This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kUL_GvYXS_94QSofdFlMNZdISv4.roa File: kUL_GvYXS_94QSofdFlMNZdISv4.roa (raw, json) Hash identifier: Mxp3nUXiwwphpooQtwG7jgdbNv/OEx4oNKjtwZp8Mv8= Subject key identifier: 91:42:FF:1A:F6:17:4B:FF:78:41:2A:1F:74:59:4C:35:97:48:4A:FE Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C71C32B39BE56C075036C38DE39934 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kUL_GvYXS_94QSofdFlMNZdISv4.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214526 IP address blocks: 85.133.194.0/24 maxlen: 24 85.133.195.0/24 maxlen: 24 85.133.230.0/24 maxlen: 24 85.133.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1c:32:b3:9b:e5:6c:07:50:36:c3:8d:e3:99:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9142ff1af6174bff78412a1f74594c3597484afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:01:38:81:c0:95:ab:93:72:61:d7:2c:00: 1c:be:3a:09:f6:2e:43:cc:19:de:64:c0:60:a0:43: cb:60:aa:4c:24:6f:93:44:bb:23:d3:91:4f:38:92: 89:1a:b9:8a:38:9f:cd:b4:6e:ae:f1:37:ef:6c:69: 38:e4:47:16:b9:48:49:d4:b5:8e:6c:a3:eb:1c:43: ed:b3:10:01:78:86:72:96:49:83:d7:5d:0a:91:98: 5e:ac:56:1f:b3:23:5c:a7:92:4c:7a:c3:97:ee:4d: af:61:1b:2e:05:66:77:6f:72:8f:82:f3:b9:dd:b2: c5:68:70:3a:7d:8f:a5:30:80:2e:22:65:8a:86:7d: 5b:92:6c:58:6f:e6:97:e4:b8:34:0b:cd:3b:57:06: 2c:de:f7:94:8e:1a:b0:5c:09:b5:3c:59:a6:b9:e2: 4c:f6:5e:fc:9a:45:c4:35:7a:8f:5f:fe:3c:99:d8: 19:3e:4a:9e:8a:bd:21:68:01:ba:f5:31:99:6a:ef: e6:78:ef:64:9e:a1:4f:a0:6a:a6:bf:e2:92:0a:3b: 35:30:ca:30:10:aa:98:aa:bc:08:6e:b7:98:6d:e3: fa:16:78:c7:9c:f6:0f:57:c9:89:d2:1c:79:b2:e8: 02:9e:e2:dd:9c:df:f8:9c:e9:b7:e4:24:03:92:36: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:FF:1A:F6:17:4B:FF:78:41:2A:1F:74:59:4C:35:97:48:4A:FE X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kUL_GvYXS_94QSofdFlMNZdISv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.194.0/23 85.133.230.0/24 85.133.252.0/24 Signature Algorithm: sha256WithRSAEncryption 43:44:1b:09:ea:ae:5b:5e:fa:c3:8c:d8:4d:cc:3f:9d:ec:f0: 74:81:e3:33:a5:15:c0:b9:15:54:da:bf:c2:bf:10:32:f2:e5: 2b:d0:b5:a2:e3:88:71:4f:f3:e0:b1:2a:70:d4:23:e8:b7:d8: 77:80:a5:e0:f2:73:d3:2a:81:18:81:5e:c5:fe:56:33:25:d5: c7:cf:2b:1d:90:97:bc:00:ce:b6:65:c7:46:07:96:79:81:66: 92:3e:56:d9:e5:b5:64:02:ee:57:12:ea:a1:24:23:b6:84:b7: b6:43:12:98:e8:de:6e:52:b6:5c:44:10:30:b4:e0:95:59:61: 6a:eb:ad:cd:71:0b:cd:c5:86:ec:d5:6e:9b:f1:cb:5f:ab:06: 2e:5a:14:4b:95:96:68:3e:85:4b:6d:88:1b:71:c6:ec:a9:37: 50:77:e8:7f:c6:97:e9:2a:15:13:0c:2d:df:ce:e5:69:0e:06: 42:56:9b:7a:91:bc:70:b1:51:52:c5:fa:db:1b:46:ee:a3:af: b1:ca:fb:69:89:06:85:29:47:0a:91:df:3d:c9:28:f9:cf:54: 90:45:92:05:eb:84:e2:1c:b3:45:2a:ce:af:ee:17:39:f4:7e: 06:fd:6b:47:e7:82:fe:f4:41:93:69:bc:ee:27:58:f4:fb:23: 5f:6f:8e:be -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xxwys5vlbAdQNsON45k0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQyZmYxYWY2MTc0YmZmNzg0MTJhMWY3NDU5NGMzNTk3NDg0YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc0BOIHAlauTcmHXLAAcvjoJ9i5D zBneZMBgoEPLYKpMJG+TRLsj05FPOJKJGrmKOJ/NtG6u8TfvbGk45EcWuUhJ1LWO bKPrHEPtsxABeIZylkmD110KkZherFYfsyNcp5JMesOX7k2vYRsuBWZ3b3KPgvO5 3bLFaHA6fY+lMIAuImWKhn1bkmxYb+aX5Lg0C807VwYs3veUjhqwXAm1PFmmueJM 9l78mkXENXqPX/48mdgZPkqeir0haAG69TGZau/meO9knqFPoGqmv+KSCjs1MMow EKqYqrwIbreYbeP6FnjHnPYPV8mJ0hx5sugCnuLdnN/4nOm35CQDkjYhtQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJFC/xr2F0v/eEEqH3RZTDWXSEr+MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEva1VMX0d2WVhTXzk0UVNvZmRGbE1OWmRJU3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVYXCAwQA VYXmAwQAVYX8MA0GCSqGSIb3DQEBCwUAA4IBAQBDRBsJ6q5bXvrDjNhNzD+d7PB0 geMzpRXAuRVU2r/CvxAy8uUr0LWi44hxT/PgsSpw1CPot9h3gKXg8nPTKoEYgV7F /lYzJdXHzysdkJe8AM62ZcdGB5Z5gWaSPlbZ5bVkAu5XEuqhJCO2hLe2QxKY6N5u UrZcRBAwtOCVWWFq663NcQvNxYbs1W6b8ctfqwYuWhRLlZZoPoVLbYgbccbsqTdQ d+h/xpfpKhUTDC3fzuVpDgZCVpt6kbxwsVFSxfrbG0buo6+xyvtpiQaFKUcKkd89 ySj5z1SQRZIF64TiHLNFKs6v7hc59H4G/WtH54L+9EGTabzuJ1j0+yNfb46+ -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:21 2026 by rpki-client