This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EAvdcx6UXynkshpQCxtCVzMapSM.roa File: EAvdcx6UXynkshpQCxtCVzMapSM.roa (raw, json) Hash identifier: HyebAm+JL+H5M0WBgvfSq3Io39nqO3XXidXJ1toYvBU= Subject key identifier: 10:0B:DD:73:1E:94:5F:29:E4:B2:1A:50:0B:1B:42:57:33:1A:A5:23 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED93A6FD7149558208F44DCF45B3A0 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EAvdcx6UXynkshpQCxtCVzMapSM.roa Signing time: Fri 02 Jan 2026 04:18:23 +0000 ROA not before: Fri 02 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210746 IP address blocks: 85.187.45.0/24 maxlen: 24 151.237.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:93:a6:fd:71:49:55:82:08:f4:4d:cf:45:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=100bdd731e945f29e4b21a500b1b4257331aa523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:e2:c7:c6:33:ab:e3:57:bf:a5:03:c5:77: be:e8:2e:f8:04:4b:b8:89:65:06:81:e9:7b:7c:e6: 5c:72:ce:08:8c:59:23:e5:62:95:ab:80:4c:3c:4a: 4b:0a:db:0c:53:95:56:41:0f:e3:88:ae:fa:01:74: e3:d5:de:26:18:ab:e1:39:5b:ad:a9:cd:4c:8f:70: 5f:34:0f:88:ec:6f:06:58:87:6b:86:78:a2:e9:81: 37:c8:91:b5:66:48:f7:b7:6e:65:68:a4:4b:8f:c3: 1c:bf:f9:91:3d:96:39:63:8d:c4:9b:8d:4a:5f:6d: f7:59:22:f6:b2:6d:82:6c:ac:58:c9:e2:fc:d1:43: 3a:75:a5:05:c1:c8:cf:0b:51:4e:32:2e:8b:84:9c: 29:38:03:11:c3:d0:ab:61:1e:6b:10:69:fc:ad:ba: 5d:e4:79:82:72:64:19:d7:5e:3c:22:5f:ed:d5:ae: f5:2a:d1:3f:b4:24:34:8e:2f:f0:60:a8:60:e0:b7: a7:7a:8d:22:b2:73:c9:0f:04:4f:a0:3f:36:49:8e: bb:a6:bf:af:c8:d0:0e:24:17:b2:07:a7:ca:d6:6f: 35:56:f5:e0:d1:67:cb:39:ac:e7:63:75:bc:4b:fd: dc:e6:54:9e:04:d8:47:3f:01:e5:77:48:b6:50:39: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:DD:73:1E:94:5F:29:E4:B2:1A:50:0B:1B:42:57:33:1A:A5:23 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EAvdcx6UXynkshpQCxtCVzMapSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.45.0/24 151.237.23.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ef:51:2c:bc:a8:87:b6:3d:32:3c:d0:13:4c:5d:24:c0:0f: 53:09:8f:a7:74:6e:fb:56:46:dd:05:d6:5a:07:a3:af:ab:74: 6a:b8:65:92:08:bf:db:6c:0d:fe:c9:7a:e9:7b:41:f1:45:0b: 2e:54:25:20:27:fc:b3:41:98:cc:8b:c3:4e:38:5a:67:ba:15: 7a:8c:ae:45:44:d6:ba:9e:80:46:3b:7c:6e:27:2b:6d:0c:8c: df:63:90:95:d5:d5:a6:9b:5e:0e:ed:f7:41:f3:60:c2:5f:9a: e5:4b:a2:ac:5e:a6:1e:6b:e5:95:25:8e:64:50:e3:33:1a:0c: 4f:d1:4b:aa:24:c0:70:e6:70:30:f0:2d:1e:16:fc:3a:7f:a3: d4:f3:d7:12:4e:38:57:e5:86:39:20:0c:0b:6e:c8:9f:85:fd: e7:8f:c0:5f:69:47:a6:1a:f5:a4:c0:65:7b:34:8c:d6:8d:16: db:6c:6d:22:12:cb:84:d0:fa:65:b5:fe:46:11:f2:d7:d3:9f: 26:a0:b4:78:11:25:a9:7e:02:81:e8:95:e2:c4:5c:ec:a5:da: 4d:68:18:71:88:f3:b5:e3:02:0d:6a:86:d6:b9:c1:70:9a:a9: db:7a:97:5e:87:ed:e9:5f:c7:bc:47:70:49:ee:15:6a:7c:ba: 00:03:be:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ZOm/XFJVYII9E3PRbOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDBiZGQ3MzFlOTQ1ZjI5ZTRiMjFhNTAwYjFiNDI1NzMzMWFhNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yzix8Yzq+NXv6UDxXe+6C74BEu4 iWUGgel7fOZccs4IjFkj5WKVq4BMPEpLCtsMU5VWQQ/jiK76AXTj1d4mGKvhOVut qc1Mj3BfNA+I7G8GWIdrhnii6YE3yJG1Zkj3t25laKRLj8Mcv/mRPZY5Y43Em41K X233WSL2sm2CbKxYyeL80UM6daUFwcjPC1FOMi6LhJwpOAMRw9CrYR5rEGn8rbpd 5HmCcmQZ1148Il/t1a71KtE/tCQ0ji/wYKhg4Leneo0isnPJDwRPoD82SY67pr+v yNAOJBeyB6fK1m81VvXg0WfLOaznY3W8S/3c5lSeBNhHPwHld0i2UDn1WQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBAL3XMelF8p5LIaUAsbQlczGqUjMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvRUF2ZGN4NlVYeW5rc2hwUUN4dENWek1hcFNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVbstAwQA l+0XMA0GCSqGSIb3DQEBCwUAA4IBAQC171EsvKiHtj0yPNATTF0kwA9TCY+ndG77 VkbdBdZaB6Ovq3RquGWSCL/bbA3+yXrpe0HxRQsuVCUgJ/yzQZjMi8NOOFpnuhV6 jK5FRNa6noBGO3xuJyttDIzfY5CV1dWmm14O7fdB82DCX5rlS6KsXqYea+WVJY5k UOMzGgxP0UuqJMBw5nAw8C0eFvw6f6PU89cSTjhX5YY5IAwLbsifhf3nj8BfaUem GvWkwGV7NIzWjRbbbG0iEsuE0Ppltf5GEfLX058moLR4ESWpfgKB6JXixFzspdpN aBhxiPO14wINaobWucFwmqnbepdeh+3pX8e8R3BJ7hVqfLoAA760 -----END CERTIFICATE-----Generated at Mon Jan 26 21:47:57 2026 by rpki-client