This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xNnQfct2h92PaIKS74sD9CM4o4U.roa File: xNnQfct2h92PaIKS74sD9CM4o4U.roa (raw, json) Hash identifier: QGuW5QKxtse8707nSPUJuzi0XsZ2TE2pxDMoVhy4gvQ= Subject key identifier: C4:D9:D0:7D:CB:76:87:DD:8F:68:82:92:EF:8B:03:F4:23:38:A3:85 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C7156A2D14559EDA207D2117A522D1 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xNnQfct2h92PaIKS74sD9CM4o4U.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204203 IP address blocks: 85.133.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:15:6a:2d:14:55:9e:da:20:7d:21:17:a5:22:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4d9d07dcb7687dd8f688292ef8b03f42338a385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:33:8f:c1:6f:a0:3c:bc:70:5b:b3:75:12: ab:2f:9c:23:6f:d1:b1:51:b7:64:0d:da:8a:2c:57: 13:aa:f9:96:e4:50:ed:7e:b0:00:9a:5e:95:58:b3: 40:da:67:f0:54:13:c8:38:07:26:a9:d8:81:06:30: a7:51:cd:06:e6:8c:22:67:1c:23:7e:05:27:d3:9f: 38:02:c0:9a:26:48:d6:1d:2d:aa:cb:98:5c:96:50: 04:a1:00:20:b8:5b:4e:80:c5:e5:58:83:fd:db:c3: 41:07:4f:24:86:99:aa:48:f4:1e:40:f8:4a:f3:ec: 01:37:d0:3d:2a:b7:77:4b:4a:ca:a0:b0:98:70:bb: d9:f8:d8:bd:81:21:09:ee:ac:94:1e:46:42:6a:2a: 3d:71:ea:57:5c:7f:84:f3:d0:1c:5b:7a:c0:47:53: e0:c8:11:cb:3e:88:36:d6:cd:75:19:08:64:01:db: b6:6a:1f:dc:fc:cd:46:f9:04:8c:53:03:98:b5:f0: cb:c5:2e:a2:47:64:4f:6b:e8:47:30:0e:27:0f:71: b0:c9:87:31:52:df:41:86:e0:cc:0b:64:7f:6b:d3: 62:44:61:0c:cc:82:0a:25:95:f1:4f:e0:99:d2:95: e5:db:74:58:14:f6:f0:c5:3e:08:a3:71:1e:bd:38: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D9:D0:7D:CB:76:87:DD:8F:68:82:92:EF:8B:03:F4:23:38:A3:85 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xNnQfct2h92PaIKS74sD9CM4o4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.206.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:35:08:28:56:10:10:78:c8:66:2f:af:af:53:b9:80:2c:7c: 32:3f:1a:93:47:0e:a5:60:b8:92:9e:8e:5c:ee:dd:2b:88:54: 30:1b:50:7c:a6:8f:dc:b6:33:cf:ca:e5:f4:cf:af:1a:9f:a0: d9:b7:6d:ce:a3:03:91:ea:f3:15:40:66:6e:69:54:f7:9f:1a: 37:e4:6c:4d:f8:74:ca:e9:37:f9:1c:7f:a9:ac:6b:4f:f1:5e: 0b:5a:d6:6a:14:fd:98:1a:5a:5d:ff:d6:14:0e:fa:4c:cd:02: f0:cd:fa:ad:6e:f8:6a:56:dd:6b:3c:99:ef:24:01:9b:48:fb: 3e:de:62:d5:f9:4d:ae:00:04:46:23:73:56:c2:c9:b5:d9:79: b7:00:27:9e:f8:d9:2e:a7:ff:bc:76:0c:a9:d0:0e:af:f7:74: 06:56:e3:8d:d2:62:a8:55:24:c0:c4:ba:06:bc:c5:9d:eb:e7: a7:13:09:2a:58:49:52:03:b2:25:0b:01:cd:f2:9f:5b:59:73: ef:76:1d:05:51:48:7d:6c:4d:5d:6d:e1:3a:07:13:fc:fd:ef: 00:35:f8:5f:22:cd:7a:e4:86:7e:4b:2e:b7:f6:19:67:0c:8d: bb:46:e3:4e:a7:d5:9e:8d:6f:ec:8b:4a:e8:85:76:d6:0e:8b: d6:00:17:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxVqLRRVntogfSEXpSLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQ5ZDA3ZGNiNzY4N2RkOGY2ODgyOTJlZjhiMDNmNDIzMzhhMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugMzj8FvoDy8cFuzdRKrL5wjb9Gx UbdkDdqKLFcTqvmW5FDtfrAAml6VWLNA2mfwVBPIOAcmqdiBBjCnUc0G5owiZxwj fgUn0584AsCaJkjWHS2qy5hcllAEoQAguFtOgMXlWIP928NBB08khpmqSPQeQPhK 8+wBN9A9Krd3S0rKoLCYcLvZ+Ni9gSEJ7qyUHkZCaio9cepXXH+E89AcW3rAR1Pg yBHLPog21s11GQhkAdu2ah/c/M1G+QSMUwOYtfDLxS6iR2RPa+hHMA4nD3GwyYcx Ut9BhuDMC2R/a9NiRGEMzIIKJZXxT+CZ0pXl23RYFPbwxT4Io3EevTjSyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTZ0H3Ldofdj2iCku+LA/QjOKOFMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEveE5uUWZjdDJoOTJQYUlLUzc0c0Q5Q000bzRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXOMA0G CSqGSIb3DQEBCwUAA4IBAQA6NQgoVhAQeMhmL6+vU7mALHwyPxqTRw6lYLiSno5c 7t0riFQwG1B8po/ctjPPyuX0z68an6DZt23OowOR6vMVQGZuaVT3nxo35GxN+HTK 6Tf5HH+prGtP8V4LWtZqFP2YGlpd/9YUDvpMzQLwzfqtbvhqVt1rPJnvJAGbSPs+ 3mLV+U2uAARGI3NWwsm12Xm3ACee+Nkup/+8dgyp0A6v93QGVuON0mKoVSTAxLoG vMWd6+enEwkqWElSA7IlCwHN8p9bWXPvdh0FUUh9bE1dbeE6BxP8/e8ANfhfIs16 5IZ+Sy639hlnDI27RuNOp9WejW/si0rohXbWDovWABem -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:01 2026 by rpki-client