This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0zrEo8QP0bXgcF12sU5vrygwlQE.roa File: 0zrEo8QP0bXgcF12sU5vrygwlQE.roa (raw, json) Hash identifier: 6YYAcAy/aDjwQQzA+nKyrCYZGuukSS8tQOHMaVi+CoA= Subject key identifier: D3:3A:C4:A3:C4:0F:D1:B5:E0:70:5D:76:B1:4E:6F:AF:28:30:95:01 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED7C23CA3E85B9C5D6F560AD4A20A0 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0zrEo8QP0bXgcF12sU5vrygwlQE.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20750 IP address blocks: 85.187.236.0/22 maxlen: 22 85.187.240.0/23 maxlen: 23 151.237.72.0/21 maxlen: 24 151.237.72.0/22 maxlen: 22 151.237.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7c:23:ca:3e:85:b9:c5:d6:f5:60:ad:4a:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d33ac4a3c40fd1b5e0705d76b14e6faf28309501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:d6:ee:5b:c9:7e:67:fc:b8:38:c9:a1:12: 47:74:b3:3e:8c:e5:66:09:ff:f4:dd:30:5b:ad:40: 9a:8b:a2:35:72:7b:95:c7:47:e2:6c:a3:81:a9:b0: 10:84:35:73:ac:42:4e:be:ff:4b:8e:ea:79:bb:7a: 5e:5a:a2:8a:92:f0:a7:2f:87:ba:c3:c5:a0:df:39: f7:93:05:74:3b:d6:45:7f:e1:6b:6e:15:2d:78:7e: 44:92:e7:b3:71:6e:71:a7:01:5e:a6:93:67:5e:1f: ab:ef:c4:93:d8:6a:03:bf:13:28:c8:b0:be:eb:51: f6:65:b6:e9:5a:7c:45:5e:6f:1f:b4:3b:c7:7c:f9: 91:53:bd:5d:0c:96:8e:cd:92:09:9a:a0:6c:d1:4e: 0d:96:3b:77:03:9f:ae:b6:03:3b:c3:63:70:86:7a: a1:2b:9e:08:73:5a:c3:d5:f4:6d:f0:66:24:ce:12: ca:be:b8:9f:ed:3b:bd:53:ea:3d:41:7d:11:cc:21: e2:02:18:08:fd:85:d7:fb:10:1b:cf:74:5f:32:66: 70:a8:b6:2b:38:5d:9c:98:f3:22:c1:32:d1:57:74: 74:ec:39:8c:bf:d7:7a:e6:fa:9b:92:30:4e:9f:35: a5:d7:fc:9d:6b:77:7c:da:32:18:83:9e:2d:28:b4: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3A:C4:A3:C4:0F:D1:B5:E0:70:5D:76:B1:4E:6F:AF:28:30:95:01 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0zrEo8QP0bXgcF12sU5vrygwlQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.236.0-85.187.241.255 151.237.72.0/21 Signature Algorithm: sha256WithRSAEncryption e0:c5:ec:02:67:7c:6a:47:fe:02:79:d7:85:59:59:3f:61:85: 44:ec:e3:4a:33:b4:ee:c8:99:d5:85:ef:de:99:ab:6d:ba:f8: 88:42:05:f7:8f:a0:f6:76:e2:d8:64:57:b6:1d:fe:f7:55:57: 35:a4:0e:89:03:b2:05:1a:32:2d:86:e5:7c:f7:53:51:0c:38: 5a:ce:e1:5f:49:08:8c:2a:38:2b:27:0c:bc:aa:ab:35:d6:76: b5:97:72:f4:72:eb:bd:8c:2c:5e:e6:7a:28:f0:8a:e5:d3:3e: 9c:18:34:bd:9a:bf:45:5e:6d:69:f5:c8:37:e7:a3:8a:34:8f: b7:37:6f:dc:e0:10:ef:1f:87:71:11:1f:a1:56:56:5d:11:de: ea:ff:75:f9:56:80:b1:01:41:10:53:c6:86:34:7a:ff:ac:2a: 49:2c:59:d8:4a:f3:74:d8:f4:8a:ab:36:c5:fd:30:97:6a:55: 3d:6a:6f:00:d0:68:e7:b9:20:b3:31:2d:18:ce:62:be:13:51: 76:b3:e0:46:a5:b0:7a:6d:86:74:47:3b:93:b3:aa:14:ec:5d: e1:84:8a:94:ab:66:d3:a3:66:60:23:61:2c:80:3b:42:55:08: 45:91:0e:d3:74:45:bb:76:b3:fb:37:b6:cb:04:50:06:bb:98: 4b:85:2e:81 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87Xwjyj6FucXW9WCtSiCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzNhYzRhM2M0MGZkMWI1ZTA3MDVkNzZiMTRlNmZhZjI4MzA5NTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpvW7lvJfmf8uDjJoRJHdLM+jOVm Cf/03TBbrUCai6I1cnuVx0fibKOBqbAQhDVzrEJOvv9Ljup5u3peWqKKkvCnL4e6 w8Wg3zn3kwV0O9ZFf+FrbhUteH5EkuezcW5xpwFeppNnXh+r78ST2GoDvxMoyLC+ 61H2ZbbpWnxFXm8ftDvHfPmRU71dDJaOzZIJmqBs0U4Nljt3A5+utgM7w2Nwhnqh K54Ic1rD1fRt8GYkzhLKvrif7Tu9U+o9QX0RzCHiAhgI/YXX+xAbz3RfMmZwqLYr OF2cmPMiwTLRV3R07DmMv9d65vqbkjBOnzWl1/yda3d82jIYg54tKLROUwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNM6xKPED9G14HBddrFOb68oMJUBMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvMHpyRW84UVAwYlhnY0YxMnNVNXZyeWd3bFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJVu+wD BAFVu/ADBAOX7UgwDQYJKoZIhvcNAQELBQADggEBAODF7AJnfGpH/gJ514VZWT9h hUTs40oztO7ImdWF796Zq226+IhCBfePoPZ24thkV7Yd/vdVVzWkDokDsgUaMi2G 5Xz3U1EMOFrO4V9JCIwqOCsnDLyqqzXWdrWXcvRy672MLF7meijwiuXTPpwYNL2a v0VebWn1yDfno4o0j7c3b9zgEO8fh3ERH6FWVl0R3ur/dflWgLEBQRBTxoY0ev+s KkksWdhK83TY9IqrNsX9MJdqVT1qbwDQaOe5ILMxLRjOYr4TUXaz4EalsHpthnRH O5OzqhTsXeGEipSrZtOjZmAjYSyAO0JVCEWRDtN0Rbt2s/s3tssEUAa7mEuFLoE= -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:35 2026 by rpki-client