This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZSKKfkDVbtqddVHX-0oVUm2VjQ8.roa File: ZSKKfkDVbtqddVHX-0oVUm2VjQ8.roa (raw, json) Hash identifier: abLqTp1QpDDfzS2dUFSlYXQPptcyU7Aut+710MTk+cI= Subject key identifier: 65:22:8A:7E:40:D5:6E:DA:9D:75:51:D7:FB:4A:15:52:6D:95:8D:0F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB628FC091F67BC1C11CE6910EE7AB43E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZSKKfkDVbtqddVHX-0oVUm2VjQ8.roa Signing time: Tue 13 Jan 2026 07:01:37 +0000 ROA not before: Tue 13 Jan 2026 07:01:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 151.245.190.0/24 maxlen: 24 151.245.196.0/24 maxlen: 24 151.245.240.0/24 maxlen: 24 151.245.254.0/23 maxlen: 24 151.246.254.0/24 maxlen: 24 151.247.140.0/23 maxlen: 24 151.247.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:28:fc:09:1f:67:bc:1c:11:ce:69:10:ee:7a:b4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 07:01:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65228a7e40d56eda9d7551d7fb4a15526d958d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:fd:b5:49:65:bd:32:14:3b:fa:bf:c9:45: a4:19:b9:6b:bd:ac:0e:40:5f:54:a3:11:a1:37:b0: d2:a7:a8:ab:79:d9:7c:ad:a7:7d:05:77:7a:8a:70: e5:90:d5:dd:c7:ac:23:a8:5d:3f:c4:ec:4a:8b:ea: a5:ed:66:f7:50:b7:d7:19:64:51:5f:f9:a2:67:6b: a5:10:7e:50:c1:c1:a0:b3:6d:db:b0:88:af:81:00: 86:7c:db:5e:dd:a6:19:b6:a9:ca:33:79:43:ba:3a: ce:85:96:55:6f:1a:a7:1c:c3:be:cf:a8:ff:4a:e2: fb:71:da:c0:32:fb:47:88:70:da:91:57:e8:df:9f: b9:7e:a9:cd:75:69:c8:d0:67:bc:2a:4d:f5:6c:9a: d0:69:dc:5a:b2:c0:37:cf:72:03:34:0a:29:c4:81: ec:3e:22:c9:19:39:1c:d5:e8:04:53:37:1a:6a:03: cb:82:fc:7b:b3:91:aa:50:ec:b6:27:b9:5e:4e:17: 58:6f:6d:37:b2:32:a7:33:67:55:5f:c9:e7:41:b2: 2c:5a:5b:e3:b0:8b:ac:4f:e3:31:1b:97:8f:c5:be: 89:02:73:26:23:be:6b:c8:a0:bc:aa:4a:22:ac:83: fa:69:02:29:78:52:de:26:eb:ee:17:62:1c:58:78: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:22:8A:7E:40:D5:6E:DA:9D:75:51:D7:FB:4A:15:52:6D:95:8D:0F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZSKKfkDVbtqddVHX-0oVUm2VjQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.190.0/24 151.245.196.0/24 151.245.240.0/24 151.245.254.0/23 151.246.254.0/24 151.247.140.0/23 151.247.154.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:37:24:13:f9:b7:2e:e5:c2:ee:39:26:a6:02:6c:9d:64:cb: 3d:17:27:1e:bb:94:f8:6a:d8:6b:ce:23:5a:ac:94:5f:03:9c: d3:1d:a3:46:4b:62:5d:95:3b:a7:42:c0:4f:18:d6:c1:3f:53: 3d:6f:19:a0:26:e4:a5:76:c8:b6:28:ed:a1:87:0c:8a:b9:d3: 22:f1:4d:b2:ec:b4:90:e4:ea:50:61:01:9b:be:48:e2:c2:07: 63:38:6a:8b:93:c4:07:74:67:66:38:b9:56:fc:b1:b1:cf:22: ea:82:26:b0:86:c3:52:f4:a4:6a:b0:71:f4:40:b1:3d:7e:f7: 72:83:76:5f:c5:80:7c:76:1c:52:db:b8:10:07:1a:81:6f:a3: 46:c9:98:3b:bd:a8:36:05:97:10:21:13:2f:e6:9e:06:66:8f: bd:06:e5:7c:c6:91:35:3d:50:a2:68:73:de:42:cf:17:55:52: 85:0e:81:71:3b:1b:ab:9d:dc:c3:ce:29:22:53:03:01:8e:c5: df:3d:c2:f4:2e:cd:c7:d9:86:ac:b8:52:03:bc:06:7b:b6:1b: 94:40:94:4f:51:37:ec:c3:f8:3e:6c:7e:c5:e9:ba:90:97:55: 56:f9:22:ec:4c:bc:c4:f5:07:21:99:89:35:59:7a:5d:bc:56: 14:d3:3c:7d -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZu2KPwJH2e8HBHOaRDuerQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDcwMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTIyOGE3ZTQwZDU2ZWRhOWQ3NTUxZDdmYjRhMTU1MjZkOTU4ZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcX9tUllvTIUO/q/yUWkGblrvawO QF9UoxGhN7DSp6iredl8rad9BXd6inDlkNXdx6wjqF0/xOxKi+ql7Wb3ULfXGWRR X/miZ2ulEH5QwcGgs23bsIivgQCGfNte3aYZtqnKM3lDujrOhZZVbxqnHMO+z6j/ SuL7cdrAMvtHiHDakVfo35+5fqnNdWnI0Ge8Kk31bJrQadxassA3z3IDNAopxIHs PiLJGTkc1egEUzcaagPLgvx7s5GqUOy2J7leThdYb203sjKnM2dVX8nnQbIsWlvj sIusT+MxG5ePxb6JAnMmI75ryKC8qkoirIP6aQIpeFLeJuvuF2IcWHjMBQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGUiin5A1W7anXVR1/tKFVJtlY0PMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWlNLS2ZrRFZidHFkZFZIWC0wb1ZVbTJWalE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/W+AwQA l/XEAwQAl/XwAwQBl/X+AwQAl/b+AwQBl/eMAwQBl/eaMA0GCSqGSIb3DQEBCwUA A4IBAQAvNyQT+bcu5cLuOSamAmydZMs9Fyceu5T4athrziNarJRfA5zTHaNGS2Jd lTunQsBPGNbBP1M9bxmgJuSldsi2KO2hhwyKudMi8U2y7LSQ5OpQYQGbvkjiwgdj OGqLk8QHdGdmOLlW/LGxzyLqgiawhsNS9KRqsHH0QLE9fvdyg3ZfxYB8dhxS27gQ BxqBb6NGyZg7vag2BZcQIRMv5p4GZo+9BuV8xpE1PVCiaHPeQs8XVVKFDoFxOxur ndzDzikiUwMBjsXfPcL0Ls3H2YasuFIDvAZ7thuUQJRPUTfsw/g+bH7F6bqQl1VW +SLsTLzE9QchmYk1WXpdvFYU0zx9 -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:51 2026 by rpki-client