This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa File: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (raw, json) Hash identifier: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI= Subject key identifier: 20:A3:03:F1:A8:3A:8D:FC:80:34:D5:BF:64:71:C0:9A:DA:04:F1:05 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C7120F84074A0EB10CAAE427912217 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 85.133.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:12:0f:84:07:4a:0e:b1:0c:aa:e4:27:91:22:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20a303f1a83a8dfc8034d5bf6471c09ada04f105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:8b:3f:3d:96:5c:72:19:84:77:9c:21:62: 9c:2a:d7:26:16:63:a6:02:df:2d:e1:c9:0a:46:c2: 83:6a:e1:64:8c:d5:f4:16:66:4d:c6:16:5c:cc:53: 4a:ae:02:da:56:5a:3d:9a:8b:ca:ee:08:be:0e:e8: 24:7b:53:e6:86:61:b9:41:15:99:5a:48:14:8b:aa: 64:14:19:53:9a:33:76:dc:36:45:5e:9f:33:70:b5: 19:cf:94:0b:5d:5b:f3:e7:dd:c4:7b:d0:94:2c:09: 6e:1a:45:f6:33:26:e5:2f:4c:49:aa:30:97:1f:46: 85:77:74:ff:5f:b8:55:ea:06:00:74:49:87:82:99: 31:38:26:cb:ea:88:6d:31:aa:8b:b7:a5:f4:fa:43: bd:0a:62:9c:06:73:1a:21:06:c5:44:0e:8b:c0:85: 97:1e:8d:55:69:23:01:d2:35:11:74:13:d6:81:db: 2b:69:d9:dd:3e:54:8c:1e:08:55:74:f1:3e:b9:d2: 6d:be:81:8c:84:4e:0f:65:fe:43:80:c2:43:49:6d: b7:75:22:b3:12:88:cc:da:a3:33:b6:49:26:95:65: ad:b8:bc:04:56:71:1a:0b:df:08:38:76:74:6e:6c: be:41:e2:79:67:b0:c5:e7:73:a8:28:1b:63:c3:dd: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A3:03:F1:A8:3A:8D:FC:80:34:D5:BF:64:71:C0:9A:DA:04:F1:05 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.240.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:71:f4:b1:a3:f2:b1:f7:f2:87:58:7c:fd:ad:6b:5a:59:6a: 38:f3:0d:31:46:25:4c:9d:72:20:be:70:e2:3b:0c:63:19:3c: b6:21:51:77:38:eb:38:77:c4:e8:27:4c:3f:3b:27:c5:20:9e: 24:73:80:da:63:c1:6f:65:e8:50:ef:6e:5c:47:c6:07:30:09: e7:18:7d:95:b9:88:73:f7:82:c3:c0:2f:54:4d:1f:b0:e5:a1: 4e:86:45:98:69:5c:3c:bb:3c:68:ae:d8:5c:b5:a7:c9:46:ca: c1:b1:65:c8:95:4f:c9:c8:1a:62:13:a2:7e:9b:15:d7:90:44: 5a:99:4b:69:49:a5:38:0a:52:00:28:24:9c:5a:ea:d9:17:6a: e1:e8:25:06:08:0e:29:57:a4:6f:41:bc:f3:96:98:c4:ce:7c: db:26:b1:e8:2b:53:81:77:dd:08:97:2d:01:1f:53:b6:80:98: ba:de:ac:60:4e:35:13:6d:10:98:e0:c6:91:d6:33:26:b4:13: 14:5f:d2:bf:db:24:c9:45:c3:83:f1:b0:fe:ef:ad:ea:d8:d3: a9:a1:cb:e4:85:de:77:af:04:de:05:d2:bc:00:54:c7:d8:75: a7:5b:9c:b7:ed:ec:e0:18:b2:73:47:33:1f:68:11:d6:ae:60: 48:dd:15:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxIPhAdKDrEMquQnkSIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGEzMDNmMWE4M2E4ZGZjODAzNGQ1YmY2NDcxYzA5YWRhMDRmMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qKLPz2WXHIZhHecIWKcKtcmFmOm At8t4ckKRsKDauFkjNX0FmZNxhZczFNKrgLaVlo9movK7gi+Dugke1PmhmG5QRWZ WkgUi6pkFBlTmjN23DZFXp8zcLUZz5QLXVvz593Ee9CULAluGkX2MyblL0xJqjCX H0aFd3T/X7hV6gYAdEmHgpkxOCbL6ohtMaqLt6X0+kO9CmKcBnMaIQbFRA6LwIWX Ho1VaSMB0jURdBPWgdsradndPlSMHghVdPE+udJtvoGMhE4PZf5DgMJDSW23dSKz EojM2qMztkkmlWWtuLwEVnEaC98IOHZ0bmy+QeJ5Z7DF53OoKBtjw90OEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCjA/GoOo38gDTVv2RxwJraBPEFMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvSUtNRDhhZzZqZnlBTk5XX1pISEFtdG9FOFFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXwMA0G CSqGSIb3DQEBCwUAA4IBAQCbcfSxo/Kx9/KHWHz9rWtaWWo48w0xRiVMnXIgvnDi OwxjGTy2IVF3OOs4d8ToJ0w/OyfFIJ4kc4DaY8FvZehQ725cR8YHMAnnGH2VuYhz 94LDwC9UTR+w5aFOhkWYaVw8uzxorthctafJRsrBsWXIlU/JyBpiE6J+mxXXkERa mUtpSaU4ClIAKCScWurZF2rh6CUGCA4pV6RvQbzzlpjEznzbJrHoK1OBd90Ily0B H1O2gJi63qxgTjUTbRCY4MaR1jMmtBMUX9K/2yTJRcOD8bD+763q2NOpocvkhd53 rwTeBdK8AFTH2HWnW5y37ezgGLJzRzMfaBHWrmBI3RWb -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:59 2026 by rpki-client