This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa File: QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa (raw, json) Hash identifier: JLC6T3gloruu7glMw++YQSZ+CxmCxYVfu7O7HVXEONg= Subject key identifier: 40:F4:68:8B:4C:93:EF:9F:AE:6E:45:FB:3E:40:FE:80:2D:E5:82:34 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C71D5DB195BF8F37897D92B9291809 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214922 IP address blocks: 85.133.201.0/24 maxlen: 24 85.133.202.0/24 maxlen: 24 85.133.203.0/24 maxlen: 24 85.133.204.0/24 maxlen: 24 85.133.228.0/24 maxlen: 24 85.133.238.0/24 maxlen: 24 85.133.241.0/24 maxlen: 24 85.133.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:5d:b1:95:bf:8f:37:89:7d:92:b9:29:18:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40f4688b4c93ef9fae6e45fb3e40fe802de58234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:ee:69:d9:c1:91:c2:c7:36:5f:f1:d8:4c: 04:a8:5b:12:45:03:d5:de:d3:94:25:d0:47:a9:ae: c4:b0:be:40:b8:08:3f:d6:08:6a:4f:8e:9d:a3:d4: 7d:a0:d8:88:c5:6a:37:49:b9:62:af:aa:25:a8:2e: cb:e6:45:e2:86:a9:2c:a7:84:73:a5:6c:8f:03:f7: ca:d5:7c:76:14:ae:ec:21:fb:c1:9b:5d:c8:2c:b9: d5:94:30:11:48:7b:15:4a:5d:48:88:1c:d3:b7:a7: a2:f4:38:f8:e5:17:80:30:a3:b9:eb:3f:42:19:b9: c6:3b:a2:07:a1:8c:05:cd:52:8f:91:5d:27:d5:d6: 17:0d:96:e9:e0:b1:a9:e2:c1:6e:e3:62:23:33:83: ae:9c:57:e4:53:44:fb:f2:39:21:f6:cb:d1:37:8e: 63:ac:e1:91:64:a8:09:10:9a:89:0e:11:97:5b:61: 1e:3d:5a:7e:5d:9d:43:cc:e7:38:7d:6f:6c:fa:6f: 37:67:81:df:84:0d:5d:71:61:58:c9:13:23:68:9f: 26:e5:6f:39:de:7f:68:3d:0a:6c:e9:85:f3:5e:1d: c0:41:0c:25:2f:09:6f:e8:8b:54:d3:67:3b:ef:f5: b0:68:c7:fc:25:2d:63:cb:75:14:c9:20:f5:31:9c: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F4:68:8B:4C:93:EF:9F:AE:6E:45:FB:3E:40:FE:80:2D:E5:82:34 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.201.0-85.133.204.255 85.133.228.0/24 85.133.238.0/24 85.133.241.0/24 85.133.247.0/24 Signature Algorithm: sha256WithRSAEncryption 28:33:e0:9e:5b:9a:d8:06:a4:eb:78:29:ee:06:f1:4d:08:82: 42:5c:74:f1:17:e5:a3:9d:7b:8a:66:79:94:e1:4c:41:f6:4c: 7f:56:43:3c:61:8e:c7:e8:a5:48:d8:bb:bb:b2:f7:62:30:bc: b4:8d:12:6b:1f:d3:ad:1b:dd:cc:c5:16:ff:c8:be:b1:24:2e: 0b:e5:3d:b5:24:6a:92:89:e7:b1:5d:13:8f:78:bc:fa:a2:8a: 2a:ec:a9:c9:39:35:06:94:a2:94:aa:a7:46:09:8b:47:01:0f: 34:b1:e4:71:99:a0:27:2d:2c:b6:55:b1:68:58:7c:2e:35:e9: 81:a3:e7:3c:1d:38:e3:0b:7f:6f:68:26:5f:7e:32:e4:6a:e6: c8:12:5f:af:cd:9e:0b:2e:72:ba:03:4f:86:88:4a:ab:24:ad: a2:63:37:ba:7b:d7:f8:35:35:1b:f0:c8:61:ad:d1:e9:51:b8: e3:73:b3:c8:cc:3a:25:dd:50:81:5a:a1:4f:7a:7d:45:8b:1a: 23:2a:18:88:a3:0e:aa:ee:d1:09:ff:87:dd:7f:13:9b:9a:4d: d2:5e:a2:d0:fe:41:49:c4:65:c3:ec:de:a8:23:f5:73:54:e6: 86:be:b8:e8:e7:d8:4c:8e:19:16:7e:7e:0b:1e:e5:33:68:e5: 08:d3:c2:17 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3xx1dsZW/jzeJfZK5KRgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGY0Njg4YjRjOTNlZjlmYWU2ZTQ1ZmIzZTQwZmU4MDJkZTU4MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ruadnBkcLHNl/x2EwEqFsSRQPV 3tOUJdBHqa7EsL5AuAg/1ghqT46do9R9oNiIxWo3Sblir6olqC7L5kXihqksp4Rz pWyPA/fK1Xx2FK7sIfvBm13ILLnVlDARSHsVSl1IiBzTt6ei9Dj45ReAMKO56z9C GbnGO6IHoYwFzVKPkV0n1dYXDZbp4LGp4sFu42IjM4OunFfkU0T78jkh9svRN45j rOGRZKgJEJqJDhGXW2EePVp+XZ1DzOc4fW9s+m83Z4HfhA1dcWFYyRMjaJ8m5W85 3n9oPQps6YXzXh3AQQwlLwlv6ItU02c77/WwaMf8JS1jy3UUySD1MZynjQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFED0aItMk++frm5F+z5A/oAt5YI0MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvUVBSb2kweVQ3NS11YmtYN1BrRC1nQzNsZ2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABVhckD BABVhcwDBABVheQDBABVhe4DBABVhfEDBABVhfcwDQYJKoZIhvcNAQELBQADggEB ACgz4J5bmtgGpOt4Ke4G8U0IgkJcdPEX5aOde4pmeZThTEH2TH9WQzxhjsfopUjY u7uy92IwvLSNEmsf060b3czFFv/IvrEkLgvlPbUkapKJ57FdE494vPqiiirsqck5 NQaUopSqp0YJi0cBDzSx5HGZoCctLLZVsWhYfC416YGj5zwdOOMLf29oJl9+MuRq 5sgSX6/NngsucroDT4aISqskraJjN7p71/g1NRvwyGGt0elRuONzs8jMOiXdUIFa oU96fUWLGiMqGIijDqru0Qn/h91/E5uaTdJeotD+QUnEZcPs3qgj9XNU5oa+uOjn 2EyOGRZ+fgse5TNo5QjTwhc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:44 2026 by rpki-client