This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa File: ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa (raw, json) Hash identifier: wudhnRSlAK+yCHqZdQgA8uGQw89NdGjYT7UnH7gteD0= Subject key identifier: 64:F7:84:7F:B7:12:E4:12:7D:AE:DA:1F:CE:6A:40:FA:9A:65:DC:2E Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0 Certificate serial: 019B7AC784DC9AA7ACBD9451B24B1B588E9C Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 147.233.0.0/17 maxlen: 17 147.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:84:dc:9a:a7:ac:bd:94:51:b2:4b:1b:58:8e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64f7847fb712e4127daeda1fce6a40fa9a65dc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:8e:2e:72:a7:1c:e0:04:ab:c9:b1:69:8d: f9:bb:97:c5:40:94:fd:27:03:9f:b2:a5:10:8e:a6: ca:5b:05:04:34:3b:d3:a2:3e:e8:c8:a4:27:d2:ed: b2:3f:49:7f:46:06:0b:c1:aa:ef:7e:fa:43:10:11: 5c:be:38:16:4f:d4:f2:20:84:50:3c:05:bc:84:30: 2f:f5:50:8b:43:ff:48:b7:64:6d:4d:64:86:5e:3f: c1:51:31:5d:9a:35:f2:fa:09:d5:dc:90:2a:8f:71: 19:09:e0:d5:26:3f:a7:ad:5d:50:98:0a:55:65:dc: 77:82:32:2f:6b:01:2f:48:e1:61:0c:a1:c6:d1:0d: e0:22:58:10:0a:0f:f4:f1:f8:03:2e:97:8e:0c:93: 14:18:61:47:0e:02:0d:ac:77:66:4c:b9:16:01:a7: 6f:2c:37:b9:6e:69:49:40:13:54:90:82:12:55:6a: 15:1f:be:a3:c2:9e:10:7a:c0:64:bb:e1:dc:65:40: c3:66:67:32:b1:7e:fc:20:b8:4b:7e:d4:fd:64:3b: 77:fb:95:ad:af:07:d8:12:e7:cc:5a:b7:d1:0b:55: 7d:dc:6e:be:fe:a7:5b:15:92:e8:ac:93:80:32:c3: 4a:3d:9b:76:c6:6f:f1:c2:26:e3:40:f9:f4:f2:aa: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F7:84:7F:B7:12:E4:12:7D:AE:DA:1F:CE:6A:40:FA:9A:65:DC:2E X509v3 Authority Key Identifier: keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/ZPeEf7cS5BJ9rtofzmpA-ppl3C4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.233.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:48:50:33:fc:86:f3:f7:a9:a1:01:0c:be:79:2b:3b:9c:8a: fc:c7:ea:e0:28:74:b8:6e:f8:0e:df:85:82:30:2c:14:aa:85: 55:1e:ab:9c:f1:d4:5a:a3:0a:b2:44:8d:f6:ee:72:f4:a2:74: d9:df:d5:bc:ac:a1:24:ae:f5:a4:42:7b:c1:40:49:b7:7d:aa: 8d:d9:f3:18:d1:49:f7:4e:23:69:a4:a3:bd:a5:0a:31:56:80: 08:d0:50:0e:00:9f:42:9c:3d:cd:ca:8b:ee:e5:3b:ad:63:6d: 91:3b:45:df:e5:78:a9:61:86:d9:4d:5a:7e:17:b4:3b:8f:4b: 56:fc:58:e3:00:be:0b:78:b4:70:ac:b0:32:3c:cc:72:bb:93: 0b:ea:b8:23:ca:8b:68:a7:ae:02:48:f4:7d:e4:dd:04:58:43: 72:b9:7b:d9:ec:67:94:e7:a1:b6:b5:45:48:8e:d7:52:62:85: c1:b3:11:e1:cd:7b:ab:89:06:74:1f:3d:40:98:ff:68:74:6d: d2:97:7d:46:31:74:ba:1f:5e:5a:93:1f:52:21:c9:f7:13:6d: 6b:c4:0e:c2:a6:db:1e:e6:b3:f2:2e:45:16:c5:76:7a:04:ab: b4:20:d5:78:fd:2c:27:51:b8:82:25:59:44:5d:08:18:de:1e: 3a:b1:d9:aa -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6x4TcmqesvZRRsksbWI6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi MzEyZjAwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGY3ODQ3ZmI3MTJlNDEyN2RhZWRhMWZjZTZhNDBmYTlhNjVkYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWmOLnKnHOAEq8mxaY35u5fFQJT9 JwOfsqUQjqbKWwUENDvToj7oyKQn0u2yP0l/RgYLwarvfvpDEBFcvjgWT9TyIIRQ PAW8hDAv9VCLQ/9It2RtTWSGXj/BUTFdmjXy+gnV3JAqj3EZCeDVJj+nrV1QmApV Zdx3gjIvawEvSOFhDKHG0Q3gIlgQCg/08fgDLpeODJMUGGFHDgINrHdmTLkWAadv LDe5bmlJQBNUkIISVWoVH76jwp4QesBku+HcZUDDZmcysX78ILhLftT9ZDt3+5Wt rwfYEufMWrfRC1V93G6+/qdbFZLorJOAMsNKPZt2xm/xwibjQPn08qqFFwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFGT3hH+3EuQSfa7aH85qQPqaZdwuMB8GA1UdIwQY MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt MTYyYjAyYmIxNWJkLzEvWlBlRWY3Y1M1Qko5cnRvZnptcEEtcHBsM0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk+kwDQYJ KoZIhvcNAQELBQADggEBADFIUDP8hvP3qaEBDL55KzucivzH6uAodLhu+A7fhYIw LBSqhVUeq5zx1FqjCrJEjfbucvSidNnf1bysoSSu9aRCe8FASbd9qo3Z8xjRSfdO I2mko72lCjFWgAjQUA4An0KcPc3Ki+7lO61jbZE7Rd/leKlhhtlNWn4XtDuPS1b8 WOMAvgt4tHCssDI8zHK7kwvquCPKi2inrgJI9H3k3QRYQ3K5e9nsZ5Tnoba1RUiO 11JihcGzEeHNe6uJBnQfPUCY/2h0bdKXfUYxdLofXlqTH1IhyfcTbWvEDsKm2x7m s/IuRRbFdnoEq7Qg1Xj9LCdRuIIlWURdCBjeHjqx2ao= -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:27 2026 by rpki-client