This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZVxywKKDb7jkVtgyXMqYc5JthZA.roa File: ZVxywKKDb7jkVtgyXMqYc5JthZA.roa (raw, json) Hash identifier: Ybw3cwdan+q3Lx3Je0ZszRfgA3NMuZrBwzkyc6P9Rew= Subject key identifier: 65:5C:72:C0:A2:83:6F:B8:E4:56:D8:32:5C:CA:98:73:92:6D:85:90 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC858D3309652E5C5F391C30B9784BB Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZVxywKKDb7jkVtgyXMqYc5JthZA.roa Signing time: Thu 01 Jan 2026 18:18:28 +0000 ROA not before: Thu 01 Jan 2026 18:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53107 IP address blocks: 14.102.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:58:d3:30:96:52:e5:c5:f3:91:c3:0b:97:84:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=655c72c0a2836fb8e456d8325cca9873926d8590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:7d:6f:0b:8a:f5:b7:27:05:c2:c4:42:73: 7f:8e:5d:46:4a:a6:b4:1a:cf:9b:66:ff:b5:55:5e: 3e:dc:26:39:00:2f:be:c0:75:c8:6a:6e:c4:17:90: fa:75:70:48:df:56:98:c8:b7:7f:ab:38:89:51:98: e5:63:9d:85:bc:87:1d:da:44:25:a7:9d:f6:37:29: 1f:d6:e0:c9:62:df:f4:4a:5e:ee:b0:21:53:04:0d: e4:b0:5a:45:5a:73:dd:f0:28:0e:b2:2f:5f:90:34: ce:02:68:9c:8f:fe:8c:1a:b8:3d:97:e7:e6:99:e1: 9a:57:4b:8c:a1:34:34:58:69:c7:9c:6e:ee:83:f7: ff:e1:5c:e9:93:8f:f9:71:92:25:78:a7:ec:f4:38: 65:b4:09:2d:31:f4:af:57:9a:06:5e:11:ee:0b:ce: 42:4f:3b:aa:f3:6d:5b:78:dc:e1:85:4f:ae:65:88: c2:8c:a4:45:2a:5c:1e:46:f0:e7:cb:aa:74:cf:62: f6:74:3a:d0:8b:1e:a4:2d:fa:c6:52:76:d9:c9:ae: 9c:d6:7d:09:15:ce:5f:55:ba:d9:25:5e:5b:e2:84: 7e:b9:5e:24:e8:2e:2d:65:52:c6:36:12:66:26:3a: e3:dc:bb:08:51:1d:93:40:a3:96:85:74:37:bc:59: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5C:72:C0:A2:83:6F:B8:E4:56:D8:32:5C:CA:98:73:92:6D:85:90 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZVxywKKDb7jkVtgyXMqYc5JthZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.230.0/24 Signature Algorithm: sha256WithRSAEncryption 02:54:26:ff:60:41:35:e9:4b:9e:94:b8:fd:13:69:f7:36:b2: 9e:6e:24:79:f6:ad:69:2e:c5:47:f6:52:5b:ba:02:d2:72:79: a5:2f:dd:4a:78:d8:21:36:c7:2c:8d:59:69:6f:52:ec:1f:c3: 98:1a:e4:23:62:31:68:6b:0e:76:15:ac:50:51:8d:15:7c:47: 24:c0:70:46:95:07:0b:d5:d5:0d:28:cc:af:2a:63:7b:bd:46: d2:91:59:a1:da:57:06:cb:7f:d2:88:8c:93:5d:73:06:26:93: 77:30:6d:99:ab:e9:1b:a2:12:95:ca:bb:23:af:8b:9e:20:f7: 94:9f:14:67:7c:a2:83:81:be:65:38:9e:af:73:f2:dd:45:82: 65:d4:3b:53:e2:b9:c9:b9:40:89:92:56:15:09:2c:83:64:32: f7:6c:38:a8:cb:b6:33:ef:db:34:b4:91:31:a0:80:01:03:4d: 99:27:dd:9e:88:02:af:ef:0d:4e:2a:c5:3e:7e:b2:13:ed:67: d0:7d:61:db:74:15:a7:05:17:b4:33:4b:ff:03:20:73:a2:86: 3f:7c:e9:bd:35:13:e3:c2:eb:97:78:02:17:00:90:23:2c:4d: 1d:22:39:51:3b:15:e1:ac:29:d2:8c:a5:48:66:55:4f:8b:72: e3:f6:ef:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFjTMJZS5cXzkcMLl4S7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTVjNzJjMGEyODM2ZmI4ZTQ1NmQ4MzI1Y2NhOTg3MzkyNmQ4NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtx9bwuK9bcnBcLEQnN/jl1GSqa0 Gs+bZv+1VV4+3CY5AC++wHXIam7EF5D6dXBI31aYyLd/qziJUZjlY52FvIcd2kQl p532Nykf1uDJYt/0Sl7usCFTBA3ksFpFWnPd8CgOsi9fkDTOAmicj/6MGrg9l+fm meGaV0uMoTQ0WGnHnG7ug/f/4Vzpk4/5cZIleKfs9DhltAktMfSvV5oGXhHuC85C Tzuq821beNzhhU+uZYjCjKRFKlweRvDny6p0z2L2dDrQix6kLfrGUnbZya6c1n0J Fc5fVbrZJV5b4oR+uV4k6C4tZVLGNhJmJjrj3LsIUR2TQKOWhXQ3vFkB0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGVccsCig2+45FbYMlzKmHOSbYWQMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvWlZ4eXdLS0RiN2prVnRneVhNcVljNUp0aFpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbmMA0G CSqGSIb3DQEBCwUAA4IBAQACVCb/YEE16UuelLj9E2n3NrKebiR59q1pLsVH9lJb ugLScnmlL91KeNghNscsjVlpb1LsH8OYGuQjYjFoaw52FaxQUY0VfEckwHBGlQcL 1dUNKMyvKmN7vUbSkVmh2lcGy3/SiIyTXXMGJpN3MG2Zq+kbohKVyrsjr4ueIPeU nxRnfKKDgb5lOJ6vc/LdRYJl1DtT4rnJuUCJklYVCSyDZDL3bDioy7Yz79s0tJEx oIABA02ZJ92eiAKv7w1OKsU+frIT7WfQfWHbdBWnBRe0M0v/AyBzooY/fOm9NRPj wuuXeAIXAJAjLE0dIjlROxXhrCnSjKVIZlVPi3Lj9u8V -----END CERTIFICATE-----Generated at Fri Jan 23 16:23:12 2026 by rpki-client