This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/F-eRL4YOdl4zK8v8QgtSQ6KtIsI.roa
File: F-eRL4YOdl4zK8v8QgtSQ6KtIsI.roa (raw, json)
Hash identifier: iVpKrd6Ug6fU+KHqi7wZWBiHrwYPUj6qELLKcXb+3ok=
Subject key identifier: 17:E7:91:2F:86:0E:76:5E:33:2B:CB:FC:42:0B:52:43:A2:AD:22:C2
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 019B7CED8A52FCA6EC2222BAE71EEA033FE8
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/F-eRL4YOdl4zK8v8QgtSQ6KtIsI.roa
Signing time: Fri 02 Jan 2026 04:18:20 +0000
ROA not before: Fri 02 Jan 2026 04:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64464
IP address blocks: 185.72.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:8a:52:fc:a6:ec:22:22:ba:e7:1e:ea:03:3f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 04:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17e7912f860e765e332bcbfc420b5243a2ad22c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:85:b8:11:d8:f1:52:1c:92:74:b6:7a:db:
cc:07:2d:5e:dc:f9:7d:93:74:74:ea:f9:0f:1c:70:
3b:e4:0f:2b:97:30:4a:34:eb:28:75:ba:bd:30:4a:
13:40:1a:6b:83:7a:60:d0:78:b5:c6:d9:dc:a1:e9:
04:c9:55:45:11:a9:90:2f:de:23:73:cc:98:31:55:
a2:25:81:a8:5a:c0:6d:85:59:e6:3a:f2:67:57:97:
ab:40:a4:14:03:0b:e6:de:26:5b:90:17:ac:bd:e4:
22:5b:52:63:fc:8e:4a:ce:68:7d:45:ad:fe:66:05:
e6:1b:f5:0a:ad:16:9e:da:b1:8d:95:78:9c:06:db:
26:c6:cd:4d:c3:56:56:78:7c:d4:4c:b9:66:40:77:
12:c0:1e:26:47:51:b9:7e:9c:34:a7:d1:18:8b:56:
64:b0:ca:b6:8c:f4:f1:fd:54:60:82:47:39:0d:50:
a3:6e:e1:c1:74:f0:ba:d9:9d:28:7d:bf:e7:8d:de:
d6:63:5f:ca:08:4d:d7:e4:45:cc:4a:b8:72:54:72:
db:7a:d8:aa:1a:e5:33:6a:00:23:0a:c7:24:1b:ec:
4b:26:49:90:d5:2d:d6:e9:78:2c:c4:3f:c4:ba:27:
41:d4:d2:9c:3f:97:90:86:a2:51:98:7f:44:00:13:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E7:91:2F:86:0E:76:5E:33:2B:CB:FC:42:0B:52:43:A2:AD:22:C2
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/F-eRL4YOdl4zK8v8QgtSQ6KtIsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.59.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:d1:6c:62:af:ed:70:42:c0:43:1f:a9:d9:47:40:89:e6:22:
ee:6a:39:18:73:0c:b2:2b:35:8f:6f:f0:46:d9:62:0b:60:1c:
87:bd:09:81:77:7a:10:b1:3c:d9:00:8e:f1:de:f1:ae:04:f9:
67:bf:ca:57:bd:2f:43:98:c0:de:20:48:9a:43:f1:ac:ff:21:
e5:0a:e1:f7:ca:99:38:83:9f:a7:c2:42:8b:71:fc:e0:b7:5a:
ee:59:80:0f:14:51:9b:43:8c:60:ff:04:45:b0:63:ec:79:b7:
90:7f:f3:ab:f6:3d:8d:b3:89:4d:19:9c:f8:6b:0b:a4:a0:89:
b4:0f:e5:5c:83:d8:4b:be:9e:2a:49:16:80:ce:46:97:63:0b:
b5:d1:f1:4b:a1:6f:01:bb:9e:dc:26:1b:36:43:4a:91:4f:d6:
2c:9c:00:cb:cb:0f:eb:76:69:57:84:e7:a9:6d:61:03:3e:dc:
b4:a3:a0:f0:88:e8:24:04:12:98:09:9e:c2:b9:46:85:9e:47:
2c:c8:11:16:9f:a1:cb:98:62:13:cb:6b:cd:22:30:19:12:90:
b5:1e:66:15:b6:e3:48:b1:c0:bf:87:ea:77:38:fa:a2:a9:39:
a4:68:60:c7:2c:33:c3:6b:8a:bb:eb:3e:6b:36:0b:aa:32:67:
67:c6:bd:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87YpS/KbsIiK65x7qAz/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2U3OTEyZjg2MGU3NjVlMzMyYmNiZmM0MjBiNTI0M2EyYWQyMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVSFuBHY8VIcknS2etvMBy1e3Pl9
k3R06vkPHHA75A8rlzBKNOsodbq9MEoTQBprg3pg0Hi1xtncoekEyVVFEamQL94j
c8yYMVWiJYGoWsBthVnmOvJnV5erQKQUAwvm3iZbkBesveQiW1Jj/I5Kzmh9Ra3+
ZgXmG/UKrRae2rGNlXicBtsmxs1Nw1ZWeHzUTLlmQHcSwB4mR1G5fpw0p9EYi1Zk
sMq2jPTx/VRggkc5DVCjbuHBdPC62Z0ofb/njd7WY1/KCE3X5EXMSrhyVHLbetiq
GuUzagAjCsckG+xLJkmQ1S3W6XgsxD/EuidB1NKcP5eQhqJRmH9EABMpmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBfnkS+GDnZeMyvL/EILUkOirSLCMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvRi1lUkw0WU9kbDR6Szh2OFFndFNRNkt0SXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUg7MA0G
CSqGSIb3DQEBCwUAA4IBAQDL0Wxir+1wQsBDH6nZR0CJ5iLuajkYcwyyKzWPb/BG
2WILYByHvQmBd3oQsTzZAI7x3vGuBPlnv8pXvS9DmMDeIEiaQ/Gs/yHlCuH3ypk4
g5+nwkKLcfzgt1ruWYAPFFGbQ4xg/wRFsGPsebeQf/Or9j2Ns4lNGZz4awukoIm0
D+Vcg9hLvp4qSRaAzkaXYwu10fFLoW8Bu57cJhs2Q0qRT9YsnADLyw/rdmlXhOep
bWEDPty0o6DwiOgkBBKYCZ7CuUaFnkcsyBEWn6HLmGITy2vNIjAZEpC1HmYVtuNI
scC/h+p3OPqiqTmkaGDHLDPDa4q76z5rNguqMmdnxr27
-----END CERTIFICATE-----
Generated at Mon Jan 26 20:24:49 2026 by rpki-client