This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa File: kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa (raw, json) Hash identifier: ZgKOQA+PHq9i2ji6e+ts+3wSCdikkWfp1S4fKo671JU= Subject key identifier: 90:80:43:7A:62:A4:2F:35:DE:53:AE:C9:43:DC:C0:C4:08:EC:D1:0C Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C7164B13F919483BD57F9197280656 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211904 IP address blocks: 85.133.246.0/24 maxlen: 24 85.133.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:16:4b:13:f9:19:48:3b:d5:7f:91:97:28:06:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9080437a62a42f35de53aec943dcc0c408ecd10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:07:c3:5c:b3:93:02:7a:9a:65:3e:08:ce: 29:b4:c6:31:98:18:a1:7d:b6:ba:15:d5:5e:5e:4b: 2b:a7:73:d9:b7:85:84:3f:d8:24:6b:d7:e2:9e:c6: 09:e7:92:53:d8:52:4e:10:bd:c5:45:60:9d:70:88: 2f:e8:9c:81:dd:cc:e3:f9:ba:17:77:29:ae:46:13: fc:40:85:fc:ea:e7:f2:88:b2:df:9f:94:1f:e5:bd: 2d:57:d0:5f:b9:fc:ff:26:ed:6b:76:ec:f3:c3:47: 83:00:aa:f6:d4:e9:53:6e:df:4a:1f:91:bc:08:cf: 92:e2:0a:b2:a1:0f:4b:56:14:fd:cc:e6:8b:4c:4c: a9:ee:2b:71:f5:ab:8b:58:9d:f2:03:da:1b:81:9c: cc:f9:fe:ac:a2:25:b8:25:85:3a:f6:37:fc:a0:55: 3a:a6:5e:bd:b6:6e:a1:c4:fe:55:b3:4d:74:59:bf: 0e:6c:7c:d5:0e:27:36:20:9e:bb:7f:12:06:5a:8a: 70:30:b9:cc:4c:49:4b:20:e8:4e:16:9c:3c:5c:d2: bf:aa:1b:5c:cb:cc:a1:9a:63:c7:61:eb:3b:06:1c: 2b:58:17:fc:aa:27:09:d3:c0:68:16:d1:bd:3b:45: 29:eb:37:60:a5:7d:24:2e:83:53:c4:15:8f:12:08: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:43:7A:62:A4:2F:35:DE:53:AE:C9:43:DC:C0:C4:08:EC:D1:0C X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.246.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:f5:0e:7a:d7:46:89:4e:5b:40:08:26:8c:76:b5:02:ac:96: a1:09:b1:ce:e2:6b:38:ea:99:74:98:66:e1:ce:87:d4:e1:8e: b5:af:41:26:8f:b9:ae:ab:86:83:e9:58:91:cb:32:83:e9:30: 79:6f:b4:85:0b:d6:d5:09:c0:30:55:86:80:17:19:5a:23:87: cd:79:2d:52:8d:e0:4b:2c:11:67:40:c6:a1:d0:83:df:1b:a3: 9c:c1:8b:4c:55:fa:2a:1c:ce:9c:0c:30:6d:a4:a2:82:09:3b: 1c:1d:12:4f:84:a7:57:bb:57:0c:2f:f1:3c:d9:07:ca:8d:70: 2a:f4:9b:46:83:93:23:c6:e4:bd:dd:e7:c3:ed:f2:54:f1:df: f5:c4:01:ac:e2:b1:94:4b:30:93:37:40:85:4c:d2:b0:0a:cf: 67:cf:11:fc:33:b9:54:5c:2d:73:ac:ae:89:b6:3a:82:e0:92: 9d:e3:24:f9:a2:d9:fd:e6:31:3f:a2:b0:2e:1d:ca:01:35:ad: 96:cb:63:38:12:ef:e5:5e:2c:64:88:d3:00:d7:00:30:52:c5: ec:7e:d2:25:01:ac:50:64:8e:c1:0c:e3:df:8a:f9:db:dd:06: 19:5a:8f:13:5c:4c:e2:e2:f3:d7:d4:bd:9b:3c:48:b9:e9:23: 95:3d:44:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxZLE/kZSDvVf5GXKAZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDgwNDM3YTYyYTQyZjM1ZGU1M2FlYzk0M2RjYzBjNDA4ZWNkMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxUHw1yzkwJ6mmU+CM4ptMYxmBih fba6FdVeXksrp3PZt4WEP9gka9finsYJ55JT2FJOEL3FRWCdcIgv6JyB3czj+boX dymuRhP8QIX86ufyiLLfn5Qf5b0tV9Bfufz/Ju1rduzzw0eDAKr21OlTbt9KH5G8 CM+S4gqyoQ9LVhT9zOaLTEyp7itx9auLWJ3yA9obgZzM+f6soiW4JYU69jf8oFU6 pl69tm6hxP5Vs010Wb8ObHzVDic2IJ67fxIGWopwMLnMTElLIOhOFpw8XNK/qhtc y8yhmmPHYes7BhwrWBf8qicJ08BoFtG9O0Up6zdgpX0kLoNTxBWPEgjeswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCAQ3pipC813lOuyUPcwMQI7NEMMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEva0lCRGVtS2tMelhlVTY3SlE5ekF4QWpzMFF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVYX2MA0G CSqGSIb3DQEBCwUAA4IBAQCe9Q5610aJTltACCaMdrUCrJahCbHO4ms46pl0mGbh zofU4Y61r0Emj7muq4aD6ViRyzKD6TB5b7SFC9bVCcAwVYaAFxlaI4fNeS1SjeBL LBFnQMah0IPfG6OcwYtMVfoqHM6cDDBtpKKCCTscHRJPhKdXu1cML/E82QfKjXAq 9JtGg5MjxuS93efD7fJU8d/1xAGs4rGUSzCTN0CFTNKwCs9nzxH8M7lUXC1zrK6J tjqC4JKd4yT5otn95jE/orAuHcoBNa2Wy2M4Eu/lXixkiNMA1wAwUsXsftIlAaxQ ZI7BDOPfivnb3QYZWo8TXEzi4vPX1L2bPEi56SOVPUQT -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:43 2026 by rpki-client