This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zFuMyuSPlCudE2j-yvF2__gKioY.roa File: zFuMyuSPlCudE2j-yvF2__gKioY.roa (raw, json) Hash identifier: NIghn6/2SjOyfBfgh8OGzs3rwvueMfeTpi6hTD7f3dU= Subject key identifier: CC:5B:8C:CA:E4:8F:94:2B:9D:13:68:FE:CA:F1:76:FF:F8:0A:8A:86 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019AB0AFB261855711EF1D1D4EA4FC545B07 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zFuMyuSPlCudE2j-yvF2__gKioY.roa Signing time: Sun 23 Nov 2025 12:28:15 +0000 ROA not before: Sun 23 Nov 2025 12:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211056 IP address blocks: 85.133.193.0/24 maxlen: 24 85.133.214.0/24 maxlen: 24 85.133.216.0/24 maxlen: 24 85.133.234.0/24 maxlen: 24 85.133.236.0/24 maxlen: 24 85.133.237.0/24 maxlen: 24 85.133.246.0/24 maxlen: 24 85.133.249.0/24 maxlen: 24 85.133.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:af:b2:61:85:57:11:ef:1d:1d:4e:a4:fc:54:5b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 23 12:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc5b8ccae48f942b9d1368fecaf176fff80a8a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:df:9d:c6:73:31:69:77:d1:74:e8:60:0e: 09:ad:58:c8:a9:22:61:f2:30:18:79:d7:92:71:0b: 0b:fa:aa:dc:84:6c:67:10:8f:56:23:68:a9:17:d5: 76:cb:12:fa:2c:41:74:8b:37:b3:df:51:36:8a:6f: ca:f5:24:44:cc:1c:ce:35:b4:72:dc:db:9c:96:e2: 4d:7b:fd:06:c7:90:23:9c:97:52:24:c4:6f:8d:59: 9b:f8:b9:5c:95:f6:ae:3b:aa:ce:d8:c1:9c:7f:07: ba:86:c2:9f:1a:ff:cc:d4:23:a4:f9:e1:ee:e4:3b: 0c:67:59:d6:50:eb:78:bd:d6:fd:aa:3b:b5:cf:80: f6:90:96:31:69:cc:f6:f3:4f:2f:b0:a5:93:3f:62: d1:72:c2:36:75:12:63:d0:41:6b:4b:4d:2a:3a:75: c0:56:00:57:a9:3a:3d:0d:73:e8:f9:cb:37:3c:4d: 6d:66:0d:9b:34:a3:80:09:1f:62:49:55:2b:9a:e6: 39:83:f0:d8:77:d1:6e:ea:9e:b7:44:12:18:e5:5b: 9c:34:62:09:78:97:0b:59:94:6a:fd:fb:3c:0d:57: a3:0d:78:a1:c4:93:f4:9a:d3:04:10:35:95:27:32: ab:67:77:39:30:97:5a:35:73:bd:e1:62:a5:2d:13: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5B:8C:CA:E4:8F:94:2B:9D:13:68:FE:CA:F1:76:FF:F8:0A:8A:86 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zFuMyuSPlCudE2j-yvF2__gKioY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.193.0/24 85.133.214.0/24 85.133.216.0/24 85.133.234.0/24 85.133.236.0/23 85.133.246.0/24 85.133.249.0/24 85.133.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:06:28:ba:e1:61:fe:9e:a2:be:d4:1a:b0:5f:6d:a9:22:12: 57:31:1d:7a:e8:4a:2b:f7:1c:6e:7b:50:0d:ba:f3:d8:88:24: f3:e6:a7:50:7d:2b:8c:8b:f7:c5:19:9e:32:37:14:42:6f:e5: 84:ad:cb:81:e6:d1:0f:ec:9a:92:91:00:03:20:67:3f:e2:3a: fe:5e:51:3a:cb:f2:1b:07:b3:7e:08:e7:58:fe:62:80:40:b3: 8f:24:7a:0b:6c:91:3d:44:75:3f:4c:61:16:9e:04:4b:96:da: ad:f2:2e:d0:59:da:50:53:0b:f0:c7:d7:22:17:60:fa:af:69: a1:0f:65:14:46:ec:7e:bf:f1:61:b0:78:77:6d:17:7b:00:8f: 98:e8:24:75:d3:f8:f6:66:33:aa:07:36:f5:ae:41:99:62:0c: 29:a4:4d:27:d9:89:8c:dd:73:12:0b:67:aa:a2:96:13:8b:c8: cc:3e:1b:56:9c:c5:3e:c3:24:f6:99:1a:69:f2:4a:42:f7:be: 15:f1:d7:6a:de:71:9f:09:2d:b4:67:7d:ec:8b:77:c7:00:28: 47:ab:18:6d:7a:8d:35:33:bc:00:d4:84:cc:86:8a:73:03:d9: e8:6b:bb:c3:cf:86:8a:ae:bc:1e:35:ea:9d:98:6d:b4:16:00: ac:25:97:59 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZqwr7JhhVcR7x0dTqT8VFsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTIzMTIyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzViOGNjYWU0OGY5NDJiOWQxMzY4ZmVjYWYxNzZmZmY4MGE4YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pffncZzMWl30XToYA4JrVjIqSJh 8jAYedeScQsL+qrchGxnEI9WI2ipF9V2yxL6LEF0izez31E2im/K9SREzBzONbRy 3NucluJNe/0Gx5AjnJdSJMRvjVmb+LlclfauO6rO2MGcfwe6hsKfGv/M1COk+eHu 5DsMZ1nWUOt4vdb9qju1z4D2kJYxacz2808vsKWTP2LRcsI2dRJj0EFrS00qOnXA VgBXqTo9DXPo+cs3PE1tZg2bNKOACR9iSVUrmuY5g/DYd9Fu6p63RBIY5VucNGIJ eJcLWZRq/fs8DVejDXihxJP0mtMEEDWVJzKrZ3c5MJdaNXO94WKlLROHCwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFMxbjMrkj5QrnRNo/srxdv/4CoqGMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvekZ1TXl1U1BsQ3VkRTJqLXl2RjJfX2dLaW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVYXBAwQA VYXWAwQAVYXYAwQAVYXqAwQBVYXsAwQAVYX2AwQAVYX5AwQAVYX9MA0GCSqGSIb3 DQEBCwUAA4IBAQA7Bii64WH+nqK+1BqwX22pIhJXMR166Eor9xxue1ANuvPYiCTz 5qdQfSuMi/fFGZ4yNxRCb+WErcuB5tEP7JqSkQADIGc/4jr+XlE6y/IbB7N+COdY /mKAQLOPJHoLbJE9RHU/TGEWngRLltqt8i7QWdpQUwvwx9ciF2D6r2mhD2UURux+ v/FhsHh3bRd7AI+Y6CR10/j2ZjOqBzb1rkGZYgwppE0n2YmM3XMSC2eqopYTi8jM PhtWnMU+wyT2mRpp8kpC974V8ddq3nGfCS20Z33si3fHAChHqxhteo01M7wA1ITM hopzA9noa7vDz4aKrrweNeqdmG20FgCsJZdZ -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:20 2025 by rpki-client