This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DZlCXtJccLP5CvH1IidVE75-VBU.roa File: DZlCXtJccLP5CvH1IidVE75-VBU.roa (raw, json) Hash identifier: GSRgLFliaDL+yaLYBTmTuTWDmh/1GTiBHJVvOOeVvME= Subject key identifier: 0D:99:42:5E:D2:5C:70:B3:F9:0A:F1:F5:22:27:55:13:BE:7E:54:15 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C718FFE0D044829C3B638D81251664 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DZlCXtJccLP5CvH1IidVE75-VBU.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214192 IP address blocks: 85.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:ff:e0:d0:44:82:9c:3b:63:8d:81:25:16:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d99425ed25c70b3f90af1f522275513be7e5415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:73:41:80:d1:71:3f:eb:35:8f:f0:ca:eb: 78:6e:a2:1b:2c:01:9e:f0:eb:e9:e9:e3:b6:d3:0c: 3e:d1:d1:c5:4b:64:f7:1c:d8:f2:cf:90:27:b4:1c: 1c:7e:16:c4:e6:7f:ed:77:0a:87:aa:55:b6:bc:ae: 4b:97:7d:aa:e6:87:b1:b5:b4:7d:73:02:77:19:af: 76:2e:85:ba:8c:55:e1:47:7f:23:fc:9d:76:40:60: d6:5c:6a:b7:69:89:33:5e:e5:f1:83:f2:d7:60:5b: f0:c7:25:56:fd:ea:f5:59:1b:b3:75:50:98:97:7d: 8e:98:f4:0a:f8:70:ef:6b:8b:f5:12:6b:2d:e6:0b: 0c:88:2b:c1:49:51:ec:9c:ec:f1:43:a9:7e:ff:ae: b0:7f:34:73:e6:72:e9:ae:ad:b2:e0:6f:c6:00:64: 42:7a:15:43:40:5a:8c:7a:5b:ac:0c:7c:a0:64:9b: 04:ed:36:a4:00:c5:0b:d8:23:01:4f:a9:1d:49:e9: 4e:9c:d4:71:f0:c7:7e:e3:ad:33:ec:dc:08:af:0a: 26:4e:17:5d:7f:8a:13:f2:b6:47:5c:8d:9a:79:63: d7:66:cd:ac:9f:e4:e5:e1:38:c4:76:e1:0f:ce:95: 2c:2b:94:5e:0b:1f:89:85:f2:e3:4f:ac:ba:0c:6e: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:99:42:5E:D2:5C:70:B3:F9:0A:F1:F5:22:27:55:13:BE:7E:54:15 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DZlCXtJccLP5CvH1IidVE75-VBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.224.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:39:38:88:a3:8a:50:a3:1b:1b:45:5c:83:7d:e2:37:61:24: 66:36:3e:1d:44:fe:be:6c:59:f9:52:08:16:2c:80:0c:28:97: 37:9f:3c:96:33:46:b8:90:f5:2a:e6:a4:ca:cc:e6:ba:b4:3d: 63:4f:a9:8a:08:a4:a0:93:a7:6f:c9:1e:45:05:f7:fb:03:9f: 14:c7:9a:6b:3f:08:4d:38:d3:e6:e3:22:94:27:3e:ef:5b:28: 56:81:0f:9a:54:d3:f8:ec:72:fb:00:b4:5d:f3:ea:f8:63:9f: 8e:37:91:19:df:62:46:58:3a:68:6b:82:b3:31:e1:e8:f4:95: 26:ef:f2:6f:c3:fa:46:66:e1:b9:5f:00:8a:10:fc:12:44:0b: 30:77:db:c7:0f:5b:c2:8b:84:3c:a8:a4:d9:b8:6f:a3:e4:16: 7c:97:f1:13:ef:bf:f7:cc:68:09:b4:66:7a:e1:3d:3a:12:39: 37:5c:fa:08:77:cd:59:d3:bc:b0:df:fc:c0:7c:4f:4e:bb:eb: e7:ae:24:c8:9e:63:b6:b2:93:53:99:9e:ce:98:92:a9:a9:bd: e3:9c:75:5e:93:8f:5f:d0:30:52:cc:70:58:8b:a4:b6:ee:fa: 33:f1:9d:f3:a2:cc:93:8f:a8:3a:bf:3c:c2:f8:a0:3f:24:10: dc:55:30:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxj/4NBEgpw7Y42BJRZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDk5NDI1ZWQyNWM3MGIzZjkwYWYxZjUyMjI3NTUxM2JlN2U1NDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gBzQYDRcT/rNY/wyut4bqIbLAGe 8Ovp6eO20ww+0dHFS2T3HNjyz5AntBwcfhbE5n/tdwqHqlW2vK5Ll32q5oextbR9 cwJ3Ga92LoW6jFXhR38j/J12QGDWXGq3aYkzXuXxg/LXYFvwxyVW/er1WRuzdVCY l32OmPQK+HDva4v1Emst5gsMiCvBSVHsnOzxQ6l+/66wfzRz5nLprq2y4G/GAGRC ehVDQFqMelusDHygZJsE7TakAMUL2CMBT6kdSelOnNRx8Md+460z7NwIrwomThdd f4oT8rZHXI2aeWPXZs2sn+Tl4TjEduEPzpUsK5ReCx+JhfLjT6y6DG6VUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2ZQl7SXHCz+Qrx9SInVRO+flQVMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvRFpsQ1h0SmNjTFA1Q3ZIMUlpZFZFNzUtVkJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXgMA0G CSqGSIb3DQEBCwUAA4IBAQCaOTiIo4pQoxsbRVyDfeI3YSRmNj4dRP6+bFn5UggW LIAMKJc3nzyWM0a4kPUq5qTKzOa6tD1jT6mKCKSgk6dvyR5FBff7A58Ux5prPwhN ONPm4yKUJz7vWyhWgQ+aVNP47HL7ALRd8+r4Y5+ON5EZ32JGWDpoa4KzMeHo9JUm 7/Jvw/pGZuG5XwCKEPwSRAswd9vHD1vCi4Q8qKTZuG+j5BZ8l/ET77/3zGgJtGZ6 4T06Ejk3XPoId81Z07yw3/zAfE9Ou+vnriTInmO2spNTmZ7OmJKpqb3jnHVek49f 0DBSzHBYi6S27voz8Z3zosyTj6g6vzzC+KA/JBDcVTAp -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:35 2026 by rpki-client