This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/vzJwebJ7E7PLEVf89eADV1dlWKk.roa File: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (raw, json) Hash identifier: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo= Subject key identifier: BF:32:70:79:B2:7B:13:B3:CB:11:57:FC:F5:E0:03:57:57:65:58:A9 Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9 Certificate serial: 019B7CEDD42815C9B8161EA130BE6894166D Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/vzJwebJ7E7PLEVf89eADV1dlWKk.roa Signing time: Fri 02 Jan 2026 04:18:39 +0000 ROA not before: Fri 02 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 786 IP address blocks: 147.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d4:28:15:c9:b8:16:1e:a1:30:be:68:94:16:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf327079b27b13b3cb1157fcf5e00357576558a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b7:4e:2d:6f:74:d6:ca:50:2e:eb:64:66:d6: 1d:00:19:a7:a7:c1:41:3c:72:d9:a0:c6:cd:08:0f: 65:46:a4:3d:87:ac:a3:f7:ab:8b:0a:17:02:c7:d4: 4e:3c:7a:f5:9a:94:cb:fe:64:71:48:23:f1:59:bb: 0e:25:f2:c0:e4:af:91:d9:9a:74:f3:55:3f:e4:55: a0:ab:f9:d2:04:ae:aa:32:6a:0c:84:a0:7c:0d:31: a6:88:c8:fc:52:84:d6:73:ca:d4:3b:96:db:a9:ca: 78:c3:47:21:24:92:14:0d:42:f8:63:a4:17:c7:75: b5:89:17:b3:47:c4:34:1c:08:2b:90:63:7f:00:87: 5f:ae:63:06:fe:8f:7f:f5:33:d5:c9:c1:31:5b:69: 71:a4:a9:98:b7:39:a6:ca:04:2d:2b:49:05:f8:97: 1c:a8:60:2b:dd:e3:5e:c4:0e:dd:c8:27:31:d6:9b: 14:2b:6a:5a:84:a8:a7:31:59:cd:75:5d:be:72:00: 59:c8:d0:7b:32:f3:41:86:66:20:5d:c2:75:7a:a7: 0a:5c:3d:09:bb:3a:80:12:ce:eb:d9:79:9b:85:dc: 86:bb:99:41:72:9d:77:ab:0c:33:89:6f:93:67:57: 28:97:70:30:ec:00:6a:62:24:90:ad:aa:71:c2:d5: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:32:70:79:B2:7B:13:B3:CB:11:57:FC:F5:E0:03:57:57:65:58:A9 X509v3 Authority Key Identifier: keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/vzJwebJ7E7PLEVf89eADV1dlWKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:5b:fc:43:0d:15:18:92:5e:92:a8:36:e0:6e:2c:e1:e6:ac: 05:96:1c:2e:e3:d2:f6:03:1b:5f:96:c3:7b:87:59:5c:dc:e7: 41:22:b9:8e:b6:7c:a7:e7:9a:d6:4e:e2:68:21:6a:38:aa:8f: ba:6f:5a:4a:9d:1c:c4:64:1f:05:cb:95:44:4d:ac:b9:24:a2: 76:20:ae:88:2a:f9:74:f9:b4:b9:c3:78:06:2b:be:44:6b:1f: 7c:a4:0e:01:ab:2c:61:aa:07:db:84:f8:55:ca:08:86:12:84: a2:da:62:09:21:0e:f5:87:5f:88:79:a7:85:91:80:f7:1b:fa: f2:f7:08:51:5b:a8:fa:c4:cb:5f:f2:12:64:8d:5f:fe:9b:34: d4:e7:2f:91:b0:3f:98:35:a3:63:bb:f3:1e:61:bd:51:56:64: 39:32:65:98:af:9c:96:e0:ed:a8:7d:f5:c9:74:f2:ae:1b:61: 09:b4:06:f8:30:e3:4c:0c:74:e4:1f:c0:11:67:17:31:ee:1e: ec:e3:1a:d7:84:b6:57:90:b2:52:40:52:06:ce:8e:dd:fd:49: 95:9e:56:48:50:f4:c5:6a:29:0c:bd:ac:d9:fc:2e:aa:d1:09: 52:83:88:db:d6:6d:86:99:76:56:ef:51:25:5e:eb:a1:20:a9: 42:7d:36:d6 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt87dQoFcm4Fh6hML5olBZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTZhNzg1YmY3ZmU0ZDdjNGE1YzZiNzIxMjE0ZjBlOTZm M2FlYzkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjMyNzA3OWIyN2IxM2IzY2IxMTU3ZmNmNWUwMDM1NzU3NjU1OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bdOLW901spQLutkZtYdABmnp8FB PHLZoMbNCA9lRqQ9h6yj96uLChcCx9ROPHr1mpTL/mRxSCPxWbsOJfLA5K+R2Zp0 81U/5FWgq/nSBK6qMmoMhKB8DTGmiMj8UoTWc8rUO5bbqcp4w0chJJIUDUL4Y6QX x3W1iRezR8Q0HAgrkGN/AIdfrmMG/o9/9TPVycExW2lxpKmYtzmmygQtK0kF+Jcc qGAr3eNexA7dyCcx1psUK2pahKinMVnNdV2+cgBZyNB7MvNBhmYgXcJ1eqcKXD0J uzqAEs7r2XmbhdyGu5lBcp13qwwziW+TZ1col3Aw7ABqYiSQrapxwtXPHQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFL8ycHmyexOzyxFX/PXgA1dXZVipMB8GA1UdIwQY MBaAFOFWp4W/f+TXxKXGtyEhTw6W867JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUt N2JkMGNmYTIzOWY2LzEvdnpKd2ViSjdFN1BMRVZmODllQURWMWRsV0trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUtN2JkMGNmYTIzOWY2 LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk/wwDQYJ KoZIhvcNAQELBQADggEBABhb/EMNFRiSXpKoNuBuLOHmrAWWHC7j0vYDG1+Ww3uH WVzc50EiuY62fKfnmtZO4mghajiqj7pvWkqdHMRkHwXLlURNrLkkonYgrogq+XT5 tLnDeAYrvkRrH3ykDgGrLGGqB9uE+FXKCIYShKLaYgkhDvWHX4h5p4WRgPcb+vL3 CFFbqPrEy1/yEmSNX/6bNNTnL5GwP5g1o2O78x5hvVFWZDkyZZivnJbg7ah99cl0 8q4bYQm0Bvgw40wMdOQfwBFnFzHuHuzjGteEtleQslJAUgbOjt39SZWeVkhQ9MVq KQy9rNn8LqrRCVKDiNvWbYaZdlbvUSVe66EgqUJ9NtY= -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:09 2026 by rpki-client