This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MsSlk3WQ80ETXzZv-_xFc70cB4o.roa File: MsSlk3WQ80ETXzZv-_xFc70cB4o.roa (raw, json) Hash identifier: UXtaZaFGO7Pek5r3b1Q7L+7LS6p3gDK8oAU7N1F6XHk= Subject key identifier: 32:C4:A5:93:75:90:F3:41:13:5F:36:6F:FB:FC:45:73:BD:1C:07:8A Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C7160D1DB6FA6B06E174D5D3D9823E Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MsSlk3WQ80ETXzZv-_xFc70cB4o.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211056 IP address blocks: 85.133.193.0/24 maxlen: 24 85.133.214.0/24 maxlen: 24 85.133.216.0/24 maxlen: 24 85.133.234.0/24 maxlen: 24 85.133.236.0/24 maxlen: 24 85.133.237.0/24 maxlen: 24 85.133.246.0/24 maxlen: 24 85.133.249.0/24 maxlen: 24 85.133.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:16:0d:1d:b6:fa:6b:06:e1:74:d5:d3:d9:82:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32c4a5937590f341135f366ffbfc4573bd1c078a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:46:9a:29:e2:f0:4e:17:16:13:f3:53:16: 8f:eb:c3:ca:a9:af:41:02:40:08:2b:84:4a:89:a9: d1:22:e6:c5:59:99:da:9c:3e:ab:b9:30:12:61:1d: 2c:e1:a7:87:8d:ba:42:18:ab:75:76:67:fe:d5:21: 47:97:d9:a1:61:1d:64:94:92:d7:f9:2e:ea:e6:6d: ef:c7:aa:c6:86:8b:e9:95:ac:59:7a:b6:41:8c:14: a5:13:33:c1:41:b4:46:d0:98:31:da:8e:5e:5a:ba: b6:b2:05:d1:e8:5c:3f:a1:fc:7f:ac:e0:b7:6a:c1: 76:ba:97:4a:c1:a5:0e:16:c5:15:40:1d:af:3c:2e: 15:96:a4:bf:a7:27:74:1f:86:3d:cf:89:88:7f:d3: 01:8b:ea:31:60:67:63:18:f6:0a:ee:f8:2a:e8:02: 21:68:e8:ca:87:b4:6a:b8:f1:09:6f:80:bc:5b:e6: 23:1e:84:15:cf:cc:21:90:99:7d:9f:9b:02:46:cf: c6:73:a1:59:50:48:26:44:82:18:b0:33:13:2e:88: 9f:c0:7e:2d:6e:4c:ab:c4:e7:a5:82:45:68:ea:a8: 8d:59:5a:1a:76:bf:25:b1:2f:94:8e:f3:0d:74:cd: 1d:77:2e:0a:48:02:48:d2:19:61:65:15:f9:c1:39: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:A5:93:75:90:F3:41:13:5F:36:6F:FB:FC:45:73:BD:1C:07:8A X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MsSlk3WQ80ETXzZv-_xFc70cB4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.193.0/24 85.133.214.0/24 85.133.216.0/24 85.133.234.0/24 85.133.236.0/23 85.133.246.0/24 85.133.249.0/24 85.133.253.0/24 Signature Algorithm: sha256WithRSAEncryption 87:f9:ad:1e:56:1d:49:ce:76:68:03:3d:1c:4c:24:56:94:a7: 1d:af:53:13:ba:0c:c1:4f:3b:74:0a:6b:df:ec:a2:19:3d:4e: 32:f2:68:34:da:77:57:ef:35:a7:53:b0:c2:34:5b:1f:a2:f8: e0:8c:ac:25:58:5d:6d:91:d5:91:15:f7:71:69:27:8a:09:0d: 1a:25:7b:8f:8a:5d:ac:11:32:b9:98:e0:ae:43:69:26:07:27: 1c:87:39:c1:f8:53:b6:a1:aa:88:2e:7e:f6:ca:46:95:e5:ed: a3:bf:bc:00:23:d5:c4:49:40:f5:5b:5c:b2:b9:cc:1d:0f:61: 00:ed:6d:66:d6:ba:36:8b:d9:00:94:3c:e8:fa:5c:66:e8:01: d8:e7:8b:8e:d3:2c:72:04:7e:52:fe:0f:95:f1:23:7c:a8:f3: 33:e9:a5:3d:1b:32:35:35:b9:a4:01:ca:20:49:e8:f7:f6:f5: 7e:75:21:7c:f4:96:02:bc:63:17:1b:27:57:b3:ca:7a:30:6d: d3:16:8c:f6:ab:7c:b4:a9:ca:0a:41:ba:44:5b:c6:01:da:59: 12:d4:3e:c6:5e:44:ef:63:cf:97:9d:f6:26:fa:e1:81:3c:9b: 86:69:29:e4:a3:6f:05:3b:b3:62:a0:46:da:b8:78:43:02:bd: cb:9f:82:60 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3xxYNHbb6awbhdNXT2YI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmM0YTU5Mzc1OTBmMzQxMTM1ZjM2NmZmYmZjNDU3M2JkMWMwNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgRGmini8E4XFhPzUxaP68PKqa9B AkAIK4RKianRIubFWZnanD6ruTASYR0s4aeHjbpCGKt1dmf+1SFHl9mhYR1klJLX +S7q5m3vx6rGhovplaxZerZBjBSlEzPBQbRG0Jgx2o5eWrq2sgXR6Fw/ofx/rOC3 asF2updKwaUOFsUVQB2vPC4VlqS/pyd0H4Y9z4mIf9MBi+oxYGdjGPYK7vgq6AIh aOjKh7RquPEJb4C8W+YjHoQVz8whkJl9n5sCRs/Gc6FZUEgmRIIYsDMTLoifwH4t bkyrxOelgkVo6qiNWVoadr8lsS+UjvMNdM0ddy4KSAJI0hlhZRX5wTlF2wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDLEpZN1kPNBE182b/v8RXO9HAeKMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvTXNTbGszV1E4MEVUWHpadi1feEZjNzBjQjRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVYXBAwQA VYXWAwQAVYXYAwQAVYXqAwQBVYXsAwQAVYX2AwQAVYX5AwQAVYX9MA0GCSqGSIb3 DQEBCwUAA4IBAQCH+a0eVh1JznZoAz0cTCRWlKcdr1MTugzBTzt0Cmvf7KIZPU4y 8mg02ndX7zWnU7DCNFsfovjgjKwlWF1tkdWRFfdxaSeKCQ0aJXuPil2sETK5mOCu Q2kmBycchznB+FO2oaqILn72ykaV5e2jv7wAI9XESUD1W1yyucwdD2EA7W1m1ro2 i9kAlDzo+lxm6AHY54uO0yxyBH5S/g+V8SN8qPMz6aU9GzI1NbmkAcogSej39vV+ dSF89JYCvGMXGydXs8p6MG3TFoz2q3y0qcoKQbpEW8YB2lkS1D7GXkTvY8+XnfYm +uGBPJuGaSnko28FO7NioEbauHhDAr3Ln4Jg -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:01 2026 by rpki-client