This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pzx-3MD3cTq6aUW4pZdYiRJ_lhk.roa File: pzx-3MD3cTq6aUW4pZdYiRJ_lhk.roa (raw, json) Hash identifier: pjnlAXZRgf1Y7oyFG+oGJFDOWG/uuciTaHJrkDIpl14= Subject key identifier: A7:3C:7E:DC:C0:F7:71:3A:BA:69:45:B8:A5:97:58:89:12:7F:96:19 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 0192D6CE9BB1A571BCE6E29E149026F443F3 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pzx-3MD3cTq6aUW4pZdYiRJ_lhk.roa Signing time: Tue 29 Oct 2024 05:45:17 +0000 ROA not before: Tue 29 Oct 2024 05:45:17 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 207957 IP address blocks: 45.128.99.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:d6:ce:9b:b1:a5:71:bc:e6:e2:9e:14:90:26:f4:43:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Oct 29 05:45:17 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=a73c7edcc0f7713aba6945b8a5975889127f9619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:55:f0:1d:fc:73:b7:1d:0b:0d:5a:8e:29: 37:73:1d:e6:f7:6c:ad:55:32:1d:b5:98:c3:ca:c9: 33:e0:22:4e:5e:58:cd:aa:37:5d:ba:e7:61:8f:28: 21:c4:7d:e5:9c:23:55:0b:ea:1e:bf:a7:6b:de:ff: b5:a1:1b:46:6c:8f:ce:9e:ca:85:5b:1f:ae:8c:12: da:b3:b2:14:86:8e:ce:ab:b8:c1:39:4a:2b:d9:a8: ab:0d:1c:26:39:74:5a:fe:16:ff:20:46:ab:03:e2: be:f2:8d:bc:43:cb:b0:74:56:cc:9f:14:9f:21:88: 42:95:11:b1:03:cc:f4:41:06:c5:4e:f5:84:24:33: a4:56:5a:5c:59:d9:ea:53:4f:86:40:55:38:a0:8d: 1f:a7:0d:93:df:78:3f:38:84:98:ec:59:f2:ea:7e: f7:19:ce:70:f1:c8:e8:67:fe:06:cd:d8:66:03:1d: 8f:a7:ba:3e:d3:41:c0:d8:c5:69:63:92:60:2e:59: c3:2b:2e:da:8f:78:49:32:18:da:88:50:65:b3:b4: 86:f3:5b:e9:64:43:dd:77:f4:01:4b:47:8c:75:26: 96:69:8b:3e:ec:c1:14:98:74:b5:a9:d6:45:86:1f: 0b:8b:2d:ed:c8:e2:de:1b:fd:45:4d:88:25:6a:dd: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:7E:DC:C0:F7:71:3A:BA:69:45:B8:A5:97:58:89:12:7F:96:19 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pzx-3MD3cTq6aUW4pZdYiRJ_lhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.99.0/24 Signature Algorithm: sha256WithRSAEncryption 46:b7:d5:8d:9a:dc:f1:12:66:39:e6:ae:a1:8c:83:6b:60:69: 11:0f:6e:01:81:97:0d:e2:09:58:24:cc:c4:d4:a0:49:17:50: 1e:79:f9:41:df:da:cf:14:48:8b:17:d6:f5:ef:81:0a:37:2d: 6d:9d:8f:8e:b8:e5:61:62:87:cb:42:c9:c8:8e:31:32:ed:33: a8:af:f0:86:8b:15:96:07:48:8e:a2:57:ea:9a:0a:84:a9:fd: cc:43:99:43:82:63:45:ef:6e:16:3f:31:a6:1a:16:1f:ed:1d: 36:15:1b:ef:84:1f:05:9e:02:5f:c4:f3:dc:7b:54:34:58:b8: 54:ed:ed:55:41:68:b1:94:6e:66:88:45:e0:1f:18:44:26:fe: 11:28:39:86:69:10:55:b1:b9:35:3f:d0:dc:e0:89:67:7c:6c: e8:0d:65:15:46:b7:eb:d2:f3:b7:4d:13:80:c3:59:93:54:34: d7:01:a7:1b:61:fa:29:e2:4b:96:ff:f1:b8:57:e7:dd:f1:92: cc:3f:bf:7c:44:82:f6:ee:d9:c7:6d:17:34:a8:96:6d:14:9a: 59:31:b3:38:a3:8c:6e:12:cb:24:1d:de:f5:e2:0e:1c:5e:0d: 7b:5f:a9:d2:c4:67:d0:a4:f3:fc:73:68:6b:73:17:ff:89:b4: 54:ce:fd:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZLWzpuxpXG85uKeFJAm9EPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjQxMDI5MDU0NTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzNjN2VkY2MwZjc3MTNhYmE2OTQ1YjhhNTk3NTg4OTEyN2Y5NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz5V8B38c7cdCw1ajik3cx3m92yt VTIdtZjDyskz4CJOXljNqjdduudhjyghxH3lnCNVC+oev6dr3v+1oRtGbI/OnsqF Wx+ujBLas7IUho7Oq7jBOUor2airDRwmOXRa/hb/IEarA+K+8o28Q8uwdFbMnxSf IYhClRGxA8z0QQbFTvWEJDOkVlpcWdnqU0+GQFU4oI0fpw2T33g/OISY7Fny6n73 Gc5w8cjoZ/4GzdhmAx2Pp7o+00HA2MVpY5JgLlnDKy7aj3hJMhjaiFBls7SG81vp ZEPdd/QBS0eMdSaWaYs+7MEUmHS1qdZFhh8Liy3tyOLeG/1FTYglat2lWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKc8ftzA93E6umlFuKWXWIkSf5YZMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcHp4LTNNRDNjVHE2YVVXNHBaZFlpUkpfbGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYBjMA0G CSqGSIb3DQEBCwUAA4IBAQBGt9WNmtzxEmY55q6hjINrYGkRD24BgZcN4glYJMzE 1KBJF1AeeflB39rPFEiLF9b174EKNy1tnY+OuOVhYofLQsnIjjEy7TOor/CGixWW B0iOolfqmgqEqf3MQ5lDgmNF724WPzGmGhYf7R02FRvvhB8FngJfxPPce1Q0WLhU 7e1VQWixlG5miEXgHxhEJv4RKDmGaRBVsbk1P9Dc4IlnfGzoDWUVRrfr0vO3TROA w1mTVDTXAacbYfop4kuW//G4V+fd8ZLMP798RIL27tnHbRc0qJZtFJpZMbM4o4xu EsskHd714g4cXg17X6nSxGfQpPP8c2hrcxf/ibRUzv3x -----END CERTIFICATE-----Generated at Wed Dec 31 00:06:42 2025 by rpki-client