This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CqA9cr2DE41pKD1teATFElzNQMM.roa File: CqA9cr2DE41pKD1teATFElzNQMM.roa (raw, json) Hash identifier: Yu9pGPZlVEZb08k6hKWvmkKjxaboZondaohylKtbBNE= Subject key identifier: 0A:A0:3D:72:BD:83:13:8D:69:28:3D:6D:78:04:C5:12:5C:CD:40:C3 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C71E1BD94C0063424A60F88C6A3C95 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CqA9cr2DE41pKD1teATFElzNQMM.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215496 IP address blocks: 85.133.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:1b:d9:4c:00:63:42:4a:60:f8:8c:6a:3c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa03d72bd83138d69283d6d7804c5125ccd40c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:13:87:b8:7e:44:f8:f2:de:68:a7:89:4b: 37:e4:9f:d2:9a:06:7c:e3:bd:54:86:08:76:63:11: 3d:0c:af:69:90:1e:8d:7f:a8:db:52:fa:52:dc:79: 69:3b:ae:e2:66:7e:7d:b8:f5:97:90:98:42:94:7b: f9:bc:e7:d8:b2:ec:3a:3d:a6:d4:c2:87:96:73:52: 5e:dc:0d:44:f6:19:fe:69:a5:77:0c:fc:6f:e8:6b: 28:ed:fb:52:ba:58:27:31:d5:c9:41:3b:b5:6f:81: 48:4b:24:8d:91:7f:12:d6:fb:f8:92:f3:d0:b0:f8: c4:71:2a:39:e8:3a:7c:6c:1b:04:ec:8f:44:56:17: 32:6d:11:b8:ca:62:f4:17:39:8b:14:8c:70:14:12: f7:a3:16:35:6e:17:50:0a:a0:60:95:50:0c:b3:c0: 79:87:49:7d:3e:7e:05:7c:90:9b:f9:d4:48:f2:b5: 17:fe:8c:8f:61:20:cb:f5:07:4c:f8:69:ee:7e:90: 93:c4:c1:a7:a2:c1:0e:93:46:c9:a3:6a:be:c8:3c: 52:da:7a:86:40:3b:ab:bd:75:bc:3c:07:42:40:72: b7:e3:19:48:ef:b5:8a:a0:79:84:1b:42:72:63:c1: 2e:0f:f6:dc:dc:87:5c:93:ea:86:43:db:0c:24:81: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A0:3D:72:BD:83:13:8D:69:28:3D:6D:78:04:C5:12:5C:CD:40:C3 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CqA9cr2DE41pKD1teATFElzNQMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.227.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:29:9d:b9:42:45:3f:6b:1b:aa:a0:1c:89:ef:5f:66:09:74: 08:7a:e0:bb:41:1d:0f:4c:71:f9:df:e3:c9:5c:c3:f8:0b:ce: 1a:55:ff:40:19:04:bd:28:ca:4b:ba:57:fe:bf:93:c4:41:c5: be:79:26:12:70:22:67:0e:47:8f:76:a3:c7:6d:7a:3d:a2:39: 84:41:f8:06:79:99:8c:a9:20:a4:2e:e8:68:0e:04:8c:03:4c: 79:66:7f:01:fa:fb:e2:31:40:46:1a:87:04:cf:db:50:f4:d7: e1:8c:7f:5c:24:f0:3d:18:37:03:64:c9:eb:43:67:ed:fc:c7: 56:0f:9b:e0:2b:70:04:f9:14:29:2f:89:ec:c3:0b:4c:d8:11: 8c:d7:8a:c5:7e:dd:85:94:48:fc:8b:3c:25:76:c3:1b:a3:59: dc:3f:99:d2:c1:bd:e0:f2:e5:36:e1:ba:12:5d:57:87:2e:b3: ae:d5:d9:10:54:1d:d6:2a:e8:30:04:63:e9:cf:28:a1:40:d0: dc:32:6b:7f:59:0d:f3:88:a7:89:3d:8b:ef:3e:33:37:d3:8a: fc:e0:b1:ed:4f:2e:9c:6c:7b:ce:00:33:1e:2b:74:87:f5:99: dd:31:98:94:f9:73:34:82:79:b8:ae:d5:bd:d1:8c:99:e8:f5: 72:19:27:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx4b2UwAY0JKYPiMajyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWEwM2Q3MmJkODMxMzhkNjkyODNkNmQ3ODA0YzUxMjVjY2Q0MGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PYTh7h+RPjy3miniUs35J/SmgZ8 471Uhgh2YxE9DK9pkB6Nf6jbUvpS3HlpO67iZn59uPWXkJhClHv5vOfYsuw6PabU woeWc1Je3A1E9hn+aaV3DPxv6Gso7ftSulgnMdXJQTu1b4FISySNkX8S1vv4kvPQ sPjEcSo56Dp8bBsE7I9EVhcybRG4ymL0FzmLFIxwFBL3oxY1bhdQCqBglVAMs8B5 h0l9Pn4FfJCb+dRI8rUX/oyPYSDL9QdM+GnufpCTxMGnosEOk0bJo2q+yDxS2nqG QDurvXW8PAdCQHK34xlI77WKoHmEG0JyY8EuD/bc3Idck+qGQ9sMJIHmRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqgPXK9gxONaSg9bXgExRJczUDDMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvQ3FBOWNyMkRFNDFwS0QxdGVBVEZFbHpOUU1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXjMA0G CSqGSIb3DQEBCwUAA4IBAQBOKZ25QkU/axuqoByJ719mCXQIeuC7QR0PTHH53+PJ XMP4C84aVf9AGQS9KMpLulf+v5PEQcW+eSYScCJnDkePdqPHbXo9ojmEQfgGeZmM qSCkLuhoDgSMA0x5Zn8B+vviMUBGGocEz9tQ9NfhjH9cJPA9GDcDZMnrQ2ft/MdW D5vgK3AE+RQpL4nswwtM2BGM14rFft2FlEj8izwldsMbo1ncP5nSwb3g8uU24boS XVeHLrOu1dkQVB3WKugwBGPpzyihQNDcMmt/WQ3ziKeJPYvvPjM304r84LHtTy6c bHvOADMeK3SH9ZndMZiU+XM0gnm4rtW90YyZ6PVyGScB -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:09 2026 by rpki-client