This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rClGIIO13EpmdapGJJLWbhKvgxk.roa File: rClGIIO13EpmdapGJJLWbhKvgxk.roa (raw, json) Hash identifier: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw= Subject key identifier: AC:29:46:20:83:B5:DC:4A:66:75:AA:46:24:92:D6:6E:12:AF:83:19 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C712F6BAF8961A069C515CC8A671A3 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rClGIIO13EpmdapGJJLWbhKvgxk.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48715 IP address blocks: 85.133.140.0/24 maxlen: 24 85.133.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:12:f6:ba:f8:96:1a:06:9c:51:5c:c8:a6:71:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac29462083b5dc4a6675aa462492d66e12af8319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fd:df:b4:76:9a:32:ea:db:a8:36:dd:bb:87: 70:5d:16:d2:a1:b0:0f:f6:27:7f:d0:21:d4:e5:7f: 1a:8b:1e:65:2f:63:1e:59:d7:ed:72:50:f9:e9:42: 21:a5:4d:1e:77:60:0d:81:8f:f2:b3:10:21:40:b7: dd:94:bb:0b:a9:6f:22:03:10:53:16:bf:1f:0c:a7: c6:cf:84:82:6d:1a:a4:79:c3:d1:0b:4e:1f:85:43: 51:ec:0d:e6:3e:30:c3:e0:2f:96:8a:5d:58:92:79: 99:56:a7:f1:a6:0e:74:c0:1f:e6:3d:3f:a9:db:39: a1:22:46:49:8f:fe:2e:98:12:f7:fd:fe:da:1f:5e: ce:34:e6:bc:3d:a0:d8:d0:ef:3a:9a:b5:7d:48:6a: 5b:78:10:62:10:97:11:a6:f6:31:18:61:4c:d9:f1: 6e:62:1b:12:7e:f6:d8:ea:8e:99:fa:c6:0d:07:fe: 1a:64:55:22:65:aa:99:c0:d0:c8:2e:3d:cd:ac:de: ad:de:4d:b1:a0:90:f4:84:e5:71:38:9d:f1:b8:60: f9:0e:c5:4e:de:0a:54:fd:ad:9a:e0:18:00:e6:6e: 39:d6:7e:b4:49:39:98:99:e5:4c:d4:4c:27:9e:56: 1f:b8:03:02:0d:05:45:2a:b2:02:07:5a:c3:38:ca: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:29:46:20:83:B5:DC:4A:66:75:AA:46:24:92:D6:6E:12:AF:83:19 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rClGIIO13EpmdapGJJLWbhKvgxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.140.0/24 85.133.239.0/24 Signature Algorithm: sha256WithRSAEncryption 26:b2:f0:80:da:84:5d:ca:30:b4:ed:e7:ec:7f:8b:6f:a6:9a: ac:98:31:7f:78:cd:63:0c:8d:c0:6d:6e:b1:69:89:17:55:75: b0:2b:3b:b9:3b:9b:ae:c1:ab:06:21:1a:45:0c:b0:61:5c:c1: 96:3e:c1:be:75:34:34:5b:92:99:2b:8c:96:f1:56:ce:55:99: 1a:f6:9b:60:6e:4d:c7:d1:1c:fc:16:78:90:ca:32:fd:c4:6e: 29:33:33:09:0e:87:3e:1b:bd:ce:3c:86:df:18:95:34:33:78: 1e:fe:60:da:c1:72:3b:05:9c:9e:f3:8c:92:4f:5c:29:ad:fe: 10:5d:50:c6:03:d5:0b:3e:43:a2:07:b4:a5:ce:52:9b:e5:22: 7d:a3:a6:70:a5:47:a0:87:7e:90:d3:74:11:8b:28:05:5f:e5: e9:36:aa:52:37:73:ca:03:29:24:55:ef:54:39:72:e4:08:41: 6e:4d:c0:03:11:5e:05:09:f5:a4:40:14:ea:d7:06:18:d0:43: 50:87:30:17:d8:45:0c:f1:a2:22:5c:ce:52:57:6e:66:97:94: ac:9c:2b:ec:c2:a5:b2:40:8a:51:14:67:c8:04:63:37:06:02: f3:b4:21:ff:30:5d:d9:ae:c0:d6:f4:2f:f5:5b:97:8f:ec:d8: 9a:ff:ee:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xxL2uviWGgacUVzIpnGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzI5NDYyMDgzYjVkYzRhNjY3NWFhNDYyNDkyZDY2ZTEyYWY4MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f3ftHaaMurbqDbdu4dwXRbSobAP 9id/0CHU5X8aix5lL2MeWdftclD56UIhpU0ed2ANgY/ysxAhQLfdlLsLqW8iAxBT Fr8fDKfGz4SCbRqkecPRC04fhUNR7A3mPjDD4C+Wil1YknmZVqfxpg50wB/mPT+p 2zmhIkZJj/4umBL3/f7aH17ONOa8PaDY0O86mrV9SGpbeBBiEJcRpvYxGGFM2fFu YhsSfvbY6o6Z+sYNB/4aZFUiZaqZwNDILj3NrN6t3k2xoJD0hOVxOJ3xuGD5DsVO 3gpU/a2a4BgA5m451n60STmYmeVM1EwnnlYfuAMCDQVFKrICB1rDOMrDawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKwpRiCDtdxKZnWqRiSS1m4Sr4MZMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvckNsR0lJTzEzRXBtZGFwR0pKTFdiaEt2Z3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYWMAwQA VYXvMA0GCSqGSIb3DQEBCwUAA4IBAQAmsvCA2oRdyjC07efsf4tvppqsmDF/eM1j DI3AbW6xaYkXVXWwKzu5O5uuwasGIRpFDLBhXMGWPsG+dTQ0W5KZK4yW8VbOVZka 9ptgbk3H0Rz8FniQyjL9xG4pMzMJDoc+G73OPIbfGJU0M3ge/mDawXI7BZye84yS T1wprf4QXVDGA9ULPkOiB7SlzlKb5SJ9o6ZwpUegh36Q03QRiygFX+XpNqpSN3PK AykkVe9UOXLkCEFuTcADEV4FCfWkQBTq1wYY0ENQhzAX2EUM8aIiXM5SV25ml5Ss nCvswqWyQIpRFGfIBGM3BgLztCH/MF3ZrsDW9C/1W5eP7Nia/+6W -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:46 2026 by rpki-client