This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa File: zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa (raw, json) Hash identifier: YXMs2R7ig2C7zGo2CvCc44PcqUIofxwBlRKFLyt5A3U= Subject key identifier: CE:1F:C9:CB:63:2A:28:A6:AB:0B:E3:03:2A:BC:DA:D6:18:B3:E8:29 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED0A312DEC004624FC962D814A3C93 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 86.110.42.0/24 maxlen: 24 86.110.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0a:31:2d:ec:00:46:24:fc:96:2d:81:4a:3c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce1fc9cb632a28a6ab0be3032abcdad618b3e829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:94:6f:19:d0:73:a9:62:99:47:2e:66:7a: b1:f4:44:fc:ea:8a:d7:d4:8f:c7:83:0a:af:8d:6a: bd:ab:3e:55:9c:a6:13:83:72:a0:88:4b:79:5b:e0: bd:82:5e:66:f5:ab:5a:4e:a3:28:60:f8:cb:4e:25: 6e:9c:51:77:7b:ed:d3:49:7d:52:41:1b:fd:7f:63: c2:6e:44:06:92:51:fd:41:d7:2c:9f:ae:7d:23:f4: a8:6e:0f:74:2c:33:c1:eb:66:cb:1f:08:c0:5f:49: d7:68:a4:b5:8a:fc:88:da:28:b8:d5:50:79:b5:ee: 11:4b:ab:d4:f7:05:ba:7e:e7:86:4a:84:f0:c6:96: 7c:44:e8:46:03:3e:e7:cc:23:98:97:20:39:06:1f: 4b:a3:81:c3:94:ae:18:b9:2a:7d:13:68:57:e7:ff: 82:a0:6f:46:b3:48:09:b2:1f:c2:5b:44:95:3e:57: 3f:ea:9d:93:4c:51:6c:4e:54:58:e6:5e:71:97:a0: 16:76:33:90:b7:41:59:2e:d5:5b:22:af:db:7b:b1: 99:5c:c5:15:e1:2b:e9:b0:40:01:de:ab:11:a3:ae: f2:09:63:4d:00:67:99:ea:cb:6a:12:78:42:6f:8c: e0:d4:35:bf:de:3d:80:c4:64:f1:eb:69:c8:7f:65: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1F:C9:CB:63:2A:28:A6:AB:0B:E3:03:2A:BC:DA:D6:18:B3:E8:29 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.42.0/24 86.110.49.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:7a:49:b0:3b:c5:80:07:42:ae:01:43:09:bd:53:f2:c9:e8: 7b:f6:4f:58:ce:47:96:cc:57:5a:d4:9e:5d:ef:88:20:fc:99: 18:28:f3:5b:b5:d4:db:42:ce:b7:5d:ce:a3:df:83:dc:ce:f5: b4:46:22:3c:3e:db:c7:16:8c:91:0f:e9:99:76:20:8f:3f:48: 81:f4:30:28:2d:d6:3a:2c:ac:42:70:91:01:67:23:22:0c:3f: 11:e8:74:7b:14:ae:1a:e0:50:d8:bc:c9:4f:88:15:a9:bb:57: 3f:95:66:a0:18:2c:8f:df:a8:c6:2c:65:f4:41:77:d9:a7:cd: 53:f6:ef:4f:43:f5:27:4c:6a:8a:88:22:69:81:ad:cb:c6:5d: f0:e8:77:07:da:bd:f6:02:d3:04:6d:f8:00:37:5a:c1:2f:4f: f6:08:10:f7:b8:99:1b:73:c7:1e:42:f0:1d:22:25:01:9d:b7: db:89:16:9e:17:6c:e6:ca:5a:98:60:7e:e8:6a:ba:59:19:a8: 64:15:a8:c3:cc:5e:ed:c8:46:27:bf:ed:1a:4e:88:5e:44:39: 59:e8:1c:b5:92:d4:f1:fb:6b:f9:fa:a5:8f:b4:d4:85:ee:11: aa:c4:64:50:c0:14:d7:6a:49:85:15:e5:ca:bf:57:10:74:90: 3e:10:b2:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57QoxLewARiT8li2BSjyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTFmYzljYjYzMmEyOGE2YWIwYmUzMDMyYWJjZGFkNjE4YjNlODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrCUbxnQc6limUcuZnqx9ET86orX 1I/HgwqvjWq9qz5VnKYTg3KgiEt5W+C9gl5m9ataTqMoYPjLTiVunFF3e+3TSX1S QRv9f2PCbkQGklH9Qdcsn659I/Sobg90LDPB62bLHwjAX0nXaKS1ivyI2ii41VB5 te4RS6vU9wW6fueGSoTwxpZ8ROhGAz7nzCOYlyA5Bh9Lo4HDlK4YuSp9E2hX5/+C oG9Gs0gJsh/CW0SVPlc/6p2TTFFsTlRY5l5xl6AWdjOQt0FZLtVbIq/be7GZXMUV 4SvpsEAB3qsRo67yCWNNAGeZ6stqEnhCb4zg1DW/3j2AxGTx62nIf2XDsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM4fyctjKiimqwvjAyq82tYYs+gpMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvemhfSnkyTXFLS2FyQy1NREtyemExaGl6NkNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4qAwQA Vm4xMA0GCSqGSIb3DQEBCwUAA4IBAQA8ekmwO8WAB0KuAUMJvVPyyeh79k9YzkeW zFda1J5d74gg/JkYKPNbtdTbQs63Xc6j34PczvW0RiI8PtvHFoyRD+mZdiCPP0iB 9DAoLdY6LKxCcJEBZyMiDD8R6HR7FK4a4FDYvMlPiBWpu1c/lWagGCyP36jGLGX0 QXfZp81T9u9PQ/UnTGqKiCJpga3Lxl3w6HcH2r32AtMEbfgAN1rBL0/2CBD3uJkb c8ceQvAdIiUBnbfbiRaeF2zmylqYYH7oarpZGahkFajDzF7tyEYnv+0aToheRDlZ 6By1ktTx+2v5+qWPtNSF7hGqxGRQwBTXakmFFeXKv1cQdJA+ELJW -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:07 2026 by rpki-client