This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Md5tcSU0teTRpNubA7Z_jfoALig.roa File: Md5tcSU0teTRpNubA7Z_jfoALig.roa (raw, json) Hash identifier: fWMX2yQUvN7MEeTOLeKGuRXarovSwuRuaIdjkLDezKM= Subject key identifier: 31:DE:6D:71:25:34:B5:E4:D1:A4:DB:9B:03:B6:7F:8D:FA:00:2E:28 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8359E7F3E8192CD6BA48437DD431 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Md5tcSU0teTRpNubA7Z_jfoALig.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49387 IP address blocks: 85.187.200.0/24 maxlen: 24 85.187.201.0/24 maxlen: 24 85.187.202.0/24 maxlen: 24 85.187.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:83:59:e7:f3:e8:19:2c:d6:ba:48:43:7d:d4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31de6d712534b5e4d1a4db9b03b67f8dfa002e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:49:89:7d:63:c4:b6:09:d0:ee:de:f2:7f: b1:f3:d4:4b:6e:11:d3:28:1d:2f:0b:1f:ec:c9:0a: 15:4e:6b:17:a2:44:0b:f2:ba:f4:92:6e:93:fa:94: 41:f5:8f:81:ca:ab:13:81:89:1b:0e:b0:4e:d3:cf: f5:47:58:1a:ed:06:ec:35:89:47:78:2c:66:7e:98: b3:86:ae:4d:4f:14:01:e2:bb:64:a5:d8:3b:b4:18: 12:35:6c:f1:bc:cd:03:6f:83:3d:e9:5d:43:48:f2: f6:75:0a:d9:7d:86:c4:8c:dd:81:22:0c:ec:21:c8: c0:b3:02:c7:02:40:07:7f:30:37:e3:4a:f5:37:8e: a6:f1:f6:62:82:e7:fa:8e:20:55:bd:a1:3c:52:c5: 7b:e8:69:09:b2:9a:d2:f1:1f:ab:46:cf:3b:67:0d: 95:95:3a:85:37:6a:f2:1d:5c:f3:61:37:4d:50:b5: f9:2b:6f:ea:90:36:14:66:98:a9:d8:f3:3d:6c:7c: 40:26:d1:16:bf:4e:37:cb:6f:df:9b:cb:6a:63:a3: 56:45:42:e5:36:0e:0d:6b:20:72:f6:0d:d2:3e:58: 9d:fe:be:92:54:ed:52:c5:57:ed:3c:7a:de:ff:c2: d1:28:72:c7:a0:58:08:f2:f1:9f:7e:dc:fb:90:bb: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:6D:71:25:34:B5:E4:D1:A4:DB:9B:03:B6:7F:8D:FA:00:2E:28 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Md5tcSU0teTRpNubA7Z_jfoALig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.200.0/22 Signature Algorithm: sha256WithRSAEncryption bf:7e:a9:b2:d8:a1:0c:9b:6c:54:19:fa:28:ac:cb:14:93:0c: 3b:20:d1:58:1b:49:60:a5:8e:84:69:8a:ea:cb:4f:08:a5:a1: 68:4b:2a:5f:a0:e8:27:5e:1f:19:8e:c6:0f:7d:3d:40:a4:85: 1d:73:85:75:9b:17:14:08:96:2c:54:50:d4:03:1b:1e:fd:e6: 9c:8d:a8:94:7a:5e:35:c7:82:7b:94:08:9a:8d:b4:51:d9:f6: 4a:21:2b:90:41:82:76:01:b9:ce:29:a4:36:b3:ea:3b:a7:c8: 19:41:22:2d:ac:10:91:2f:0d:74:be:d8:ae:5c:ec:c2:eb:2e: ae:a4:5d:bb:f0:e2:c7:8c:b5:1b:d9:9a:15:2c:1b:65:2d:d3: d5:4f:55:9f:a1:31:0a:e1:2d:70:34:d4:e4:f3:e7:7b:be:32: 50:32:11:22:28:f2:5e:e0:32:93:3e:58:f1:13:d0:43:0a:5c: 48:73:84:14:62:a8:c0:9b:37:08:9d:50:b5:38:c1:51:86:91: af:97:35:4b:66:91:cb:74:20:e7:0e:6b:a9:fd:2a:87:ad:57: 6f:f8:7e:b2:bb:fe:d2:d6:63:06:41:0a:d0:63:31:36:ed:10: cf:85:75:17:e6:98:57:e3:e6:1d:2f:fa:7b:4c:52:ce:d5:16: 1a:4a:a1:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YNZ5/PoGSzWukhDfdQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRlNmQ3MTI1MzRiNWU0ZDFhNGRiOWIwM2I2N2Y4ZGZhMDAyZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXFJiX1jxLYJ0O7e8n+x89RLbhHT KB0vCx/syQoVTmsXokQL8rr0km6T+pRB9Y+ByqsTgYkbDrBO08/1R1ga7QbsNYlH eCxmfpizhq5NTxQB4rtkpdg7tBgSNWzxvM0Db4M96V1DSPL2dQrZfYbEjN2BIgzs IcjAswLHAkAHfzA340r1N46m8fZiguf6jiBVvaE8UsV76GkJsprS8R+rRs87Zw2V lTqFN2ryHVzzYTdNULX5K2/qkDYUZpip2PM9bHxAJtEWv043y2/fm8tqY6NWRULl Ng4NayBy9g3SPlid/r6SVO1SxVftPHre/8LRKHLHoFgI8vGfftz7kLs3DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHebXElNLXk0aTbmwO2f436AC4oMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvTWQ1dGNTVTB0ZVRScE51YkE3Wl9qZm9BTGlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVbvIMA0G CSqGSIb3DQEBCwUAA4IBAQC/fqmy2KEMm2xUGfoorMsUkww7INFYG0lgpY6EaYrq y08IpaFoSypfoOgnXh8ZjsYPfT1ApIUdc4V1mxcUCJYsVFDUAxse/eacjaiUel41 x4J7lAiajbRR2fZKISuQQYJ2AbnOKaQ2s+o7p8gZQSItrBCRLw10vtiuXOzC6y6u pF278OLHjLUb2ZoVLBtlLdPVT1WfoTEK4S1wNNTk8+d7vjJQMhEiKPJe4DKTPljx E9BDClxIc4QUYqjAmzcInVC1OMFRhpGvlzVLZpHLdCDnDmup/SqHrVdv+H6yu/7S 1mMGQQrQYzE27RDPhXUX5phX4+YdL/p7TFLO1RYaSqGF -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:46 2026 by rpki-client