This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/D15A6Y0sb7k1H2uqg-GtvZLut0k.roa File: D15A6Y0sb7k1H2uqg-GtvZLut0k.roa (raw, json) Hash identifier: V9FBzc/7Hn//D+9pyc2UMFFMygajW6Wjjn5Gwv7VHX0= Subject key identifier: 0F:5E:40:E9:8D:2C:6F:B9:35:1F:6B:AA:83:E1:AD:BD:92:EE:B7:49 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8CABB64CA2423CE634F25A823908 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/D15A6Y0sb7k1H2uqg-GtvZLut0k.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200475 IP address blocks: 185.255.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8c:ab:b6:4c:a2:42:3c:e6:34:f2:5a:82:39:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f5e40e98d2c6fb9351f6baa83e1adbd92eeb749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:fe:57:ec:81:37:db:a6:6b:0f:c2:22:95: d5:3a:ce:1c:6b:2f:23:54:c3:c2:40:7d:9e:64:9b: 6b:b9:04:c4:48:55:1c:16:70:c8:1a:73:82:8f:e7: 20:d2:d3:82:6d:95:64:f2:e5:37:70:a3:1f:cf:9b: 2b:6c:02:42:1c:91:74:7a:94:3d:d5:06:54:7f:90: 8d:6d:ac:29:9e:34:26:f5:eb:da:b9:1b:ba:6d:9d: 1d:7b:6e:19:98:55:89:f7:5c:b6:df:f8:03:eb:8d: 07:8a:45:77:10:1b:cd:24:5e:a9:45:18:d7:ea:9d: ea:64:ff:ba:3f:18:89:d1:2d:91:f5:5c:45:5c:89: 66:b6:0e:b0:32:01:d5:81:d0:10:73:c0:5b:ee:b3: 61:47:92:ef:b7:5e:06:14:9f:4f:f5:3a:06:1e:60: 73:c6:47:3b:a5:54:6b:56:90:f5:0c:f6:dd:9b:80: 50:77:fc:9d:a9:bf:30:9d:75:f7:fb:cf:04:54:fc: 3c:99:28:78:7f:03:44:a0:68:30:e3:5e:b8:95:de: 3d:28:1c:04:32:f3:6b:47:41:41:b6:02:ce:b2:62: 07:fe:bd:fe:3f:e1:89:56:4a:e9:39:22:00:f4:57: cc:4b:8f:93:e3:81:5f:39:c7:b6:84:c2:89:37:cd: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:40:E9:8D:2C:6F:B9:35:1F:6B:AA:83:E1:AD:BD:92:EE:B7:49 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/D15A6Y0sb7k1H2uqg-GtvZLut0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.212.0/22 Signature Algorithm: sha256WithRSAEncryption d2:6d:40:ec:e9:d1:33:e8:e1:c6:cb:41:6f:47:f2:06:b1:de: e1:59:00:53:e2:c1:23:e6:a5:e8:94:5d:03:ed:b5:68:83:22: 69:7f:98:42:92:3f:07:7a:a3:86:72:b6:4a:4b:f6:74:bf:20: 5b:6d:e9:a9:d0:18:67:fb:73:62:f6:73:a6:c9:bc:5c:f4:f2: cd:55:1f:95:0c:10:88:bc:fa:81:41:c9:2e:ce:64:45:31:6d: 5a:48:e7:aa:c2:03:64:b6:8b:66:b9:f9:50:d8:94:dc:6a:75: ce:4c:29:c5:69:a1:31:3a:69:b9:ba:e7:fe:54:6d:59:e0:25: 3a:c7:88:ff:96:e1:cf:2b:be:ef:bf:85:d5:27:20:f2:cb:22: 24:5b:7a:12:d9:66:8c:72:ea:e3:73:20:25:1e:28:6d:3f:da: e4:ad:ce:94:49:04:83:12:91:42:bc:b2:8c:ba:18:c8:73:2f: 41:23:99:3c:ec:03:63:ef:d1:68:74:94:4d:74:66:75:88:cb: be:e8:f7:60:2d:1b:a1:9c:2e:fb:fe:5a:80:68:a7:c6:e0:14: 1b:51:d4:b3:e4:e1:17:ee:c9:ba:00:59:e3:5c:21:19:b7:8e: 40:da:cf:d5:8c:cb:3a:db:d1:56:3a:07:8e:4c:01:82:55:83: e1:78:2d:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YyrtkyiQjzmNPJagjkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjVlNDBlOThkMmM2ZmI5MzUxZjZiYWE4M2UxYWRiZDkyZWViNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF3+V+yBN9umaw/CIpXVOs4cay8j VMPCQH2eZJtruQTESFUcFnDIGnOCj+cg0tOCbZVk8uU3cKMfz5srbAJCHJF0epQ9 1QZUf5CNbawpnjQm9evauRu6bZ0de24ZmFWJ91y23/gD640HikV3EBvNJF6pRRjX 6p3qZP+6PxiJ0S2R9VxFXIlmtg6wMgHVgdAQc8Bb7rNhR5Lvt14GFJ9P9ToGHmBz xkc7pVRrVpD1DPbdm4BQd/ydqb8wnXX3+88EVPw8mSh4fwNEoGgw4164ld49KBwE MvNrR0FBtgLOsmIH/r3+P+GJVkrpOSIA9FfMS4+T44FfOce2hMKJN80PYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA9eQOmNLG+5NR9rqoPhrb2S7rdJMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvRDE1QTZZMHNiN2sxSDJ1cWctR3R2Wkx1dDBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf/UMA0G CSqGSIb3DQEBCwUAA4IBAQDSbUDs6dEz6OHGy0FvR/IGsd7hWQBT4sEj5qXolF0D 7bVogyJpf5hCkj8HeqOGcrZKS/Z0vyBbbemp0Bhn+3Ni9nOmybxc9PLNVR+VDBCI vPqBQckuzmRFMW1aSOeqwgNktotmuflQ2JTcanXOTCnFaaExOmm5uuf+VG1Z4CU6 x4j/luHPK77vv4XVJyDyyyIkW3oS2WaMcurjcyAlHihtP9rkrc6USQSDEpFCvLKM uhjIcy9BI5k87ANj79FodJRNdGZ1iMu+6PdgLRuhnC77/lqAaKfG4BQbUdSz5OEX 7sm6AFnjXCEZt45A2s/VjMs629FWOgeOTAGCVYPheC08 -----END CERTIFICATE-----Generated at Mon Jan 26 15:17:30 2026 by rpki-client