This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CTJNV0sxuquJoUebYx9HEZAvPwc.roa File: CTJNV0sxuquJoUebYx9HEZAvPwc.roa (raw, json) Hash identifier: Qvb3kgpvGMS/SsbNaMMA8uX0p4GHCB6dLfWU+N88ybY= Subject key identifier: 09:32:4D:57:4B:31:BA:AB:89:A1:47:9B:63:1F:47:11:90:2F:3F:07 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED7C6C57FC69A691AE8173A2867E35 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CTJNV0sxuquJoUebYx9HEZAvPwc.roa Signing time: Fri 02 Jan 2026 04:18:17 +0000 ROA not before: Fri 02 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29694 IP address blocks: 46.254.132.0/24 maxlen: 24 46.254.133.0/24 maxlen: 24 46.254.134.0/24 maxlen: 24 85.187.14.0/24 maxlen: 24 85.187.243.0/24 maxlen: 24 85.187.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7c:6c:57:fc:69:a6:91:ae:81:73:a2:86:7e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09324d574b31baab89a1479b631f4711902f3f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:c0:c1:6a:b4:e1:e5:8b:2d:3e:a3:14:cf: 76:83:00:ae:76:3a:75:86:39:3d:09:32:f6:54:6d: 18:5c:e6:bd:e3:00:38:4c:de:e7:01:c2:18:0d:2f: 54:83:17:82:90:6c:0d:36:d7:1c:85:9c:d2:90:35: bb:7c:de:a1:ce:42:cd:e5:22:d7:72:67:8e:77:87: 20:8d:cc:6d:ab:dd:63:2b:a0:4a:23:63:c0:d6:23: 4a:c6:2e:ad:bc:54:a5:7a:e7:4c:13:90:15:71:40: 84:35:0d:96:95:8c:06:d8:6a:47:3c:57:84:a3:42: 74:e2:a8:bc:31:5a:aa:4f:76:52:d1:29:d4:0f:0d: 9f:d0:eb:a6:35:5d:f0:c2:4d:a3:10:fc:6b:d1:2d: 54:1b:e1:1d:65:2c:d7:49:b2:4d:d7:b0:23:a3:51: 74:09:ab:4f:d5:08:fd:3f:85:8c:13:e3:be:69:79: 70:89:d5:1e:0d:4a:36:1e:73:31:0f:8a:e4:c6:41: cd:ac:76:1a:63:31:3c:ac:d6:3c:84:4b:48:ee:87: 4c:c2:bb:c7:06:f0:61:76:e0:17:77:0c:b6:5c:32: 5f:53:57:1e:04:cb:6b:6f:43:10:3f:d6:35:36:3e: 8b:79:cd:c1:6f:5e:b8:d4:88:ac:92:13:ee:86:04: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:4D:57:4B:31:BA:AB:89:A1:47:9B:63:1F:47:11:90:2F:3F:07 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CTJNV0sxuquJoUebYx9HEZAvPwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.132.0-46.254.134.255 85.187.14.0/24 85.187.243.0/24 85.187.249.0/24 Signature Algorithm: sha256WithRSAEncryption aa:b1:c4:4c:55:92:00:2b:d6:ce:8a:fd:49:43:14:1a:b5:40: 55:72:7e:f3:5f:2a:b2:73:ff:fc:08:f7:75:1d:36:68:fe:51: de:db:9d:e5:72:a3:32:57:b9:0a:c3:a9:59:4a:17:93:62:d6: d5:6f:72:7b:3f:55:c4:42:71:da:42:b4:b9:67:eb:26:29:31: 55:2a:d4:52:55:89:77:a9:ca:a8:0f:bd:6c:7f:8c:7d:0a:c1: f5:1c:4c:4a:5b:63:07:7f:df:a6:b1:d8:59:54:41:07:10:28: 76:62:86:eb:90:b7:6f:bf:4e:4f:a3:f9:bc:35:65:2f:be:63: 10:c5:f2:86:1e:e7:6d:0c:be:06:c2:8e:23:9b:93:ec:00:68: 08:7b:62:91:09:b7:b1:f9:3f:78:43:76:7e:7d:33:c7:20:e4: c9:bf:c3:23:29:14:e9:eb:7f:59:64:d9:39:f5:67:ea:50:9c: 5e:a4:f5:fa:3f:d5:30:42:10:86:11:fc:58:d1:09:0b:51:cc: 06:98:63:e6:96:fa:eb:95:c2:2f:af:71:d2:73:8d:55:71:80: d0:01:f0:8c:be:ee:75:84:65:e1:1d:12:a7:12:00:61:e1:fc: fc:20:a9:c6:33:99:c3:04:ae:fc:23:8b:41:f1:d0:eb:cd:45: 3e:b2:a5:f2 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt87XxsV/xpppGugXOihn41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTMyNGQ1NzRiMzFiYWFiODlhMTQ3OWI2MzFmNDcxMTkwMmYzZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsevAwWq04eWLLT6jFM92gwCudjp1 hjk9CTL2VG0YXOa94wA4TN7nAcIYDS9UgxeCkGwNNtcchZzSkDW7fN6hzkLN5SLX cmeOd4cgjcxtq91jK6BKI2PA1iNKxi6tvFSleudME5AVcUCENQ2WlYwG2GpHPFeE o0J04qi8MVqqT3ZS0SnUDw2f0OumNV3wwk2jEPxr0S1UG+EdZSzXSbJN17Ajo1F0 CatP1Qj9P4WME+O+aXlwidUeDUo2HnMxD4rkxkHNrHYaYzE8rNY8hEtI7odMwrvH BvBhduAXdwy2XDJfU1ceBMtrb0MQP9Y1Nj6Lec3Bb1641IiskhPuhgR8SQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAkyTVdLMbqriaFHm2MfRxGQLz8HMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvQ1RKTlYwc3h1cXVKb1VlYll4OUhFWkF2UHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAIu/oQD BAAu/oYDBABVuw4DBABVu/MDBABVu/kwDQYJKoZIhvcNAQELBQADggEBAKqxxExV kgAr1s6K/UlDFBq1QFVyfvNfKrJz//wI93UdNmj+Ud7bneVyozJXuQrDqVlKF5Ni 1tVvcns/VcRCcdpCtLln6yYpMVUq1FJViXepyqgPvWx/jH0KwfUcTEpbYwd/36ax 2FlUQQcQKHZihuuQt2+/Tk+j+bw1ZS++YxDF8oYe520MvgbCjiObk+wAaAh7YpEJ t7H5P3hDdn59M8cg5Mm/wyMpFOnrf1lk2Tn1Z+pQnF6k9fo/1TBCEIYR/FjRCQtR zAaYY+aW+uuVwi+vcdJzjVVxgNAB8Iy+7nWEZeEdEqcSAGHh/PwgqcYzmcMErvwj i0Hx0OvNRT6ypfI= -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:43 2026 by rpki-client