This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/t_kih-rt9Twd4sL8OIS8YKLw_G0.roa File: t_kih-rt9Twd4sL8OIS8YKLw_G0.roa (raw, json) Hash identifier: +7vAxOA2ZybB1j6SfDxXEkpU+iKjAT4cj8AEzqFfcsU= Subject key identifier: B7:F9:22:87:EA:ED:F5:3C:1D:E2:C2:FC:38:84:BC:60:A2:F0:FC:6D Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C711D1DF371497B33DE13AB025A39A Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/t_kih-rt9Twd4sL8OIS8YKLw_G0.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39074 IP address blocks: 85.133.128.0/22 maxlen: 22 85.133.128.0/24 maxlen: 24 85.133.129.0/24 maxlen: 24 85.133.130.0/24 maxlen: 24 85.133.131.0/24 maxlen: 24 85.133.132.0/24 maxlen: 24 85.133.133.0/24 maxlen: 24 85.133.134.0/24 maxlen: 24 85.133.135.0/24 maxlen: 24 85.133.136.0/24 maxlen: 24 85.133.137.0/24 maxlen: 24 85.133.138.0/24 maxlen: 24 85.133.139.0/24 maxlen: 24 85.133.141.0/24 maxlen: 24 85.133.142.0/24 maxlen: 24 85.133.143.0/24 maxlen: 24 85.133.144.0/24 maxlen: 24 85.133.145.0/24 maxlen: 24 85.133.146.0/24 maxlen: 24 85.133.147.0/24 maxlen: 24 85.133.148.0/24 maxlen: 24 85.133.149.0/24 maxlen: 24 85.133.150.0/24 maxlen: 24 85.133.151.0/24 maxlen: 24 85.133.152.0/24 maxlen: 24 85.133.154.0/24 maxlen: 24 85.133.155.0/24 maxlen: 24 85.133.156.0/24 maxlen: 24 85.133.157.0/24 maxlen: 24 85.133.158.0/24 maxlen: 24 85.133.159.0/24 maxlen: 24 85.133.164.0/24 maxlen: 24 85.133.165.0/24 maxlen: 24 85.133.166.0/24 maxlen: 24 85.133.167.0/24 maxlen: 24 85.133.168.0/22 maxlen: 24 85.133.168.0/24 maxlen: 24 85.133.171.0/24 maxlen: 24 85.133.172.0/22 maxlen: 24 85.133.172.0/24 maxlen: 24 85.133.173.0/24 maxlen: 24 85.133.175.0/24 maxlen: 24 85.133.176.0/22 maxlen: 24 85.133.176.0/24 maxlen: 24 85.133.177.0/24 maxlen: 24 85.133.178.0/24 maxlen: 24 85.133.179.0/24 maxlen: 24 85.133.180.0/22 maxlen: 24 85.133.180.0/24 maxlen: 24 85.133.181.0/24 maxlen: 24 85.133.182.0/24 maxlen: 24 85.133.183.0/24 maxlen: 24 85.133.184.0/22 maxlen: 24 85.133.184.0/24 maxlen: 24 85.133.185.0/24 maxlen: 24 85.133.186.0/24 maxlen: 24 85.133.187.0/24 maxlen: 24 85.133.188.0/22 maxlen: 22 85.133.188.0/24 maxlen: 24 85.133.189.0/24 maxlen: 24 85.133.190.0/24 maxlen: 24 85.133.191.0/24 maxlen: 24 85.133.192.0/24 maxlen: 24 85.133.199.0/24 maxlen: 24 85.133.207.0/24 maxlen: 24 85.133.208.0/24 maxlen: 24 85.133.209.0/24 maxlen: 24 85.133.210.0/23 maxlen: 24 85.133.210.0/24 maxlen: 24 85.133.211.0/24 maxlen: 24 85.133.212.0/24 maxlen: 24 85.133.213.0/24 maxlen: 24 85.133.215.0/24 maxlen: 24 85.133.222.0/24 maxlen: 24 85.133.223.0/24 maxlen: 24 85.133.226.0/24 maxlen: 24 85.133.231.0/24 maxlen: 24 85.133.232.0/24 maxlen: 24 85.133.235.0/24 maxlen: 24 85.133.244.0/24 maxlen: 24 85.133.251.0/24 maxlen: 24 85.133.254.0/24 maxlen: 24 85.133.255.0/24 maxlen: 24 2a04:87c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:d1:df:37:14:97:b3:3d:e1:3a:b0:25:a3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7f92287eaedf53c1de2c2fc3884bc60a2f0fc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:47:ac:87:59:f6:58:5e:b5:40:a4:cf:ed: 08:88:57:64:3b:8f:e9:67:74:fb:8c:ff:0d:34:58: 8a:76:50:ff:66:c3:e9:d2:1c:84:90:80:ec:4b:82: 1d:d6:96:ff:c3:4a:e7:c1:ac:cf:b0:75:dc:a5:22: 98:d3:e2:1a:32:16:32:4f:fe:20:6e:e3:b0:10:34: 49:ab:6f:f3:a8:e0:9c:01:ff:84:b4:b9:fe:12:50: 31:34:9f:ce:e9:0c:bd:6c:9a:74:f6:d2:c1:90:2a: 89:7f:7e:ad:5d:59:f8:8e:35:be:a6:1f:33:6f:58: 0f:83:ac:43:10:89:c3:b1:8b:9c:c1:fa:a7:b4:40: de:cc:7d:73:d4:07:69:e2:56:bd:43:b3:e3:03:a4: c1:1a:c4:2d:57:86:2d:1a:0c:e3:d5:26:1f:57:9b: 0e:1e:ef:ce:74:9c:42:31:39:52:68:f9:da:e8:35: 35:f1:18:11:bf:7f:48:b7:74:52:8d:4e:f1:a0:fe: dd:5b:86:ca:57:d7:a9:0f:f4:40:e4:f9:7e:97:7d: 2b:95:ec:46:77:3a:57:73:f8:bd:4a:36:7c:12:ac: fa:43:93:fc:04:aa:a2:73:8a:54:32:8d:b3:5f:a6: 8c:0c:a2:e5:df:cf:00:27:cc:0c:ea:26:c6:98:eb: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:22:87:EA:ED:F5:3C:1D:E2:C2:FC:38:84:BC:60:A2:F0:FC:6D X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/t_kih-rt9Twd4sL8OIS8YKLw_G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.128.0-85.133.139.255 85.133.141.0-85.133.152.255 85.133.154.0-85.133.159.255 85.133.164.0-85.133.192.255 85.133.199.0/24 85.133.207.0-85.133.213.255 85.133.215.0/24 85.133.222.0/23 85.133.226.0/24 85.133.231.0-85.133.232.255 85.133.235.0/24 85.133.244.0/24 85.133.251.0/24 85.133.254.0/23 IPv6: 2a04:87c0::/29 Signature Algorithm: sha256WithRSAEncryption 86:55:c6:ea:94:12:3f:03:81:a8:5b:a3:0f:95:d9:9f:f4:f7: 6c:29:7c:66:59:bb:cc:c0:89:3b:b0:9d:34:f5:e4:19:46:f1: bd:f6:33:d0:57:38:41:cd:8d:a6:0e:4e:c3:a1:fe:64:18:ef: 21:81:87:a2:41:57:3a:ea:89:34:6d:6d:f5:61:70:69:e7:bb: f2:c7:f7:0e:b3:83:f5:c4:8f:cf:11:78:3d:7e:13:a4:f9:16: e8:3d:35:2c:86:aa:de:53:e7:85:e3:d5:c2:06:3f:c4:78:0c: b3:50:ea:bb:e2:58:eb:7b:c6:ad:1d:7a:22:45:fe:b8:45:39: 23:bf:4c:06:e1:39:62:2d:13:e5:47:15:d2:c8:51:54:32:d5: 09:55:2e:86:ef:2b:13:42:11:c2:40:85:02:79:e3:e1:b4:c6: dc:3a:88:3f:8c:c1:64:d3:c8:b4:d5:d1:8a:87:59:b4:66:f1: 8c:1b:9a:2b:be:07:d6:10:1f:e9:23:50:7d:7d:5b:f3:55:28: 7f:02:25:24:88:da:74:9f:fb:52:f6:b8:6e:74:87:55:0a:59: f7:3e:2b:d6:68:0d:ac:50:4a:11:29:ee:7c:d2:a4:ef:4d:d9: 41:56:12:94:68:02:58:bb:18:cd:1c:29:1e:d2:06:95:4e:01: b7:ab:b7:5f -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt3xxHR3zcUl7M94TqwJaOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2Y5MjI4N2VhZWRmNTNjMWRlMmMyZmMzODg0YmM2MGEyZjBmYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7pHrIdZ9lhetUCkz+0IiFdkO4/p Z3T7jP8NNFiKdlD/ZsPp0hyEkIDsS4Id1pb/w0rnwazPsHXcpSKY0+IaMhYyT/4g buOwEDRJq2/zqOCcAf+EtLn+ElAxNJ/O6Qy9bJp09tLBkCqJf36tXVn4jjW+ph8z b1gPg6xDEInDsYucwfqntEDezH1z1Adp4la9Q7PjA6TBGsQtV4YtGgzj1SYfV5sO Hu/OdJxCMTlSaPna6DU18RgRv39It3RSjU7xoP7dW4bKV9epD/RA5Pl+l30rlexG dzpXc/i9SjZ8Eqz6Q5P8BKqic4pUMo2zX6aMDKLl388AJ8wM6ibGmOuMLQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFLf5Iofq7fU8HeLC/DiEvGCi8PxtMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvdF9raWgtcnQ5VHdkNHNMOE9JUzhZS0x3X0cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBiwQCAAEwgYQwDAME B1WFgAMEAlWFiDAMAwQAVYWNAwQAVYWYMAwDBAFVhZoDBAVVhYAwDAMEAlWFpAME AFWFwAMEAFWFxzAMAwQAVYXPAwQBVYXUAwQAVYXXAwQBVYXeAwQAVYXiMAwDBABV hecDBABVhegDBABVhesDBABVhfQDBABVhfsDBAFVhf4wDQQCAAIwBwMFAyoEh8Aw DQYJKoZIhvcNAQELBQADggEBAIZVxuqUEj8Dgahbow+V2Z/092wpfGZZu8zAiTuw nTT15BlG8b32M9BXOEHNjaYOTsOh/mQY7yGBh6JBVzrqiTRtbfVhcGnnu/LH9w6z g/XEj88ReD1+E6T5Fug9NSyGqt5T54Xj1cIGP8R4DLNQ6rviWOt7xq0deiJF/rhF OSO/TAbhOWItE+VHFdLIUVQy1QlVLobvKxNCEcJAhQJ54+G0xtw6iD+MwWTTyLTV 0YqHWbRm8Ywbmiu+B9YQH+kjUH19W/NVKH8CJSSI2nSf+1L2uG50h1UKWfc+K9Zo DaxQShEp7nzSpO9N2UFWEpRoAli7GM0cKR7SBpVOAbert18= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:09 2026 by rpki-client