This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DDQuSRchUsTONQFDXN241i8makQ.roa File: DDQuSRchUsTONQFDXN241i8makQ.roa (raw, json) Hash identifier: 9Bakhxfn/ZSz8KdwGJaTawgcJWGxI/ZViAwYdC6JLp8= Subject key identifier: 0C:34:2E:49:17:21:52:C4:CE:35:01:43:5C:DD:B8:D6:2F:26:6A:44 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C711786DC29BA260B9726A42D6D516 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DDQuSRchUsTONQFDXN241i8makQ.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35372 IP address blocks: 85.133.218.0/24 maxlen: 24 85.133.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:78:6d:c2:9b:a2:60:b9:72:6a:42:d6:d5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c342e49172152c4ce3501435cddb8d62f266a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8d:5c:96:71:af:45:54:bb:41:9c:8d:74:f4: be:3b:e1:a0:7e:62:f3:00:7a:64:a2:e1:5b:18:0d: 66:b1:5f:ec:34:00:b8:db:72:34:69:d7:ab:b2:d1: 2f:99:5c:49:fa:01:26:e8:48:82:00:d3:d2:81:c3: 87:16:4b:1b:1a:2c:27:d6:0f:7e:bf:e4:89:33:02: e8:3d:79:92:17:06:42:ca:ed:d0:26:2c:01:1b:90: 3f:11:13:f2:1d:1e:51:8a:0b:fa:6e:7c:c2:57:cd: f6:f5:3c:6c:58:ed:f1:20:ec:9c:0c:1e:05:fd:9a: 08:21:f4:66:04:fc:7c:93:a4:02:d3:5c:95:a7:74: 83:d5:df:e4:07:dd:95:7e:4d:dc:db:c1:d1:f4:9d: 6c:00:17:6e:23:08:5e:6a:bc:c5:69:29:08:3f:84: fd:9b:cc:ac:7c:c1:65:7a:03:ed:1b:7b:5d:e8:72: 51:ed:1b:99:f2:bd:f1:e4:57:2c:f5:c0:13:fe:44: 57:de:5a:9d:e7:a4:b4:49:f6:b2:c2:e9:ef:76:9e: 0a:a0:83:07:50:e1:11:bc:22:fe:df:77:49:98:6c: 58:38:54:af:d9:bb:a6:dd:87:b6:c0:c2:e9:77:33: bc:56:9a:05:19:c8:eb:6a:bf:ce:38:83:dc:f3:39: 77:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:34:2E:49:17:21:52:C4:CE:35:01:43:5C:DD:B8:D6:2F:26:6A:44 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DDQuSRchUsTONQFDXN241i8makQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.218.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:02:ef:9e:0d:f9:53:82:9b:f1:42:4c:3e:f4:0e:b9:3e:f0: 80:38:e9:d1:67:bf:3e:99:05:d2:00:9d:c2:be:d3:57:8f:80: e0:07:02:43:bf:37:69:37:b6:3d:f2:45:b3:9e:33:6a:d0:37: 40:dc:f0:f4:8a:8b:d9:cd:62:92:ba:a9:b4:cd:e8:8b:15:e6: 8f:47:ab:da:66:6b:24:d9:1e:49:06:86:55:1c:8e:49:1c:ac: c9:5e:42:95:21:b4:07:72:12:b3:7e:69:00:f3:19:a2:2e:06: cb:a0:bf:4f:41:f4:c2:e4:c8:03:31:76:f3:3c:9e:e5:3c:a7: 6b:0f:91:84:48:26:0c:3b:f6:14:28:f6:95:f9:08:53:9b:51: 17:82:f3:64:77:17:64:78:bd:26:f6:40:ab:91:90:db:47:19: 7f:3f:70:a8:70:1a:18:e9:2d:55:46:93:a0:a0:ea:b7:f1:d2: 02:64:34:b5:f0:a1:90:c9:eb:fa:1d:41:24:e9:a6:67:22:b3: 6e:23:4d:c3:b4:8f:1e:85:4b:1a:9b:b0:cd:d5:a3:c8:2d:c5: 60:74:77:c3:85:6d:bd:6a:13:16:69:1d:5f:d5:fa:1f:77:dc: 35:0a:64:37:de:fb:53:07:aa:e9:13:10:9b:9d:56:7b:36:b5: 11:b7:70:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxF4bcKbomC5cmpC1tUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzM0MmU0OTE3MjE1MmM0Y2UzNTAxNDM1Y2RkYjhkNjJmMjY2YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I1clnGvRVS7QZyNdPS+O+GgfmLz AHpkouFbGA1msV/sNAC423I0aderstEvmVxJ+gEm6EiCANPSgcOHFksbGiwn1g9+ v+SJMwLoPXmSFwZCyu3QJiwBG5A/ERPyHR5Rigv6bnzCV8329TxsWO3xIOycDB4F /ZoIIfRmBPx8k6QC01yVp3SD1d/kB92Vfk3c28HR9J1sABduIwhearzFaSkIP4T9 m8ysfMFlegPtG3td6HJR7RuZ8r3x5Fcs9cAT/kRX3lqd56S0Sfaywunvdp4KoIMH UOERvCL+33dJmGxYOFSv2bum3Ye2wMLpdzO8VpoFGcjrar/OOIPc8zl3kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAw0LkkXIVLEzjUBQ1zduNYvJmpEMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvRERRdVNSY2hVc1RPTlFGRFhOMjQxaThtYWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVYXaMA0G CSqGSIb3DQEBCwUAA4IBAQCOAu+eDflTgpvxQkw+9A65PvCAOOnRZ78+mQXSAJ3C vtNXj4DgBwJDvzdpN7Y98kWznjNq0DdA3PD0iovZzWKSuqm0zeiLFeaPR6vaZmsk 2R5JBoZVHI5JHKzJXkKVIbQHchKzfmkA8xmiLgbLoL9PQfTC5MgDMXbzPJ7lPKdr D5GESCYMO/YUKPaV+QhTm1EXgvNkdxdkeL0m9kCrkZDbRxl/P3CocBoY6S1VRpOg oOq38dICZDS18KGQyev6HUEk6aZnIrNuI03DtI8ehUsam7DN1aPILcVgdHfDhW29 ahMWaR1f1fofd9w1CmQ33vtTB6rpExCbnVZ7NrURt3A7 -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:11 2026 by rpki-client