This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Voyg0GCxNMMF7q8rynuv2y0iPjs.roa File: Voyg0GCxNMMF7q8rynuv2y0iPjs.roa (raw, json) Hash identifier: F8pnJO5ft2h+MTBlkXm+2mXp9KFjX2atpjnmtLS6Fmc= Subject key identifier: 56:8C:A0:D0:60:B1:34:C3:05:EE:AF:2B:CA:7B:AF:DB:2D:22:3E:3B Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019AABB287FFCD3C756BEB08F3648B09150C Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Voyg0GCxNMMF7q8rynuv2y0iPjs.roa Signing time: Sat 22 Nov 2025 13:13:15 +0000 ROA not before: Sat 22 Nov 2025 13:13:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48715 IP address blocks: 85.133.208.0/24 maxlen: 24 85.133.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:b2:87:ff:cd:3c:75:6b:eb:08:f3:64:8b:09:15:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 22 13:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=568ca0d060b134c305eeaf2bca7bafdb2d223e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:f2:2a:37:2e:3d:b2:7a:2a:28:93:f8:a5: 56:37:a6:9e:57:f1:76:25:24:87:7b:3e:e9:66:28: f4:8f:a3:98:68:47:9a:aa:37:22:42:6f:bc:2a:ca: 59:4c:a2:b7:ae:be:8d:fd:ce:4a:b8:80:59:32:31: c4:ab:ed:dc:0b:26:53:09:f1:9e:e4:51:ff:fa:97: 72:b3:a1:02:10:a6:b0:8d:5a:4a:a1:94:83:83:cc: 21:55:ce:67:40:5d:80:74:ca:d7:23:34:c4:46:3c: c6:aa:7b:ad:1b:fb:ad:a1:bd:1f:b9:0f:4f:02:04: 70:be:69:85:12:a6:1a:6f:14:0e:f4:f0:0f:70:b0: 42:a4:7e:ea:b1:2f:84:b9:53:7e:da:1e:b1:f8:81: 3e:20:09:c4:5f:1c:ef:0c:6e:9a:dc:bd:7d:1f:cf: dd:32:99:1c:e5:06:e9:5c:85:79:1b:20:b6:95:36: d1:ff:69:f0:32:f7:ce:39:27:e4:3a:e8:fb:09:d2: ee:5e:c7:44:19:1a:7f:a6:c6:b1:c0:f5:47:a8:95: 67:61:c4:9b:38:63:a5:dd:8d:98:5c:5a:20:ee:d0: 8d:61:d3:40:9e:a4:46:66:3c:f1:20:2d:e8:a6:73: 17:cf:9e:2a:f0:0d:80:bd:bd:2d:1a:35:c4:a7:26: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8C:A0:D0:60:B1:34:C3:05:EE:AF:2B:CA:7B:AF:DB:2D:22:3E:3B X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Voyg0GCxNMMF7q8rynuv2y0iPjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.208.0/24 85.133.239.0/24 Signature Algorithm: sha256WithRSAEncryption 22:fc:0c:8d:3f:4d:22:96:59:c1:73:c3:2e:13:ca:65:88:e8: 86:01:0b:f2:c6:3c:4e:3f:46:1f:40:34:ad:b7:16:ac:b6:a7: 9b:c5:de:03:ca:50:e3:31:7c:95:68:aa:14:d9:a0:d9:57:23: d6:dc:69:88:21:af:e2:af:c6:cd:b5:af:03:6e:50:ce:d2:9f: 07:2a:34:bb:68:be:8f:af:e4:06:4c:a3:60:14:5c:b7:c6:cf: ee:34:7c:33:4c:09:1b:34:f2:f8:92:9a:fa:84:3d:08:4a:3e: 6b:22:c3:e8:ac:ec:cf:23:c2:0c:cb:89:73:f2:15:7e:a8:14: 86:63:96:59:37:95:3d:b7:88:42:91:ad:56:10:b0:e0:a9:38: 19:cc:e6:0d:fd:85:59:37:50:2f:1e:71:f0:83:e8:68:95:7e: fa:88:df:d4:c6:1a:2f:1f:d4:6e:b0:aa:d0:7a:f9:45:b4:c0: 6a:14:50:10:3c:60:2f:30:3d:a3:6c:d1:ea:a0:56:8d:21:b3: a2:d0:c8:d0:a4:27:cc:15:d4:fb:be:37:7f:96:1f:13:f0:5e: 92:e0:4f:1a:6e:b8:10:55:bd:f5:52:61:d0:51:7f:6b:a1:64: 0f:c6:cb:3d:e0:d9:a6:cb:05:81:66:0a:b3:f4:03:f9:99:a2: 25:41:d3:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqrsof/zTx1a+sI82SLCRUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTIyMTMxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjhjYTBkMDYwYjEzNGMzMDVlZWFmMmJjYTdiYWZkYjJkMjIzZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ijyKjcuPbJ6KiiT+KVWN6aeV/F2 JSSHez7pZij0j6OYaEeaqjciQm+8KspZTKK3rr6N/c5KuIBZMjHEq+3cCyZTCfGe 5FH/+pdys6ECEKawjVpKoZSDg8whVc5nQF2AdMrXIzTERjzGqnutG/utob0fuQ9P AgRwvmmFEqYabxQO9PAPcLBCpH7qsS+EuVN+2h6x+IE+IAnEXxzvDG6a3L19H8/d Mpkc5QbpXIV5GyC2lTbR/2nwMvfOOSfkOuj7CdLuXsdEGRp/psaxwPVHqJVnYcSb OGOl3Y2YXFog7tCNYdNAnqRGZjzxIC3opnMXz54q8A2Avb0tGjXEpyaeBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFaMoNBgsTTDBe6vK8p7r9stIj47MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvVm95ZzBHQ3hOTU1GN3E4cnludXYyeTBpUGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYXQAwQA VYXvMA0GCSqGSIb3DQEBCwUAA4IBAQAi/AyNP00illnBc8MuE8pliOiGAQvyxjxO P0YfQDSttxastqebxd4DylDjMXyVaKoU2aDZVyPW3GmIIa/ir8bNta8DblDO0p8H KjS7aL6Pr+QGTKNgFFy3xs/uNHwzTAkbNPL4kpr6hD0ISj5rIsPorOzPI8IMy4lz 8hV+qBSGY5ZZN5U9t4hCka1WELDgqTgZzOYN/YVZN1AvHnHwg+holX76iN/Uxhov H9RusKrQevlFtMBqFFAQPGAvMD2jbNHqoFaNIbOi0MjQpCfMFdT7vjd/lh8T8F6S 4E8abrgQVb31UmHQUX9roWQPxss94NmmywWBZgqz9AP5maIlQdNv -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:07 2025 by rpki-client