This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa File: QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa (raw, json) Hash identifier: bXd6j/Agfn0Rdepo1CUkaCAq5JVFgCLN7MB9bLtEyjg= Subject key identifier: 40:B7:E1:F1:0C:0E:D7:64:56:58:C2:41:47:94:21:55:2E:9D:81:04 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C71D0B3F95F2ACAC70D6512A2EAA4F Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214858 IP address blocks: 85.133.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:0b:3f:95:f2:ac:ac:70:d6:51:2a:2e:aa:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40b7e1f10c0ed7645658c241479421552e9d8104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:2e:d4:29:94:64:4a:62:1f:92:36:16:42: 92:df:12:2c:a2:94:6f:9d:de:69:e1:ab:f7:2f:71: d8:51:03:cb:8e:c3:9d:7d:41:82:46:a3:bd:18:2e: 07:b6:c6:ed:aa:87:bb:7a:39:f7:a3:c9:87:88:af: 94:6f:65:20:07:04:6d:87:40:14:04:12:49:27:f4: fa:32:4f:18:b1:36:23:18:75:16:e6:63:10:3e:4a: 0a:03:34:77:aa:85:e0:e0:e6:97:ea:f3:77:2b:90: 18:32:73:ca:c4:81:e3:8b:79:20:40:0c:27:29:15: 06:0f:fe:ad:89:82:9c:88:f0:ee:21:e5:dd:f3:d5: 2a:bd:8b:d3:d0:28:a6:b5:6b:f9:bf:2a:ff:b3:fb: 30:38:8e:90:f8:ea:a8:95:d3:d3:19:b6:70:ff:13: 2c:4b:c8:c6:4a:c1:13:25:58:33:2b:e2:0d:6e:2f: 4e:57:bc:d4:f9:26:2a:fd:69:6f:21:d4:40:9a:22: c0:ea:39:82:20:c4:51:a3:95:19:5e:b5:ea:ad:e7: bf:52:14:e1:63:9f:9d:87:f9:f0:2a:25:67:01:4c: d8:52:90:a2:74:45:7d:38:b0:25:ef:b9:31:cf:09: 3e:c8:c5:c3:d5:41:d5:29:04:b4:20:6e:4d:ab:51: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:E1:F1:0C:0E:D7:64:56:58:C2:41:47:94:21:55:2E:9D:81:04 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a7:bb:68:a4:20:ee:74:2c:d8:9c:c8:34:68:16:c4:1d:bc: a0:40:e6:2f:60:63:b9:e7:a5:58:b8:36:15:7c:75:b6:83:c0: cd:62:7b:a8:fd:fd:43:30:52:3a:f3:10:8c:ca:9a:8b:95:70: 53:39:96:72:4d:36:92:8c:78:90:ea:22:67:2e:24:bb:03:86: ec:40:3a:a9:fc:2c:fb:43:fd:0f:22:52:69:6b:c5:96:dd:6f: dc:b5:56:fd:eb:1f:60:52:8b:99:6d:83:a2:04:e1:a6:36:83: 11:1d:d0:da:ee:dd:9f:89:d4:04:44:c9:14:d7:2b:fa:33:40: 78:ed:7b:a5:db:a0:67:f9:35:ce:5f:15:20:36:9b:f2:b6:d4: 9d:4c:10:a2:df:4e:c2:d7:2b:38:7f:71:92:41:2d:31:f9:c0: 26:57:df:1d:46:00:ce:88:b2:4f:f8:55:8b:eb:25:6b:60:b4: 6b:e0:b6:98:4a:24:5e:48:61:10:b6:f0:b9:b0:4f:d2:f3:10: 88:57:23:5f:bf:9d:3c:84:73:9c:e8:df:b7:23:57:52:57:09: 70:05:79:ea:94:8e:a9:35:2f:5f:17:da:5d:1c:14:02:b0:25: ad:ae:a4:0d:64:31:7c:da:8f:ab:66:f6:51:aa:06:04:53:3c: 10:f0:48:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx0LP5XyrKxw1lEqLqpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGI3ZTFmMTBjMGVkNzY0NTY1OGMyNDE0Nzk0MjE1NTJlOWQ4MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Uu1CmUZEpiH5I2FkKS3xIsopRv nd5p4av3L3HYUQPLjsOdfUGCRqO9GC4Htsbtqoe7ejn3o8mHiK+Ub2UgBwRth0AU BBJJJ/T6Mk8YsTYjGHUW5mMQPkoKAzR3qoXg4OaX6vN3K5AYMnPKxIHji3kgQAwn KRUGD/6tiYKciPDuIeXd89UqvYvT0CimtWv5vyr/s/swOI6Q+OqoldPTGbZw/xMs S8jGSsETJVgzK+INbi9OV7zU+SYq/WlvIdRAmiLA6jmCIMRRo5UZXrXqree/UhTh Y5+dh/nwKiVnAUzYUpCidEV9OLAl77kxzwk+yMXD1UHVKQS0IG5Nq1FJjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEC34fEMDtdkVljCQUeUIVUunYEEMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvUUxmaDhRd08xMlJXV01KQlI1UWhWUzZkZ1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXEMA0G CSqGSIb3DQEBCwUAA4IBAQAep7topCDudCzYnMg0aBbEHbygQOYvYGO556VYuDYV fHW2g8DNYnuo/f1DMFI68xCMypqLlXBTOZZyTTaSjHiQ6iJnLiS7A4bsQDqp/Cz7 Q/0PIlJpa8WW3W/ctVb96x9gUouZbYOiBOGmNoMRHdDa7t2fidQERMkU1yv6M0B4 7Xul26Bn+TXOXxUgNpvyttSdTBCi307C1ys4f3GSQS0x+cAmV98dRgDOiLJP+FWL 6yVrYLRr4LaYSiReSGEQtvC5sE/S8xCIVyNfv508hHOc6N+3I1dSVwlwBXnqlI6p NS9fF9pdHBQCsCWtrqQNZDF82o+rZvZRqgYEUzwQ8Ehd -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:58 2026 by rpki-client