This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-pO3E8eUqLfqJxU0B6yzlpNcKeg.roa File: 1-pO3E8eUqLfqJxU0B6yzlpNcKeg.roa (raw, json) Hash identifier: H20bjGoEOuihmzJMLyFevmPp5zZxGzTakhEjF/1zfvU= Subject key identifier: FA:93:B7:13:C7:94:A8:B7:EA:27:15:34:07:AC:B3:96:93:5C:29:E8 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED914E8299958C6CCC85A3916D0A0A Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-pO3E8eUqLfqJxU0B6yzlpNcKeg.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209142 IP address blocks: 185.72.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:91:4e:82:99:95:8c:6c:cc:85:a3:91:6d:0a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa93b713c794a8b7ea27153407acb396935c29e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:ef:af:3c:0d:ee:31:4b:c6:25:50:fc:15: e5:49:d4:d4:c7:b7:11:1e:28:98:47:a6:c3:f4:9f: 83:89:52:5d:0b:1d:b8:a5:04:39:fb:c3:49:6b:59: 6c:b0:bd:72:17:2f:6e:69:b0:82:33:85:72:52:7c: 48:e4:8e:2f:5e:9c:28:4a:ba:86:f9:4d:b9:9f:cc: e6:89:b3:58:dc:1d:e6:b9:40:df:c4:db:de:78:68: 5a:61:1e:25:a0:20:b0:a7:f4:96:ea:47:1e:8c:8b: 89:a4:d5:a8:e1:7b:bb:6c:c9:16:b4:bc:2a:58:36: 3e:ed:bd:42:1d:3e:1a:4b:78:4d:73:dc:be:08:06: 3d:f7:2e:e5:e2:46:a2:91:df:9d:b5:b9:34:8e:61: 77:b7:0f:9f:a0:20:00:24:ae:51:71:75:f8:72:63: 30:7c:71:d4:7d:69:40:8f:90:80:0b:3b:45:78:8b: 86:0d:b5:43:01:5c:13:16:5d:d4:56:b3:2c:63:fc: 55:a5:19:07:65:52:67:1b:1a:16:68:7a:c8:1d:d8: 37:5d:db:a6:e8:4e:d8:ad:77:ad:2a:59:e6:89:eb: e3:dd:a7:c5:13:08:dc:a4:6d:15:3c:a0:2a:8c:7d: 03:21:a8:0c:aa:9f:a6:15:32:5c:7c:12:4c:c4:fe: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:B7:13:C7:94:A8:B7:EA:27:15:34:07:AC:B3:96:93:5C:29:E8 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-pO3E8eUqLfqJxU0B6yzlpNcKeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.57.0/24 Signature Algorithm: sha256WithRSAEncryption 66:09:68:59:f9:fa:f2:ce:99:2f:82:b8:b8:57:1e:61:b9:bc: 64:5c:10:19:f1:aa:0b:e3:ad:5f:d8:64:98:f8:00:01:bf:97: fa:35:bb:68:ed:b2:c0:3c:c8:82:ad:be:0b:bf:8f:f2:32:3a: 3f:77:61:ed:a0:a3:d2:29:f3:2b:9e:97:46:10:4d:d4:44:66: bc:d1:52:62:58:7d:83:0e:c6:a8:d5:f8:18:de:0c:e3:e9:ed: f1:89:93:88:64:93:25:8b:c4:9e:f0:5f:09:86:c4:78:e3:84: 21:a7:9f:35:6d:38:2e:41:86:d8:6e:14:b7:f4:ec:86:2c:61: 81:78:14:a2:9c:5c:10:9f:7c:72:76:23:5b:4f:4a:16:52:98: 43:42:99:12:00:9a:8d:5e:9f:0f:b3:e9:b7:3d:b8:04:71:06: cf:bb:80:32:1d:53:8c:3b:ab:de:92:cf:96:c4:fc:dc:a0:ad: b8:24:7f:bb:4c:a1:88:26:c0:6b:87:ce:d3:57:a0:f8:d4:98: da:2b:7f:29:6a:40:2b:b5:f1:fa:c4:b1:1d:20:1d:07:d2:f7: d3:9d:7e:12:40:7a:72:fa:f6:ce:b2:08:25:13:45:b6:2d:eb: 91:12:b1:c9:b8:85:66:73:94:2f:48:e8:b6:34:aa:34:f9:be: c2:38:a6:28 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87ZFOgpmVjGzMhaORbQoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTkzYjcxM2M3OTRhOGI3ZWEyNzE1MzQwN2FjYjM5NjkzNWMyOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM3vrzwN7jFLxiVQ/BXlSdTUx7cR HiiYR6bD9J+DiVJdCx24pQQ5+8NJa1lssL1yFy9uabCCM4VyUnxI5I4vXpwoSrqG +U25n8zmibNY3B3muUDfxNveeGhaYR4loCCwp/SW6kcejIuJpNWo4Xu7bMkWtLwq WDY+7b1CHT4aS3hNc9y+CAY99y7l4kaikd+dtbk0jmF3tw+foCAAJK5RcXX4cmMw fHHUfWlAj5CACztFeIuGDbVDAVwTFl3UVrMsY/xVpRkHZVJnGxoWaHrIHdg3Xdum 6E7YrXetKlnmievj3afFEwjcpG0VPKAqjH0DIagMqp+mFTJcfBJMxP6xSQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqTtxPHlKi36icVNAess5aTXCnoMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvMS1wTzNFOGVVcUxmcUp4VTBCNnl6bHBOY0tlZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0 OS8xL19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlIOTAN BgkqhkiG9w0BAQsFAAOCAQEAZgloWfn68s6ZL4K4uFceYbm8ZFwQGfGqC+OtX9hk mPgAAb+X+jW7aO2ywDzIgq2+C7+P8jI6P3dh7aCj0inzK56XRhBN1ERmvNFSYlh9 gw7GqNX4GN4M4+nt8YmTiGSTJYvEnvBfCYbEeOOEIaefNW04LkGG2G4Ut/Tshixh gXgUopxcEJ98cnYjW09KFlKYQ0KZEgCajV6fD7Pptz24BHEGz7uAMh1TjDur3pLP lsT83KCtuCR/u0yhiCbAa4fO01eg+NSY2it/KWpAK7Xx+sSxHSAdB9L3051+EkB6 cvr2zrIIJRNFti3rkRKxybiFZnOUL0jotjSqNPm+wjimKA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:07 2026 by rpki-client