This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/epqIKIkhtNt9y1zX7ym2KlfqVpA.roa File: epqIKIkhtNt9y1zX7ym2KlfqVpA.roa (raw, json) Hash identifier: r46Ihr+tEHAFPFTzvBpBbK3IqB0vF+sHeFQqZA/RUz8= Subject key identifier: 7A:9A:88:28:89:21:B4:DB:7D:CB:5C:D7:EF:29:B6:2A:57:EA:56:90 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019A9624FC6475E79A43C74BE0A3E23BC477 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/epqIKIkhtNt9y1zX7ym2KlfqVpA.roa Signing time: Tue 18 Nov 2025 08:46:37 +0000 ROA not before: Tue 18 Nov 2025 08:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216169 IP address blocks: 85.133.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:24:fc:64:75:e7:9a:43:c7:4b:e0:a3:e2:3b:c4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 18 08:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a9a88288921b4db7dcb5cd7ef29b62a57ea5690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:9d:3a:bd:3f:c5:87:03:f8:f4:d0:6e:24: 4b:d8:e6:f2:84:9b:7c:59:b4:91:ed:47:48:b7:0a: 7e:8b:7d:fa:5a:33:c8:cf:03:53:80:5f:a8:2b:c6: ac:82:bc:11:ad:cf:e5:79:c9:9e:5e:db:31:3f:9b: 16:df:4f:02:8b:cf:63:0a:45:24:8a:67:87:5b:ab: a7:98:77:50:d5:57:bb:04:a4:ba:57:5b:37:b5:34: b5:3e:17:b6:0c:1f:78:ad:7d:d0:8c:d4:98:53:5f: fa:e3:96:82:53:cf:a8:c6:24:00:9b:94:aa:51:82: b6:c5:16:ea:77:9e:f1:f5:1f:ac:11:e0:05:0a:cf: b0:0f:81:fa:2c:44:16:6d:90:54:e5:7d:08:82:e3: 22:8e:ce:6f:15:c1:c1:fd:f4:77:1b:05:2d:53:35: d1:4a:61:54:31:85:46:ca:ee:3f:5d:01:8d:3b:ad: 11:c9:7a:ad:07:7d:b5:a2:c4:2a:38:5f:57:ee:f6: d3:72:73:00:d7:17:8c:fd:8a:b0:42:a1:28:dd:bb: 26:42:19:91:97:33:00:f1:8d:37:7e:eb:b5:62:44: 79:7a:e2:b9:00:bf:cf:35:36:70:07:96:97:4f:6b: 34:88:fb:00:71:42:e8:06:a0:1c:75:6c:b6:43:b6: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:88:28:89:21:B4:DB:7D:CB:5C:D7:EF:29:B6:2A:57:EA:56:90 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/epqIKIkhtNt9y1zX7ym2KlfqVpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.197.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:41:92:92:cc:76:bc:fb:76:3c:66:a2:b3:dc:1d:de:77:02: 86:3a:57:a0:ac:e1:9e:09:fe:38:1d:d0:5d:e6:ec:4d:30:50: 5a:8b:14:e0:99:1c:dd:4a:33:5f:65:f7:ff:58:5a:f2:3e:db: ce:07:e4:b8:1d:e7:e9:36:6c:53:62:53:25:0e:da:66:fb:af: f3:54:f0:ed:e0:6d:9c:27:00:bd:68:3c:02:09:ab:8e:89:06: c0:1c:ea:a1:84:00:ad:28:f5:90:97:a1:6f:61:17:b5:e2:4b: cf:72:ad:77:41:7a:99:2c:d6:ca:df:53:50:80:06:f8:8b:ec: 97:5f:72:25:6f:cf:80:c1:c8:54:46:6a:e9:8f:08:35:2e:71: 66:b4:8e:2b:db:6f:f0:49:6d:d1:b5:15:bf:76:11:bd:ad:43: 50:07:91:0b:17:e7:3f:f9:19:c1:38:8e:61:56:aa:db:8e:0b: 03:a5:b5:f1:13:e3:9b:cd:cb:8e:6d:b1:5c:b5:8a:82:58:73: 1b:26:af:88:46:f9:9e:8a:a5:27:62:73:f4:a7:03:ce:25:64: 87:3f:55:34:f4:3a:c1:f0:b8:50:7f:18:84:0c:f3:25:57:fe: 09:9c:3e:48:24:7b:eb:eb:59:7d:76:5c:8b:0e:20:06:b8:38: 62:91:0e:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWJPxkdeeaQ8dL4KPiO8R3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTE4MDg0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTlhODgyODg5MjFiNGRiN2RjYjVjZDdlZjI5YjYyYTU3ZWE1NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTqdOr0/xYcD+PTQbiRL2ObyhJt8 WbSR7UdItwp+i336WjPIzwNTgF+oK8asgrwRrc/lecmeXtsxP5sW308Ci89jCkUk imeHW6unmHdQ1Ve7BKS6V1s3tTS1Phe2DB94rX3QjNSYU1/645aCU8+oxiQAm5Sq UYK2xRbqd57x9R+sEeAFCs+wD4H6LEQWbZBU5X0IguMijs5vFcHB/fR3GwUtUzXR SmFUMYVGyu4/XQGNO60RyXqtB321osQqOF9X7vbTcnMA1xeM/YqwQqEo3bsmQhmR lzMA8Y03fuu1YkR5euK5AL/PNTZwB5aXT2s0iPsAcULoBqAcdWy2Q7bj1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHqaiCiJIbTbfctc1+8ptipX6laQMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvZXBxSUtJa2h0TnQ5eTF6WDd5bTJLbGZxVnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXFMA0G CSqGSIb3DQEBCwUAA4IBAQB6QZKSzHa8+3Y8ZqKz3B3edwKGOlegrOGeCf44HdBd 5uxNMFBaixTgmRzdSjNfZff/WFryPtvOB+S4HefpNmxTYlMlDtpm+6/zVPDt4G2c JwC9aDwCCauOiQbAHOqhhACtKPWQl6FvYRe14kvPcq13QXqZLNbK31NQgAb4i+yX X3Ilb8+AwchURmrpjwg1LnFmtI4r22/wSW3RtRW/dhG9rUNQB5ELF+c/+RnBOI5h VqrbjgsDpbXxE+ObzcuObbFctYqCWHMbJq+IRvmeiqUnYnP0pwPOJWSHP1U09DrB 8LhQfxiEDPMlV/4JnD5IJHvr61l9dlyLDiAGuDhikQ7G -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:30 2025 by rpki-client