:54:C6:B1:B9:E9:5A:C9:89:07:0D:3D:42:79:C7:B4:70:B3 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ZDSoVMaxuelayYkHDT1Cece0cLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.57.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:25:fb:27:63:62:4d:f6:8a:07:27:9d:26:61:2b:03:bb:a9: 6e:1b:38:e2:e8:f8:5c:d1:c5:c2:f7:2f:96:5a:f3:48:73:5c: 4a:43:9b:9f:ca:a7:cb:49:99:93:7e:56:a4:19:78:ba:85:0d: 0f:f2:e2:cd:4c:67:bf:f0:88:52:93:f8:f9:1e:69:5c:25:71: 5c:fa:34:e4:6d:8f:1f:84:89:22:13:66:35:75:4b:f0:7e:c7: 4f:14:f6:a4:f3:59:ce:6f:59:dc:a8:06:cb:01:9a:79:fc:63: 31:b7:12:80:e5:ba:bf:40:8d:0e:a9:62:37:ba:02:67:a9:0b: 37:fc:0a:b0:e6:77:cd:0b:cc:b6:14:1e:d1:07:94:4b:48:80: 38:27:c8:f0:22:7f:b9:9c:21:48:0e:e5:5a:36:7e:af:ca:38: 08:91:88:09:42:6e:09:d4:04:1a:48:06:bd:1b:38:c7:12:a0: 7c:ce:62:b1:ba:30:ad:23:99:06:d5:51:f2:77:a2:17:d2:ad: 91:c7:e1:cd:7f:d9:00:8b:6e:c6:ce:98:5f:4a:02:eb:d0:00: 75:be:d5:f2:e1:08:a3:66:d2:3d:7d:ee:c0:c7:88:f5:28:7a: 22:9b:6f:db:19:d3:90:ee:8e:97:8e:58:50:5a:11:b4:97:aa: 62:ba:6b:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHxGO5E9MyyJzdZ38OyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDM0YTg1NGM2YjFiOWU5NWFjOTg5MDcwZDNkNDI3OWM3YjQ3MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVpfNRxGsow19zLc+QzpqZfhaJES NXXwjstqKioFDZ6sUktfGalQ6YaDs30oKW79qlDIHNJyFb32wORK+SFLi1uW6ZVk mRttQW2+1zfQbfdRqXZAhXTDJJIpBkp+XSu72MPs7htPcrHCc1JLVOK7qT4KC+Nn 2HYg+YNulfS/4tM7tNNmDDEuol0LgxQ6tbkBykRB8UqDdBqQaFFIH5O095uzgiOD EoviPXzu4U5gbOr45CfQyvwqQeMjicOfiVK3lMT5iMIkbOUMHg9+TFlV0quNAz20 dVRox8728ZKgq9TUyAi2xsFFveI7MOeCKWYWz6Ujg/LgredR2c2AI2TMPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQ0qFTGsbnpWsmJBw09QnnHtHCzMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvWkRTb1ZNYXh1ZWxheVlrSERUMUNlY2UwY0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYw5MA0G CSqGSIb3DQEBCwUAA4IBAQAfJfsnY2JN9ooHJ50mYSsDu6luGzji6Phc0cXC9y+W WvNIc1xKQ5ufyqfLSZmTflakGXi6hQ0P8uLNTGe/8IhSk/j5HmlcJXFc+jTkbY8f hIkiE2Y1dUvwfsdPFPak81nOb1ncqAbLAZp5/GMxtxKA5bq/QI0OqWI3ugJnqQs3 /Aqw5nfNC8y2FB7RB5RLSIA4J8jwIn+5nCFIDuVaNn6vyjgIkYgJQm4J1AQaSAa9 GzjHEqB8zmKxujCtI5kG1VHyd6IX0q2Rx+HNf9kAi27GzphfSgLr0AB1vtXy4Qij ZtI9fe7Ax4j1KHoim2/bGdOQ7o6XjlhQWhG0l6piumuH -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:13 2026 by rpki-client