This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8TUPHciyGaksQ6MP8jAHNsAPpYE.roa File: 8TUPHciyGaksQ6MP8jAHNsAPpYE.roa (raw, json) Hash identifier: Fv+3jD6OIzEu9o8Q5RQKAszPqo8Ehe/KlRJRhcwyRYM= Subject key identifier: F1:35:0F:1D:C8:B2:19:A9:2C:43:A3:0F:F2:30:07:36:C0:0F:A5:81 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8B3A877E0D37AD02DFA2A9177F96 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8TUPHciyGaksQ6MP8jAHNsAPpYE.roa Signing time: Fri 02 Jan 2026 04:18:20 +0000 ROA not before: Fri 02 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199048 IP address blocks: 85.187.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8b:3a:87:7e:0d:37:ad:02:df:a2:a9:17:7f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1350f1dc8b219a92c43a30ff2300736c00fa581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:d8:47:2f:d2:e9:08:e6:e6:9b:93:51:f5: 29:28:9b:4f:c4:a9:b9:ea:53:95:66:4c:bf:b2:00: ad:92:50:f6:f2:de:03:3b:98:35:49:4b:aa:12:82: 37:1f:07:91:dd:71:53:db:b1:13:a9:ac:48:af:4d: 35:77:8d:38:3d:6f:2c:16:65:93:04:10:a2:08:ca: f9:15:9d:3d:ff:f3:0b:d0:3d:ab:c0:cf:95:59:ae: 10:17:90:9a:57:af:fe:ab:13:b6:98:44:f1:c6:33: a1:84:3a:ff:db:a4:66:ba:6b:11:8b:e7:09:82:31: a8:b5:38:31:fe:63:53:16:a3:33:8d:a3:8d:90:f3: 93:14:a5:a8:68:01:31:05:25:52:52:6d:4c:ed:84: d1:90:b8:fc:c7:c0:de:c9:15:d3:c1:57:e3:10:f3: 7e:50:ac:86:5f:e1:b9:eb:fd:e8:f8:98:3a:e1:25: 15:76:3c:4b:40:d6:0c:71:06:dd:35:9d:67:4f:54: d9:e0:f8:3f:0c:bf:4c:82:e7:65:e0:4e:80:04:18: 06:e2:6e:d1:3c:59:ee:a7:44:2c:b4:40:a4:d9:95: 6a:78:1a:62:7b:fe:5e:41:85:6a:47:35:f4:f7:bd: 8a:bf:89:fc:71:8d:c3:1f:08:29:82:b6:d5:91:86: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:35:0F:1D:C8:B2:19:A9:2C:43:A3:0F:F2:30:07:36:C0:0F:A5:81 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8TUPHciyGaksQ6MP8jAHNsAPpYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.223.0/24 Signature Algorithm: sha256WithRSAEncryption a0:b5:f2:df:94:cd:7d:43:b1:47:08:b3:fb:06:80:94:f7:5f: 4f:a0:f2:cb:e0:23:7a:cf:2e:1e:21:d5:65:21:61:95:fa:7d: c7:21:d6:df:f0:7f:62:2f:73:ae:a2:51:ea:67:0f:8d:bd:9b: 58:79:31:d4:65:98:aa:63:8e:65:16:47:08:7f:6c:3e:0f:be: b7:38:3f:15:72:43:fe:51:f0:a8:e6:41:60:85:c5:64:59:3e: 8c:1c:a9:00:79:35:9f:da:5c:39:d6:13:ba:ca:ef:38:e4:31: ed:79:43:5a:d2:56:6c:6d:10:da:4d:f0:ee:21:5c:6b:8c:62: 81:84:80:99:78:3f:d7:54:af:b0:ce:59:a0:30:cb:a4:25:13: 07:ed:e3:b3:61:c1:e8:55:91:5c:dd:b5:9e:96:99:5e:77:32: da:5e:09:fd:7d:e6:74:98:39:60:60:72:05:64:e3:5e:ae:02: ee:ce:72:8b:f3:db:1b:a8:92:e1:1f:c6:6e:b1:12:45:da:29: 38:c5:29:61:20:58:1b:64:af:0e:8f:ef:06:7c:39:a0:09:b4: c6:22:80:c9:a7:c5:ec:d6:c7:98:87:d9:a5:e2:00:f6:bb:c6: d8:03:88:00:b0:36:7d:9f:cd:7d:24:f9:96:70:bf:8a:96:7d: 5a:68:8c:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Ys6h34NN60C36KpF3+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTM1MGYxZGM4YjIxOWE5MmM0M2EzMGZmMjMwMDczNmMwMGZhNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra3YRy/S6Qjm5puTUfUpKJtPxKm5 6lOVZky/sgCtklD28t4DO5g1SUuqEoI3HweR3XFT27ETqaxIr001d404PW8sFmWT BBCiCMr5FZ09//ML0D2rwM+VWa4QF5CaV6/+qxO2mETxxjOhhDr/26RmumsRi+cJ gjGotTgx/mNTFqMzjaONkPOTFKWoaAExBSVSUm1M7YTRkLj8x8DeyRXTwVfjEPN+ UKyGX+G56/3o+Jg64SUVdjxLQNYMcQbdNZ1nT1TZ4Pg/DL9Mgudl4E6ABBgG4m7R PFnup0QstECk2ZVqeBpie/5eQYVqRzX0972Kv4n8cY3DHwgpgrbVkYb+pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPE1Dx3IshmpLEOjD/IwBzbAD6WBMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvOFRVUEhjaXlHYWtzUTZNUDhqQUhOc0FQcFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbvfMA0G CSqGSIb3DQEBCwUAA4IBAQCgtfLflM19Q7FHCLP7BoCU919PoPLL4CN6zy4eIdVl IWGV+n3HIdbf8H9iL3OuolHqZw+NvZtYeTHUZZiqY45lFkcIf2w+D763OD8VckP+ UfCo5kFghcVkWT6MHKkAeTWf2lw51hO6yu845DHteUNa0lZsbRDaTfDuIVxrjGKB hICZeD/XVK+wzlmgMMukJRMH7eOzYcHoVZFc3bWelpledzLaXgn9feZ0mDlgYHIF ZONergLuznKL89sbqJLhH8ZusRJF2ik4xSlhIFgbZK8Oj+8GfDmgCbTGIoDJp8Xs 1seYh9ml4gD2u8bYA4gAsDZ9n819JPmWcL+Kln1aaIxR -----END CERTIFICATE-----Generated at Fri Jan 23 21:16:42 2026 by rpki-client