This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa File: Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa (raw, json) Hash identifier: pgdQfCVii0tZJ2RyRo580T4O0JCC2mcRd1QEO6ECB2U= Subject key identifier: 37:3F:90:7B:C9:A7:68:F0:26:03:B6:9E:62:31:5A:D9:14:19:6E:2D Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C71282F0EB59E595BE08A2F67A15EE Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 85.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:12:82:f0:eb:59:e5:95:be:08:a2:f6:7a:15:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=373f907bc9a768f02603b69e62315ad914196e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:4d:dd:fc:88:1f:ac:1c:72:d5:6c:f5:f3: 1c:84:c4:b2:be:3b:1a:08:fa:06:1c:cb:4d:39:fa: 15:ad:c8:4a:02:54:9d:c9:d4:4d:3c:1b:11:40:03: 82:68:06:19:08:fa:53:de:9e:2a:72:50:6c:39:5d: 3e:8c:cc:bc:d9:00:52:fd:ad:0c:95:cb:0e:87:ac: 4f:d4:be:34:99:2e:98:78:21:a3:80:0d:73:3a:04: e1:75:d3:55:aa:2a:77:83:5b:ab:1c:db:42:a7:3c: cc:22:a2:7b:f8:09:1b:51:fa:a8:a9:c0:b5:01:c8: 86:87:dc:5c:05:23:72:6b:27:23:7b:21:bc:a5:45: ec:5c:6a:f4:23:95:90:8a:80:75:e0:f3:91:82:59: 76:68:b0:1d:46:b6:45:f7:7b:d3:e4:f2:77:5c:31: 09:32:aa:0d:97:6c:38:e6:34:91:3d:1f:50:98:77: e1:07:7c:bd:7c:6d:ee:20:41:cd:ac:ce:19:f2:18: 17:9d:e8:72:0b:1c:80:67:92:df:4a:ae:f6:35:6b: 5e:9d:7e:54:43:0a:cd:48:53:7a:cc:cf:80:4d:d4: d5:10:61:da:9a:aa:29:b2:f1:df:f4:c7:e5:6a:87: 0c:73:ae:6f:8d:b2:2f:ab:4b:d1:18:a0:fd:9e:af: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3F:90:7B:C9:A7:68:F0:26:03:B6:9E:62:31:5A:D9:14:19:6E:2D X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.241.0/24 Signature Algorithm: sha256WithRSAEncryption 82:e4:0c:29:b6:45:6b:76:eb:7e:cc:31:d1:90:6b:d7:e0:b1: e1:72:f1:a3:9d:db:08:21:12:26:78:6b:76:fd:65:7e:72:f5: 25:4a:00:6b:dc:3c:cc:7b:7a:1d:1e:ac:8a:b5:45:10:70:f4: 4d:3e:e1:57:34:d5:46:22:e4:e9:a4:fe:ed:e5:ae:55:46:be: ff:33:d4:cd:db:c2:eb:87:9b:44:37:e3:18:aa:ff:14:7a:fd: fc:96:67:ed:ca:5d:94:ce:d6:29:57:8e:c5:91:fb:dc:ff:97: aa:75:b4:7c:cf:ce:19:45:1a:5f:c1:96:54:a9:bd:0b:59:2c: bc:f8:9e:5c:25:9c:dd:70:46:23:bc:0f:09:25:b1:ad:b5:3f: 1f:20:93:54:a0:6f:43:11:74:0d:5d:11:34:38:f0:d8:00:b4: ec:4a:cf:34:f0:b1:ad:00:0d:e5:06:45:31:bd:db:83:0a:e4: 30:33:48:c8:7c:63:38:55:3f:b2:d4:2e:34:ce:3d:d9:37:68: 10:f6:b4:ea:13:f9:4a:6f:6f:36:23:5a:69:fa:c7:f3:6e:d8: 9c:13:ed:af:cf:8b:1b:4d:0c:98:18:e5:90:4c:74:d8:bc:01: 09:a2:b2:19:8f:81:40:9b:c0:c7:d4:77:46:71:f7:ce:ba:31: 25:5f:6c:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxKC8OtZ5ZW+CKL2ehXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzNmOTA3YmM5YTc2OGYwMjYwM2I2OWU2MjMxNWFkOTE0MTk2ZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0JN3fyIH6wcctVs9fMchMSyvjsa CPoGHMtNOfoVrchKAlSdydRNPBsRQAOCaAYZCPpT3p4qclBsOV0+jMy82QBS/a0M lcsOh6xP1L40mS6YeCGjgA1zOgThddNVqip3g1urHNtCpzzMIqJ7+AkbUfqoqcC1 AciGh9xcBSNyaycjeyG8pUXsXGr0I5WQioB14PORgll2aLAdRrZF93vT5PJ3XDEJ MqoNl2w45jSRPR9QmHfhB3y9fG3uIEHNrM4Z8hgXnehyCxyAZ5LfSq72NWtenX5U QwrNSFN6zM+ATdTVEGHamqopsvHf9MflaocMc65vjbIvq0vRGKD9nq+aDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDc/kHvJp2jwJgO2nmIxWtkUGW4tMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvTnotUWU4bW5hUEFtQTdhZVlqRmEyUlFaYmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXxMA0G CSqGSIb3DQEBCwUAA4IBAQCC5AwptkVrdut+zDHRkGvX4LHhcvGjndsIIRImeGt2 /WV+cvUlSgBr3DzMe3odHqyKtUUQcPRNPuFXNNVGIuTppP7t5a5VRr7/M9TN28Lr h5tEN+MYqv8Uev38lmftyl2UztYpV47Fkfvc/5eqdbR8z84ZRRpfwZZUqb0LWSy8 +J5cJZzdcEYjvA8JJbGttT8fIJNUoG9DEXQNXRE0OPDYALTsSs808LGtAA3lBkUx vduDCuQwM0jIfGM4VT+y1C40zj3ZN2gQ9rTqE/lKb282I1pp+sfzbticE+2vz4sb TQyYGOWQTHTYvAEJorIZj4FAm8DH1HdGcffOujElX2z9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:35 2026 by rpki-client