This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-XfHBFax_1tomyWLg_6vgflWHJQ.roa File: 1-XfHBFax_1tomyWLg_6vgflWHJQ.roa (raw, json) Hash identifier: 3skJCnuSusBD4Kz3JoMjZa3DYVYqgQ4pYXK7lif6dtQ= Subject key identifier: F9:77:C7:04:56:B1:FF:5B:68:9B:25:8B:83:FE:AF:81:F9:56:1C:94 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8F54E52FCF6AA20AC980DD998CA5 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-XfHBFax_1tomyWLg_6vgflWHJQ.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205129 IP address blocks: 85.187.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8f:54:e5:2f:cf:6a:a2:0a:c9:80:dd:99:8c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f977c70456b1ff5b689b258b83feaf81f9561c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:df:d0:ea:09:42:37:f5:1c:10:ca:18:a3: 6a:94:68:b6:49:5f:0c:9a:f1:5f:70:06:11:a5:ee: f4:7d:62:79:dd:42:ed:5a:c1:df:6b:ec:79:4f:54: 5a:e9:56:ef:0e:94:d5:b9:f6:cb:fd:95:3d:84:f1: 7a:5f:40:ba:3b:8a:a4:d4:d2:6e:cf:e3:d3:0e:55: 90:6d:67:cd:50:8e:8f:fa:5e:32:10:b3:32:24:68: 12:38:5b:a7:8e:07:ca:45:f3:0b:c4:7f:9d:4e:0a: 3e:56:7e:b7:ac:5f:3d:12:4d:64:32:94:a2:8d:4c: b5:94:49:45:90:33:44:59:53:28:88:7e:06:64:8a: 34:b4:0b:b6:60:cf:11:26:8f:43:60:ad:a9:a8:ee: 95:d3:3f:ff:53:2f:11:44:a6:fc:26:76:b3:1c:aa: ed:9d:f3:0f:94:18:50:9e:42:14:72:06:c0:f5:eb: 34:e6:1c:db:1a:0d:99:f9:ca:96:51:50:52:22:74: 3f:1c:0b:f3:f7:e9:a0:5a:f9:d2:72:3f:55:bc:d8: fa:5b:b1:9c:84:ed:12:e4:39:b6:47:a8:26:dd:82: f3:49:8f:28:ec:4c:ff:6d:3d:74:3e:48:e9:79:e8: a8:1e:c4:c1:1d:54:15:53:5a:fb:a4:d4:ca:f1:50: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:C7:04:56:B1:FF:5B:68:9B:25:8B:83:FE:AF:81:F9:56:1C:94 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-XfHBFax_1tomyWLg_6vgflWHJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.48.0/23 Signature Algorithm: sha256WithRSAEncryption a6:6d:24:7a:4d:94:d6:36:f7:85:34:64:db:ad:1c:bd:91:b3: a4:8f:05:b6:97:be:e8:07:c5:7b:49:f1:f5:93:a0:e8:32:00: de:fc:d3:d7:07:a5:8a:ee:39:17:3a:2d:bf:ae:86:af:a4:15: 72:02:cb:5e:3a:d5:34:bb:84:2a:91:92:86:c2:07:18:c6:5a: f6:9a:ad:ff:6d:15:fe:8c:67:94:49:88:36:e8:6a:dc:14:6d: 79:d1:dc:db:00:ce:ff:a7:b1:12:24:96:b4:00:4f:93:7e:f5: b2:69:09:32:a6:ba:fd:4a:be:36:33:11:cd:77:27:7c:b5:54: 67:be:bc:1f:ab:19:79:24:f8:b4:ee:a7:7a:0f:ea:97:9f:5e: 7c:87:8b:7e:38:89:3c:38:91:d3:1d:c2:ac:11:99:39:f3:6f: 18:33:b1:92:c0:64:ce:f3:98:1d:4a:9b:da:36:94:29:0a:fa: 7f:24:32:6a:d6:30:ba:33:b7:19:e5:b7:9c:e7:b7:a6:59:20: 9f:b6:fb:08:5b:b3:90:79:8e:fa:37:97:10:af:54:3a:22:b2: 09:aa:d9:4a:40:26:0f:fa:c7:86:38:d1:2a:c1:f0:30:05:48: e6:1e:be:34:61:73:85:53:c4:e4:e6:07:9b:06:bd:7e:93:3d: 3a:af:9d:23 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87Y9U5S/PaqIKyYDdmYylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTc3YzcwNDU2YjFmZjViNjg5YjI1OGI4M2ZlYWY4MWY5NTYxYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs/f0OoJQjf1HBDKGKNqlGi2SV8M mvFfcAYRpe70fWJ53ULtWsHfa+x5T1Ra6VbvDpTVufbL/ZU9hPF6X0C6O4qk1NJu z+PTDlWQbWfNUI6P+l4yELMyJGgSOFunjgfKRfMLxH+dTgo+Vn63rF89Ek1kMpSi jUy1lElFkDNEWVMoiH4GZIo0tAu2YM8RJo9DYK2pqO6V0z//Uy8RRKb8JnazHKrt nfMPlBhQnkIUcgbA9es05hzbGg2Z+cqWUVBSInQ/HAvz9+mgWvnScj9VvNj6W7Gc hO0S5Dm2R6gm3YLzSY8o7Ez/bT10PkjpeeioHsTBHVQVU1r7pNTK8VCtswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPl3xwRWsf9baJsli4P+r4H5VhyUMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvMS1YZkhCRmF4XzF0b215V0xnXzZ2Z2ZsV0hKUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0 OS8xL19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVW7MDAN BgkqhkiG9w0BAQsFAAOCAQEApm0kek2U1jb3hTRk260cvZGzpI8Ftpe+6AfFe0nx 9ZOg6DIA3vzT1weliu45Fzotv66Gr6QVcgLLXjrVNLuEKpGShsIHGMZa9pqt/20V /oxnlEmINuhq3BRtedHc2wDO/6exEiSWtABPk371smkJMqa6/Uq+NjMRzXcnfLVU Z768H6sZeST4tO6neg/ql59efIeLfjiJPDiR0x3CrBGZOfNvGDOxksBkzvOYHUqb 2jaUKQr6fyQyatYwujO3GeW3nOe3plkgn7b7CFuzkHmO+jeXEK9UOiKyCarZSkAm D/rHhjjRKsHwMAVI5h6+NGFzhVPE5OYHmwa9fpM9Oq+dIw== -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:40 2026 by rpki-client