This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/C93gt4XQgnFuiR_M2GqSUlK4ODI.roa File: C93gt4XQgnFuiR_M2GqSUlK4ODI.roa (raw, json) Hash identifier: qTmy4ODaZLO1XTRjx5trZTuDUAIwoIP6pZkaBfci5N4= Subject key identifier: 0B:DD:E0:B7:85:D0:82:71:6E:89:1F:CC:D8:6A:92:52:52:B8:38:32 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019AD09C308E19D9A63BE5080FAB64D5916F Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/C93gt4XQgnFuiR_M2GqSUlK4ODI.roa Signing time: Sat 29 Nov 2025 17:14:48 +0000 ROA not before: Sat 29 Nov 2025 17:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39074 IP address blocks: 85.133.128.0/22 maxlen: 22 85.133.128.0/24 maxlen: 24 85.133.129.0/24 maxlen: 24 85.133.130.0/24 maxlen: 24 85.133.131.0/24 maxlen: 24 85.133.132.0/24 maxlen: 24 85.133.133.0/24 maxlen: 24 85.133.134.0/24 maxlen: 24 85.133.135.0/24 maxlen: 24 85.133.136.0/24 maxlen: 24 85.133.137.0/24 maxlen: 24 85.133.138.0/24 maxlen: 24 85.133.139.0/24 maxlen: 24 85.133.140.0/22 maxlen: 22 85.133.140.0/24 maxlen: 24 85.133.141.0/24 maxlen: 24 85.133.142.0/24 maxlen: 24 85.133.143.0/24 maxlen: 24 85.133.144.0/24 maxlen: 24 85.133.145.0/24 maxlen: 24 85.133.146.0/24 maxlen: 24 85.133.147.0/24 maxlen: 24 85.133.148.0/24 maxlen: 24 85.133.149.0/24 maxlen: 24 85.133.150.0/24 maxlen: 24 85.133.151.0/24 maxlen: 24 85.133.152.0/24 maxlen: 24 85.133.154.0/24 maxlen: 24 85.133.155.0/24 maxlen: 24 85.133.156.0/24 maxlen: 24 85.133.157.0/24 maxlen: 24 85.133.158.0/24 maxlen: 24 85.133.159.0/24 maxlen: 24 85.133.164.0/24 maxlen: 24 85.133.165.0/24 maxlen: 24 85.133.166.0/24 maxlen: 24 85.133.167.0/24 maxlen: 24 85.133.168.0/22 maxlen: 24 85.133.168.0/24 maxlen: 24 85.133.171.0/24 maxlen: 24 85.133.172.0/22 maxlen: 24 85.133.172.0/24 maxlen: 24 85.133.173.0/24 maxlen: 24 85.133.175.0/24 maxlen: 24 85.133.176.0/22 maxlen: 24 85.133.176.0/24 maxlen: 24 85.133.177.0/24 maxlen: 24 85.133.178.0/24 maxlen: 24 85.133.179.0/24 maxlen: 24 85.133.180.0/22 maxlen: 24 85.133.180.0/24 maxlen: 24 85.133.181.0/24 maxlen: 24 85.133.182.0/24 maxlen: 24 85.133.183.0/24 maxlen: 24 85.133.184.0/22 maxlen: 24 85.133.184.0/24 maxlen: 24 85.133.185.0/24 maxlen: 24 85.133.186.0/24 maxlen: 24 85.133.187.0/24 maxlen: 24 85.133.188.0/22 maxlen: 22 85.133.188.0/24 maxlen: 24 85.133.189.0/24 maxlen: 24 85.133.190.0/24 maxlen: 24 85.133.191.0/24 maxlen: 24 85.133.192.0/24 maxlen: 24 85.133.199.0/24 maxlen: 24 85.133.207.0/24 maxlen: 24 85.133.209.0/24 maxlen: 24 85.133.210.0/23 maxlen: 24 85.133.210.0/24 maxlen: 24 85.133.211.0/24 maxlen: 24 85.133.212.0/24 maxlen: 24 85.133.213.0/24 maxlen: 24 85.133.215.0/24 maxlen: 24 85.133.222.0/24 maxlen: 24 85.133.223.0/24 maxlen: 24 85.133.226.0/24 maxlen: 24 85.133.231.0/24 maxlen: 24 85.133.232.0/24 maxlen: 24 85.133.235.0/24 maxlen: 24 85.133.244.0/24 maxlen: 24 85.133.251.0/24 maxlen: 24 85.133.254.0/24 maxlen: 24 85.133.255.0/24 maxlen: 24 2a04:87c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:9c:30:8e:19:d9:a6:3b:e5:08:0f:ab:64:d5:91:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 29 17:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0bdde0b785d082716e891fccd86a925252b83832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:1c:50:cb:c1:eb:7e:f4:f0:cb:f1:36:4c: c8:05:d9:35:27:5b:5e:9b:fe:2c:9d:fc:6b:0d:22: d1:ed:bd:2f:f6:83:af:d2:98:ad:2a:65:59:91:67: 42:54:87:27:6c:ad:dd:00:92:f8:d9:c8:96:0d:78: cd:b5:0e:1b:ce:3b:94:0c:31:7c:67:a5:db:db:6c: 37:b5:a4:d3:0a:da:b2:71:cf:6f:91:1a:3a:c0:69: 66:4e:5e:6f:83:b8:5a:be:3d:bb:32:f4:08:ea:f5: d6:76:82:d6:46:40:24:51:9e:03:be:35:9f:12:a6: db:31:ce:a4:c3:02:dc:83:1f:6f:ee:d4:1a:27:84: b3:5c:ff:c6:58:1e:db:e6:f7:9d:b6:98:ef:d8:71: 98:e4:55:95:08:4d:a8:94:80:64:a8:02:11:4b:f0: ae:10:6d:f3:fe:64:85:96:a7:39:fd:05:0e:59:7d: 71:c1:4c:a9:3a:2d:00:bb:b7:45:3c:99:81:b5:0f: cf:9b:61:62:30:42:24:87:21:ee:59:cd:1f:5a:d9: 2f:6c:02:dc:3d:5d:31:34:dc:aa:50:74:aa:16:73: 4f:19:36:ea:88:05:bf:8f:cf:e9:6f:b1:26:ef:05: a5:e7:1f:43:bf:82:da:a1:25:98:77:ea:9d:30:0a: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DD:E0:B7:85:D0:82:71:6E:89:1F:CC:D8:6A:92:52:52:B8:38:32 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/C93gt4XQgnFuiR_M2GqSUlK4ODI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.128.0-85.133.152.255 85.133.154.0-85.133.159.255 85.133.164.0-85.133.192.255 85.133.199.0/24 85.133.207.0/24 85.133.209.0-85.133.213.255 85.133.215.0/24 85.133.222.0/23 85.133.226.0/24 85.133.231.0-85.133.232.255 85.133.235.0/24 85.133.244.0/24 85.133.251.0/24 85.133.254.0/23 IPv6: 2a04:87c0::/29 Signature Algorithm: sha256WithRSAEncryption 68:1e:41:1e:02:94:f3:4a:92:07:b5:94:22:05:30:af:cb:8f: f0:ee:54:e0:e2:83:98:c5:89:ed:3a:26:bc:97:b1:58:22:fe: 9b:9d:f6:4e:b4:c8:fe:f1:ea:01:c9:ed:52:c4:fd:dd:a1:3b: ec:91:d1:b3:78:16:6f:ab:ae:e9:b7:a4:05:e0:0b:1f:b7:26: 5e:1e:f7:61:b9:83:c6:cc:9f:b8:b8:6f:1d:d6:57:5c:36:1a: aa:54:ed:e9:1e:6a:a3:a2:75:09:36:bf:b1:6a:8f:87:e0:db: 8f:c1:8e:cb:30:1e:0b:51:0c:68:36:a7:d8:fb:02:12:5e:5a: 22:de:cd:e9:53:c7:19:c8:8a:66:a1:2d:72:a9:48:d2:85:20: 6c:29:2f:ad:67:52:77:73:84:65:d4:bd:c7:b2:c6:66:23:14: 12:a6:12:50:21:47:bd:bb:5e:f1:bf:c3:60:11:2d:8c:44:16: 0b:4c:50:c2:6d:73:31:d4:75:a8:8d:15:f7:04:aa:92:e8:df: 71:92:bd:a2:d3:1a:a5:89:39:a1:66:b3:49:74:68:8f:a2:63: 5f:72:e8:a6:2a:79:e1:6f:1c:f6:f5:5d:cf:c3:cf:2b:72:24: 75:f3:57:c4:17:07:5c:20:32:fa:48:de:4a:cd:44:e5:44:c0: e7:37:91:30 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZrQnDCOGdmmO+UID6tk1ZFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTI5MTcxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmRkZTBiNzg1ZDA4MjcxNmU4OTFmY2NkODZhOTI1MjUyYjgzODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc8cUMvB63708MvxNkzIBdk1J1te m/4snfxrDSLR7b0v9oOv0pitKmVZkWdCVIcnbK3dAJL42ciWDXjNtQ4bzjuUDDF8 Z6Xb22w3taTTCtqycc9vkRo6wGlmTl5vg7havj27MvQI6vXWdoLWRkAkUZ4DvjWf EqbbMc6kwwLcgx9v7tQaJ4SzXP/GWB7b5vedtpjv2HGY5FWVCE2olIBkqAIRS/Cu EG3z/mSFlqc5/QUOWX1xwUypOi0Au7dFPJmBtQ/Pm2FiMEIkhyHuWc0fWtkvbALc PV0xNNyqUHSqFnNPGTbqiAW/j8/pb7Em7wWl5x9Dv4LaoSWYd+qdMAqdVwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFAvd4LeF0IJxbokfzNhqklJSuDgyMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvQzkzZ3Q0WFFnbkZ1aVJfTTJHcVNVbEs0T0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBggQCAAEwfDAMAwQH VYWAAwQAVYWYMAwDBAFVhZoDBAVVhYAwDAMEAlWFpAMEAFWFwAMEAFWFxwMEAFWF zzAMAwQAVYXRAwQBVYXUAwQAVYXXAwQBVYXeAwQAVYXiMAwDBABVhecDBABVhegD BABVhesDBABVhfQDBABVhfsDBAFVhf4wDQQCAAIwBwMFAyoEh8AwDQYJKoZIhvcN AQELBQADggEBAGgeQR4ClPNKkge1lCIFMK/Lj/DuVODig5jFie06JryXsVgi/pud 9k60yP7x6gHJ7VLE/d2hO+yR0bN4Fm+rrum3pAXgCx+3Jl4e92G5g8bMn7i4bx3W V1w2GqpU7ekeaqOidQk2v7Fqj4fg24/BjsswHgtRDGg2p9j7AhJeWiLezelTxxnI imahLXKpSNKFIGwpL61nUndzhGXUvceyxmYjFBKmElAhR727XvG/w2ARLYxEFgtM UMJtczHUdaiNFfcEqpLo33GSvaLTGqWJOaFms0l0aI+iY19y6KYqeeFvHPb1Xc/D zytyJHXzV8QXB1wgMvpI3krNROVEwOc3kTA= -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:06 2025 by rpki-client