This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/V7FviozZ3zz87jxJ-PWyCpfD2lU.roa File: V7FviozZ3zz87jxJ-PWyCpfD2lU.roa (raw, json) Hash identifier: Xb7KN05EkL7hhBKL7L9Si8EV0nQl1w8uFm53j4Vk5jU= Subject key identifier: 57:B1:6F:8A:8C:D9:DF:3C:FC:EE:3C:49:F8:F5:B2:0A:97:C3:DA:55 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019AD0A55869864DB4891B1CA1DEC42FBAB7 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/V7FviozZ3zz87jxJ-PWyCpfD2lU.roa Signing time: Sat 29 Nov 2025 17:24:48 +0000 ROA not before: Sat 29 Nov 2025 17:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198154 IP address blocks: 85.133.194.0/24 maxlen: 24 85.133.195.0/24 maxlen: 24 85.133.221.0/24 maxlen: 24 85.133.225.0/24 maxlen: 24 85.133.230.0/24 maxlen: 24 85.133.248.0/24 maxlen: 24 85.133.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:a5:58:69:86:4d:b4:89:1b:1c:a1:de:c4:2f:ba:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 29 17:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=57b16f8a8cd9df3cfcee3c49f8f5b20a97c3da55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:c8:46:60:13:de:1e:c9:ba:5f:81:90:66: f6:94:18:14:6d:d9:1f:37:e2:d2:b8:e2:64:53:b1: be:04:90:20:e3:78:06:f9:af:ed:cd:ca:d1:55:7e: 7b:cd:4a:91:25:0b:c8:6e:7c:c1:73:e8:60:94:26: 76:e4:b2:1f:35:c5:43:6e:ed:30:ad:05:37:26:87: 21:1f:ef:76:c4:2d:99:e9:5d:fa:6d:f8:d8:9b:c8: 76:98:78:85:ab:4e:2a:46:57:a1:7f:00:e7:33:10: 2b:5e:fb:47:5e:e1:59:00:a3:a3:44:0e:f1:89:7d: 73:62:69:e1:82:a0:23:ca:a9:e5:a3:d5:aa:ee:8f: 90:87:37:5e:03:73:34:27:ef:b9:15:dc:57:c1:3b: f7:e5:7d:47:51:cf:1c:f9:8f:3f:e4:a6:03:1c:b8: 7e:12:32:59:05:47:30:c6:8b:7f:b0:d8:ec:82:e3: 0a:0c:51:8b:9d:73:71:a0:c5:f2:48:5f:db:b7:43: 9c:f9:72:2e:97:1a:ab:8a:cc:b1:59:f0:b5:4e:a5: bb:77:55:fb:3a:36:dd:c5:4f:5b:5f:69:6e:d3:56: 8f:d5:4e:51:aa:b9:25:7f:31:96:f3:89:b5:05:6b: 33:a9:f1:ac:f3:45:c1:a6:21:f8:73:a6:bf:5e:5b: 4d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B1:6F:8A:8C:D9:DF:3C:FC:EE:3C:49:F8:F5:B2:0A:97:C3:DA:55 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/V7FviozZ3zz87jxJ-PWyCpfD2lU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.194.0/23 85.133.221.0/24 85.133.225.0/24 85.133.230.0/24 85.133.248.0/24 85.133.250.0/24 Signature Algorithm: sha256WithRSAEncryption 28:ea:47:dc:ee:fa:38:70:a5:4b:4b:c0:49:ee:2b:fd:81:1f: a3:b7:32:9f:fa:cb:ef:7a:ff:62:75:f4:a7:a7:48:5b:ce:43: 7f:83:d7:7a:5f:97:6a:aa:9b:dd:fd:10:78:77:46:2b:30:92: 65:1c:5a:4e:cc:60:79:a5:4f:ef:00:b8:6a:0c:c7:f2:0d:56: a0:ff:d7:e6:22:46:d8:f9:f2:e3:75:5d:49:2e:a5:2f:59:6a: d8:81:17:09:7a:94:be:3b:b0:1b:b8:90:3a:e4:01:05:b3:a1: 66:4c:31:d5:ba:11:ab:49:15:b0:39:cb:77:bd:98:8b:8c:e8: 6e:72:10:5e:70:d1:fb:06:86:fc:ad:db:69:cd:3d:f8:16:52: cc:2d:1c:ec:bb:59:98:51:93:64:b4:4c:49:2c:f0:0b:30:86: 21:cc:e0:24:24:94:3a:02:d7:35:83:a1:14:a7:cb:3b:05:b8: 51:55:0a:87:36:ca:ad:49:7c:36:8e:75:97:88:8f:0f:e2:04: 61:fc:70:e7:6e:40:f3:f0:55:bd:a0:1b:0e:4f:ab:37:f9:72: 8f:0a:16:96:6f:75:95:4f:5b:c4:6a:f1:fc:b4:ff:df:f2:49: 67:a9:a6:48:02:a7:4f:99:c7:4a:dd:02:34:1a:3c:ef:f3:88: 7e:3d:21:99 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrQpVhphk20iRscod7EL7q3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTI5MTcyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2IxNmY4YThjZDlkZjNjZmNlZTNjNDlmOGY1YjIwYTk3YzNkYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsvIRmAT3h7Jul+BkGb2lBgUbdkf N+LSuOJkU7G+BJAg43gG+a/tzcrRVX57zUqRJQvIbnzBc+hglCZ25LIfNcVDbu0w rQU3JochH+92xC2Z6V36bfjYm8h2mHiFq04qRlehfwDnMxArXvtHXuFZAKOjRA7x iX1zYmnhgqAjyqnlo9Wq7o+QhzdeA3M0J++5FdxXwTv35X1HUc8c+Y8/5KYDHLh+ EjJZBUcwxot/sNjsguMKDFGLnXNxoMXySF/bt0Oc+XIulxqrisyxWfC1TqW7d1X7 OjbdxU9bX2lu01aP1U5RqrklfzGW84m1BWszqfGs80XBpiH4c6a/XltNeQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFexb4qM2d88/O48Sfj1sgqXw9pVMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvVjdGdmlvelozeno4N2p4Si1QV3lDcGZEMmxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBVYXCAwQA VYXdAwQAVYXhAwQAVYXmAwQAVYX4AwQAVYX6MA0GCSqGSIb3DQEBCwUAA4IBAQAo 6kfc7vo4cKVLS8BJ7iv9gR+jtzKf+svvev9idfSnp0hbzkN/g9d6X5dqqpvd/RB4 d0YrMJJlHFpOzGB5pU/vALhqDMfyDVag/9fmIkbY+fLjdV1JLqUvWWrYgRcJepS+ O7AbuJA65AEFs6FmTDHVuhGrSRWwOct3vZiLjOhuchBecNH7Bob8rdtpzT34FlLM LRzsu1mYUZNktExJLPALMIYhzOAkJJQ6Atc1g6EUp8s7BbhRVQqHNsqtSXw2jnWX iI8P4gRh/HDnbkDz8FW9oBsOT6s3+XKPChaWb3WVT1vEavH8tP/f8klnqaZIAqdP mcdK3QI0Gjzv84h+PSGZ -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:57 2025 by rpki-client