This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Nb7wMvyy7_8_tUsBu0CAZHI-u7w.roa File: Nb7wMvyy7_8_tUsBu0CAZHI-u7w.roa (raw, json) Hash identifier: sFvW2zTL0LYES516UioaLe6jUPi/sxoWUv9ji3dJL6o= Subject key identifier: 35:BE:F0:32:FC:B2:EF:FF:3F:B5:4B:01:BB:40:80:64:72:3E:BB:BC Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED83F74684C01DECB42F977349E2FD Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Nb7wMvyy7_8_tUsBu0CAZHI-u7w.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49773 IP address blocks: 151.237.31.0/24 maxlen: 24 151.237.33.0/24 maxlen: 24 151.237.34.0/23 maxlen: 23 185.242.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:83:f7:46:84:c0:1d:ec:b4:2f:97:73:49:e2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35bef032fcb2efff3fb54b01bb408064723ebbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:28:0f:75:ad:89:8d:94:44:ba:a8:bc:47: c8:79:e6:a3:41:19:fe:d7:d5:f0:d1:3d:ae:55:62: bf:75:36:ee:93:08:f8:01:50:9c:76:db:e7:b8:7e: 63:88:83:57:ea:31:ae:62:ea:e0:94:47:df:7e:03: 00:77:2f:19:b1:6d:c8:79:d4:e5:62:99:48:f7:ba: 68:57:21:d2:c7:da:86:2c:b5:63:98:5d:0d:36:a2: c3:68:66:f5:7b:55:ed:29:98:da:18:8f:84:4b:54: 19:2a:bd:ef:ca:64:88:64:19:96:18:fe:85:22:4e: b0:02:5e:6f:e5:35:72:56:7f:bf:0e:49:98:75:9c: 4a:4d:f1:32:40:a6:60:0a:40:b4:89:ab:2c:72:12: 1a:2c:ac:bb:b4:53:44:72:a5:9d:bb:89:ef:ea:8c: e1:8d:64:2c:e5:a3:03:d3:a1:a8:e4:19:92:d2:34: 84:49:30:db:9b:32:96:a8:48:1e:ad:fb:69:05:15: 37:63:f3:2d:85:a1:93:06:51:d5:ac:48:a5:49:15: e9:61:a1:bc:2a:8e:ed:e2:c1:78:af:78:44:71:1e: bf:07:a2:4e:32:86:5d:48:5d:b7:9a:81:cb:54:92: 28:36:44:19:b2:c6:de:1e:4d:93:4c:09:27:56:d1: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BE:F0:32:FC:B2:EF:FF:3F:B5:4B:01:BB:40:80:64:72:3E:BB:BC X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Nb7wMvyy7_8_tUsBu0CAZHI-u7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.31.0/24 151.237.33.0-151.237.35.255 185.242.170.0/24 Signature Algorithm: sha256WithRSAEncryption d0:ce:60:ef:37:da:1d:6c:a6:1f:b5:4b:d3:33:35:60:80:f7: dd:26:25:c0:ce:3b:3b:9c:1a:17:75:ab:1b:0d:b1:f1:86:9f: 31:40:38:d2:86:af:2c:9c:5c:28:a8:aa:7c:61:1c:17:12:65: b1:53:b7:5e:fd:7f:89:91:59:54:05:09:dc:8c:23:1c:ae:d0: f7:a9:cd:7e:ac:d3:e7:98:e7:5a:5c:c8:10:0a:49:3d:15:35: ae:bc:55:51:10:a8:d5:97:a2:e1:de:57:7c:7a:bd:bb:51:01: 1f:2c:4f:a8:8e:a6:75:23:1f:72:a2:2d:ba:d1:f0:77:66:c0: c5:bc:a2:89:20:5e:75:56:4a:6b:c5:88:1a:9a:41:77:5d:9f: 20:da:c8:d6:1d:cc:23:b0:76:02:ff:47:bd:1b:c5:69:20:f0: 87:a8:43:dd:57:d5:d0:77:80:7f:1b:45:57:53:d6:38:92:7f: 31:67:7c:8e:7c:65:eb:77:48:7f:bf:4e:d6:1c:ed:aa:41:ec: be:ea:ff:dd:78:97:a0:2b:e1:af:4c:2e:17:da:4a:24:3d:64: 5a:5e:9a:bb:cf:a6:12:4e:ff:4d:ce:a0:f7:ea:a1:19:3f:43: 15:6b:01:8d:5a:11:8b:30:5f:7e:cf:b7:cd:18:41:11:81:cd: 16:2c:b9:1e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt87YP3RoTAHey0L5dzSeL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWJlZjAzMmZjYjJlZmZmM2ZiNTRiMDFiYjQwODA2NDcyM2ViYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JIoD3WtiY2URLqovEfIeeajQRn+ 19Xw0T2uVWK/dTbukwj4AVCcdtvnuH5jiINX6jGuYurglEfffgMAdy8ZsW3IedTl YplI97poVyHSx9qGLLVjmF0NNqLDaGb1e1XtKZjaGI+ES1QZKr3vymSIZBmWGP6F Ik6wAl5v5TVyVn+/DkmYdZxKTfEyQKZgCkC0iasschIaLKy7tFNEcqWdu4nv6ozh jWQs5aMD06Go5BmS0jSESTDbmzKWqEgerftpBRU3Y/MthaGTBlHVrEilSRXpYaG8 Ko7t4sF4r3hEcR6/B6JOMoZdSF23moHLVJIoNkQZssbeHk2TTAknVtHNMQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDW+8DL8su//P7VLAbtAgGRyPru8MB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvTmI3d012eXk3XzhfdFVzQnUwQ0FaSEktdTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAl+0fMAwD BACX7SEDBAKX7SADBAC58qowDQYJKoZIhvcNAQELBQADggEBANDOYO832h1sph+1 S9MzNWCA990mJcDOOzucGhd1qxsNsfGGnzFAONKGryycXCioqnxhHBcSZbFTt179 f4mRWVQFCdyMIxyu0PepzX6s0+eY51pcyBAKST0VNa68VVEQqNWXouHeV3x6vbtR AR8sT6iOpnUjH3KiLbrR8HdmwMW8ookgXnVWSmvFiBqaQXddnyDayNYdzCOwdgL/ R70bxWkg8IeoQ91X1dB3gH8bRVdT1jiSfzFnfI58Zet3SH+/TtYc7apB7L7q/914 l6Ar4a9MLhfaSiQ9ZFpemrvPphJO/03OoPfqoRk/QxVrAY1aEYswX37Pt80YQRGB zRYsuR4= -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:08 2026 by rpki-client