This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lqZwDtH8lWIvmnpbsftIetp0gqk.roa File: lqZwDtH8lWIvmnpbsftIetp0gqk.roa (raw, json) Hash identifier: wBRTYZAdnaxyW57cCnFb5nZ8EfgJgJreuR0LYbDUMw8= Subject key identifier: 96:A6:70:0E:D1:FC:95:62:2F:9A:7A:5B:B1:FB:48:7A:DA:74:82:A9 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019A962B658763535B2FBCB567D933B999DA Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lqZwDtH8lWIvmnpbsftIetp0gqk.roa Signing time: Tue 18 Nov 2025 08:53:37 +0000 ROA not before: Tue 18 Nov 2025 08:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201194 IP address blocks: 85.133.245.0/24 maxlen: 24 85.133.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:2b:65:87:63:53:5b:2f:bc:b5:67:d9:33:b9:99:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 18 08:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96a6700ed1fc95622f9a7a5bb1fb487ada7482a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:8c:2a:0e:ec:b7:6b:dd:b7:be:4a:76:9b: ef:e4:63:60:ff:3a:eb:0f:ae:74:6b:3e:5e:89:04: e4:9f:88:58:76:61:7e:0a:68:32:1f:be:3d:8f:2e: d7:53:6d:b7:08:5d:87:57:8a:ab:5f:88:7e:51:6f: 9c:19:15:68:65:b5:e9:0b:ee:1c:b3:e3:07:d3:0f: f7:5f:84:ab:ba:07:3f:8a:54:fd:5f:77:40:29:e6: a9:49:dd:ef:94:b3:6a:cb:a3:1a:0e:8d:7e:c9:1a: 9d:85:68:29:e4:db:f0:b0:75:a7:0b:8d:d8:84:1c: 79:bd:11:56:74:b4:b5:d9:ad:5c:5d:85:9f:11:e1: 29:2f:cc:4b:70:ac:d5:1c:ab:44:da:b3:06:1c:f0: c6:1d:60:17:3c:fa:a8:88:fa:a4:da:80:3e:79:64: 62:57:a3:ee:d7:e3:90:d2:50:e9:c4:cd:d2:e7:b2: ff:fc:6e:91:d3:15:16:3f:3c:b8:4c:0f:ee:df:81: c0:59:1c:fc:0d:68:e9:f7:c2:af:4d:60:b3:e0:2f: c1:76:44:8b:ed:c0:40:fc:c0:87:ae:ed:5e:95:78: 1b:68:a8:85:81:9c:4b:71:12:08:52:0b:d7:82:08: f9:90:a1:68:1c:e5:e3:b6:4f:2e:43:ec:6e:17:45: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:70:0E:D1:FC:95:62:2F:9A:7A:5B:B1:FB:48:7A:DA:74:82:A9 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/lqZwDtH8lWIvmnpbsftIetp0gqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.245.0/24 85.133.254.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:d2:d2:5c:f7:d9:ce:47:8b:2e:00:cf:ae:94:c2:06:15:72: dd:f1:98:f3:3e:38:52:f1:2b:37:78:6d:f4:ed:6f:0c:72:06: 09:36:f3:60:23:0b:2f:6b:24:5f:c7:e0:22:ad:f8:0a:a7:05: 1f:e0:56:f7:ba:03:92:b1:8d:81:00:47:72:40:d1:15:5b:d3: 07:73:59:5f:2b:36:f4:fe:3e:80:19:da:3d:ae:e1:92:be:a6: 93:be:c1:2d:ae:1a:07:9d:a5:a2:90:bd:c1:8f:69:01:a7:f0: 24:f5:fa:bd:b1:cb:9f:8c:c3:03:01:a8:29:5e:77:c8:f6:b9: d5:c1:27:a6:8b:41:27:f7:bf:c9:b2:d3:40:4b:40:87:61:ac: 60:63:c1:2f:0c:9a:33:31:0a:c6:00:5f:3c:f2:62:93:11:a6: a0:8c:bf:55:8f:25:f0:f9:01:a8:a1:7f:7f:93:0d:9b:98:28: ca:92:da:e4:f6:6d:50:59:ef:b1:e7:3c:62:65:47:a7:e5:af: 0b:d2:de:99:0b:9b:94:f5:c4:e3:4e:06:ad:e8:c2:71:ad:84: 0e:61:c5:f7:c6:7c:51:5b:ae:f7:30:ca:76:85:34:aa:16:c9: 10:2d:58:00:c6:57:9d:ac:63:84:5b:d9:48:c1:53:7b:72:97: 13:bb:e1:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqWK2WHY1NbL7y1Z9kzuZnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTE4MDg1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmE2NzAwZWQxZmM5NTYyMmY5YTdhNWJiMWZiNDg3YWRhNzQ4MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG6MKg7st2vdt75Kdpvv5GNg/zrr D650az5eiQTkn4hYdmF+CmgyH749jy7XU223CF2HV4qrX4h+UW+cGRVoZbXpC+4c s+MH0w/3X4Srugc/ilT9X3dAKeapSd3vlLNqy6MaDo1+yRqdhWgp5NvwsHWnC43Y hBx5vRFWdLS12a1cXYWfEeEpL8xLcKzVHKtE2rMGHPDGHWAXPPqoiPqk2oA+eWRi V6Pu1+OQ0lDpxM3S57L//G6R0xUWPzy4TA/u34HAWRz8DWjp98KvTWCz4C/BdkSL 7cBA/MCHru1elXgbaKiFgZxLcRIIUgvXggj5kKFoHOXjtk8uQ+xuF0WbaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJamcA7R/JViL5p6W7H7SHradIKpMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvbHFad0R0SDhsV0l2bW5wYnNmdElldHAwZ3FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYX1AwQA VYX+MA0GCSqGSIb3DQEBCwUAA4IBAQAc0tJc99nOR4suAM+ulMIGFXLd8ZjzPjhS 8Ss3eG307W8McgYJNvNgIwsvayRfx+AirfgKpwUf4Fb3ugOSsY2BAEdyQNEVW9MH c1lfKzb0/j6AGdo9ruGSvqaTvsEtrhoHnaWikL3Bj2kBp/Ak9fq9scufjMMDAagp XnfI9rnVwSemi0En97/JstNAS0CHYaxgY8EvDJozMQrGAF888mKTEaagjL9VjyXw +QGooX9/kw2bmCjKktrk9m1QWe+x5zxiZUen5a8L0t6ZC5uU9cTjTgat6MJxrYQO YcX3xnxRW673MMp2hTSqFskQLVgAxledrGOEW9lIwVN7cpcTu+F3 -----END CERTIFICATE-----Generated at Sun Dec 7 03:33:58 2025 by rpki-client