This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZsGWwPRjFAT5qOJ730Kw31QSQdQ.roa File: ZsGWwPRjFAT5qOJ730Kw31QSQdQ.roa (raw, json) Hash identifier: lc8VmvlLhjpFWKem+WNZjJTE3quxpUwczGzOc9G/Qas= Subject key identifier: 66:C1:96:C0:F4:63:14:04:F9:A8:E2:7B:DF:42:B0:DF:54:12:41:D4 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8598F7D4C3963BBBD0FBBF13209E9 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZsGWwPRjFAT5qOJ730Kw31QSQdQ.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 124.158.102.0/24 maxlen: 24 124.158.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:59:8f:7d:4c:39:63:bb:bd:0f:bb:f1:32:09:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66c196c0f4631404f9a8e27bdf42b0df541241d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:6a:bc:d5:7b:11:45:14:9f:85:43:fe:7b: af:65:49:7f:cf:19:a3:00:37:c9:05:89:2d:0a:47: bd:e1:6f:84:7b:c2:19:5b:67:2d:a4:38:bf:47:bb: c9:cf:fe:8f:72:31:4a:e6:0a:6e:16:83:d9:bb:e3: ee:9d:8d:46:9a:35:22:7e:f6:b6:8e:a0:7f:bb:89: c7:c2:36:fe:15:d9:77:4a:66:1a:6d:63:fb:80:a6: 7d:fb:64:9e:cc:bf:c2:cc:16:f8:3a:3b:10:58:e9: f0:ca:de:58:53:76:66:3a:ea:f2:79:1b:37:b0:df: 58:76:3f:ac:0f:24:89:91:59:67:62:e0:df:8f:06: f3:5d:fe:b2:e4:6b:71:7f:57:af:e5:74:14:32:73: 2e:7b:c9:27:85:98:7f:cb:44:14:dd:93:6a:0a:a7: 77:40:b7:4e:42:b5:73:da:b2:e4:b9:23:9c:ac:da: 9d:0c:50:98:84:78:bf:bc:80:ff:48:0a:0b:e0:be: e4:32:6e:ec:28:8c:11:0f:f7:c2:7a:89:37:3a:d2: b4:ec:27:a9:9f:cd:1c:ae:2d:4e:73:ef:41:26:3a: 51:b8:0e:ef:aa:02:db:0c:ad:a7:a4:25:ec:f2:94: 8b:dd:73:68:7f:45:38:ef:83:48:70:18:2e:b7:65: b2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C1:96:C0:F4:63:14:04:F9:A8:E2:7B:DF:42:B0:DF:54:12:41:D4 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZsGWwPRjFAT5qOJ730Kw31QSQdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.102.0/23 Signature Algorithm: sha256WithRSAEncryption 14:dc:0a:6d:e6:6e:28:f3:a6:4b:74:99:6f:91:bb:cd:11:97: a2:5f:f2:be:6b:20:6d:01:57:e7:d1:79:95:1a:a0:69:ee:6f: 2a:87:00:2a:c6:be:3a:c1:bb:c0:71:8e:60:07:e9:95:ed:a7: 03:0b:2f:3b:7b:f5:0b:cd:3e:0f:9a:e5:5c:a6:79:6a:9a:f1: 02:4e:96:0d:17:8c:0a:86:d6:3c:91:00:8d:61:c8:72:e3:c5: 32:3b:bc:97:8e:1b:41:4d:6c:49:27:59:3f:23:17:44:f0:13: 7f:ef:f1:5d:71:72:13:e3:66:03:ea:c5:77:73:bf:9a:8b:76: 5f:10:ef:8b:2c:b8:0b:bc:f1:69:9d:8d:67:b2:da:47:af:a2: 88:4d:60:4b:d0:d4:36:ee:83:bb:72:78:76:f5:2a:b2:35:cf: 56:9f:c9:0f:97:bd:15:ce:12:df:97:f9:2f:fc:7f:5e:23:6d: fb:21:eb:21:37:5d:2d:4d:f7:9f:61:f1:07:5e:0c:6c:01:fb: 25:46:0b:e0:92:90:91:7e:f1:f2:5f:8c:d1:dd:29:6a:f6:5c: d3:5c:ff:fe:0b:78:c7:e0:cb:f8:56:9f:b4:7e:8d:52:de:5f: f6:06:ea:ae:e4:8d:2f:0d:0c:93:c7:7e:73:1e:6c:f8:66:93: b5:d5:1b:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFmPfUw5Y7u9D7vxMgnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmMxOTZjMGY0NjMxNDA0ZjlhOGUyN2JkZjQyYjBkZjU0MTI0MWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fdqvNV7EUUUn4VD/nuvZUl/zxmj ADfJBYktCke94W+Ee8IZW2ctpDi/R7vJz/6PcjFK5gpuFoPZu+PunY1GmjUifva2 jqB/u4nHwjb+Fdl3SmYabWP7gKZ9+2SezL/CzBb4OjsQWOnwyt5YU3ZmOuryeRs3 sN9Ydj+sDySJkVlnYuDfjwbzXf6y5Gtxf1ev5XQUMnMue8knhZh/y0QU3ZNqCqd3 QLdOQrVz2rLkuSOcrNqdDFCYhHi/vID/SAoL4L7kMm7sKIwRD/fCeok3OtK07Cep n80cri1Oc+9BJjpRuA7vqgLbDK2npCXs8pSL3XNof0U474NIcBgut2Wy0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbBlsD0YxQE+ajie99CsN9UEkHUMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvWnNHV3dQUmpGQVQ1cU9KNzMwS3czMVFTUWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBfJ5mMA0G CSqGSIb3DQEBCwUAA4IBAQAU3Apt5m4o86ZLdJlvkbvNEZeiX/K+ayBtAVfn0XmV GqBp7m8qhwAqxr46wbvAcY5gB+mV7acDCy87e/ULzT4PmuVcpnlqmvECTpYNF4wK htY8kQCNYchy48UyO7yXjhtBTWxJJ1k/IxdE8BN/7/FdcXIT42YD6sV3c7+ai3Zf EO+LLLgLvPFpnY1nstpHr6KITWBL0NQ27oO7cnh29SqyNc9Wn8kPl70VzhLfl/kv /H9eI237IeshN10tTfefYfEHXgxsAfslRgvgkpCRfvHyX4zR3Slq9lzTXP/+C3jH 4Mv4Vp+0fo1S3l/2Buqu5I0vDQyTx35zHmz4ZpO11Rv9 -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:27 2026 by rpki-client