This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OKm9cxPf32veHeJAKYn1FqPX-W8.roa File: OKm9cxPf32veHeJAKYn1FqPX-W8.roa (raw, json) Hash identifier: ZvaU3xtVjcswzDH4WA8g/rfMZQ+9iWBXxvsEncNm1JE= Subject key identifier: 38:A9:BD:73:13:DF:DF:6B:DE:1D:E2:40:29:89:F5:16:A3:D7:F9:6F Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8712CBEEE1BA05D64DF0DB0A0538 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OKm9cxPf32veHeJAKYn1FqPX-W8.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60656 IP address blocks: 85.187.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:87:12:cb:ee:e1:ba:05:d6:4d:f0:db:0a:05:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38a9bd7313dfdf6bde1de2402989f516a3d7f96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:d2:9a:ef:a5:ef:ca:ae:52:ac:c6:6c:f7: 6d:3c:a2:3e:14:07:64:24:a7:6d:09:c0:7e:bc:8b: 1d:e2:ad:0e:33:a7:bc:ac:a4:8f:e6:bb:c2:e8:b7: 4d:6c:d4:93:30:92:b6:71:1e:6a:26:d1:23:00:12: 3e:c2:e7:66:7e:98:40:b3:99:4d:3d:bf:29:3b:f3: 1a:f3:f0:a4:35:1b:f0:73:f4:1f:c5:be:07:17:b1: a8:67:1e:2e:9d:e2:08:92:75:84:66:8c:26:3d:88: 27:ff:67:3c:42:50:ec:91:37:bf:d4:87:90:37:e8: 63:11:5a:a8:0b:bb:9e:fb:d0:7e:ae:57:58:96:08: 57:70:62:6d:13:1e:01:3f:35:ad:08:7a:8d:2b:5d: 0a:db:34:a0:49:d1:02:a3:14:87:b0:7b:5a:8f:09: d5:5d:5c:9c:75:5f:80:14:ff:45:c5:da:c6:d5:1b: 76:0c:26:59:33:f9:24:5b:53:66:f8:fe:e7:be:a0: 26:51:a6:7d:b8:bf:e0:89:d2:8d:40:cd:7b:ea:b0: 51:fa:91:ad:36:43:a6:82:63:a9:0f:db:20:2a:49: c7:ab:b7:9e:37:77:e7:3a:57:24:75:79:26:cf:24: 69:90:4a:9b:73:70:45:a3:d7:17:a9:d2:39:e3:de: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A9:BD:73:13:DF:DF:6B:DE:1D:E2:40:29:89:F5:16:A3:D7:F9:6F X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OKm9cxPf32veHeJAKYn1FqPX-W8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.15.0/24 Signature Algorithm: sha256WithRSAEncryption 59:6e:44:8b:ae:a3:9e:03:fe:e6:3c:23:ae:78:c9:18:48:1b: c8:f2:d9:13:24:20:4a:d5:7e:16:9b:dc:ba:b7:74:af:b2:b6: 75:7c:6a:e9:0e:7a:c8:7a:9e:38:3a:66:3b:88:54:06:3a:e4: ce:ce:7b:57:10:a4:ab:c7:0f:fb:91:f5:12:86:15:39:9c:fb: a3:de:e0:15:2f:4c:dd:0e:88:20:27:7d:82:85:2d:cd:5d:e4: 12:92:2a:1d:60:0e:43:ac:27:35:24:6e:b2:19:35:72:ba:36: a5:32:b6:dc:22:87:41:d1:f6:f6:56:8c:61:7e:90:5c:a0:2b: 48:bb:c8:1e:ad:99:04:73:65:7a:5d:f6:4e:c7:d7:a2:cc:3d: 81:88:2e:b9:f0:3e:b4:a9:a7:f9:13:3d:23:94:a7:d8:2c:de: 29:cb:09:08:a4:cd:4b:d3:1e:62:cf:3d:e4:a6:8f:52:1b:80: ef:3a:83:3a:9d:22:bd:d8:48:5a:16:c4:b6:6b:a9:23:5f:74: fe:4a:dc:ab:0d:b8:85:a1:0b:cd:41:1d:18:5e:65:64:b9:70: a4:31:c4:f5:c9:b2:d0:f5:f6:aa:b8:9a:f1:62:1e:d2:4e:c6: a5:54:02:9f:af:dd:fd:59:26:03:51:b9:6b:f8:f7:23:2f:f8: b4:39:17:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YcSy+7hugXWTfDbCgU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGE5YmQ3MzEzZGZkZjZiZGUxZGUyNDAyOTg5ZjUxNmEzZDdmOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdDSmu+l78quUqzGbPdtPKI+FAdk JKdtCcB+vIsd4q0OM6e8rKSP5rvC6LdNbNSTMJK2cR5qJtEjABI+wudmfphAs5lN Pb8pO/Ma8/CkNRvwc/Qfxb4HF7GoZx4uneIIknWEZowmPYgn/2c8QlDskTe/1IeQ N+hjEVqoC7ue+9B+rldYlghXcGJtEx4BPzWtCHqNK10K2zSgSdECoxSHsHtajwnV XVycdV+AFP9FxdrG1Rt2DCZZM/kkW1Nm+P7nvqAmUaZ9uL/gidKNQM176rBR+pGt NkOmgmOpD9sgKknHq7eeN3fnOlckdXkmzyRpkEqbc3BFo9cXqdI5494rpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDipvXMT399r3h3iQCmJ9Raj1/lvMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvT0ttOWN4UGYzMnZlSGVKQUtZbjFGcVBYLVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbsPMA0G CSqGSIb3DQEBCwUAA4IBAQBZbkSLrqOeA/7mPCOueMkYSBvI8tkTJCBK1X4Wm9y6 t3SvsrZ1fGrpDnrIep44OmY7iFQGOuTOzntXEKSrxw/7kfUShhU5nPuj3uAVL0zd DoggJ32ChS3NXeQSkiodYA5DrCc1JG6yGTVyujalMrbcIodB0fb2VoxhfpBcoCtI u8gerZkEc2V6XfZOx9eizD2BiC658D60qaf5Ez0jlKfYLN4pywkIpM1L0x5izz3k po9SG4DvOoM6nSK92EhaFsS2a6kjX3T+StyrDbiFoQvNQR0YXmVkuXCkMcT1ybLQ 9faquJrxYh7STsalVAKfr939WSYDUblr+PcjL/i0ORe5 -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:42 2026 by rpki-client