This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_Lm_-QcdqarLU0LNMaLm-NgW1zA.roa File: _Lm_-QcdqarLU0LNMaLm-NgW1zA.roa (raw, json) Hash identifier: tA5twHJW6LmbqLjoKXMuZzAwfX9+8dHIKYFWHuS1qIA= Subject key identifier: FC:B9:BF:F9:07:1D:A9:AA:CB:53:42:CD:31:A2:E6:F8:D8:16:D7:30 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED9518E78F223694E4FEDA5B75D93D Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_Lm_-QcdqarLU0LNMaLm-NgW1zA.roa Signing time: Fri 02 Jan 2026 04:18:23 +0000 ROA not before: Fri 02 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214433 IP address blocks: 151.237.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:95:18:e7:8f:22:36:94:e4:fe:da:5b:75:d9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcb9bff9071da9aacb5342cd31a2e6f8d816d730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:df:d1:95:31:d6:0b:9f:6e:a1:b1:26:d2: 60:b4:5b:72:8a:c9:e5:7c:17:58:47:7a:b6:44:30: e4:18:28:b3:4d:61:b0:f2:8f:50:c1:b9:1b:16:c4: 99:f2:e5:93:ea:47:b0:73:0a:ef:c4:4e:55:72:3a: 00:46:fd:32:3f:ee:7e:09:e0:85:6b:67:48:3f:94: 20:c5:96:e1:a9:ea:b0:3b:6c:b3:23:fd:84:29:46: 0e:6e:4e:6f:c7:96:23:d4:4a:33:f9:43:26:a9:9a: c0:a3:d8:66:52:5b:26:72:05:61:d4:a7:6d:b0:14: 78:f0:53:d2:b1:54:ae:fd:6c:75:b3:33:81:c9:36: e3:af:a4:d7:83:ff:34:2a:6a:e0:cb:6f:8c:3e:d8: 61:26:97:4c:61:f0:94:61:61:1d:a2:ff:1b:79:1d: 29:93:9b:10:be:95:fd:b4:4d:00:07:5b:2a:98:e5: ee:3b:65:dc:93:d8:f9:44:32:f7:dc:e9:ed:e2:7d: 64:d2:56:97:b0:f1:ce:1e:03:d4:f2:be:cc:9a:48: 44:cb:ed:ad:9e:e2:94:d1:26:50:5a:55:90:be:0b: ad:0f:1d:0b:e2:58:0b:e6:1b:2e:e1:02:fb:9f:e9: cb:c5:13:11:7f:94:fa:46:06:34:2f:47:df:b4:ae: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B9:BF:F9:07:1D:A9:AA:CB:53:42:CD:31:A2:E6:F8:D8:16:D7:30 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_Lm_-QcdqarLU0LNMaLm-NgW1zA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.25.0/24 Signature Algorithm: sha256WithRSAEncryption 52:5b:2b:9d:4e:01:a4:02:0e:50:2e:68:43:51:a2:e4:db:d3: 45:76:c3:14:76:bf:2e:46:5e:f3:bb:7c:c7:e9:29:fa:69:82: a2:91:74:d9:56:0f:cd:7e:60:7c:6a:24:b8:2b:16:c5:98:9c: 18:29:65:47:79:a7:0d:da:cc:49:86:a7:02:36:34:fa:d7:d0: 6e:b0:6d:3d:d8:66:44:a8:94:88:81:26:03:59:e6:6f:2e:db: 90:5c:88:03:bf:85:b9:71:bb:55:18:7a:1c:1e:3c:e0:c0:76: 71:75:3b:33:4e:e3:ad:2f:5d:39:14:3e:ac:0a:cc:c1:82:54: 2d:82:3a:9b:5b:af:7e:e3:f7:dc:6f:77:33:1d:36:ea:8e:8e: db:b9:03:92:a6:45:87:df:ec:17:a6:9d:6c:19:38:11:be:27: 93:f5:7a:60:90:e1:49:a4:75:e6:9b:0f:d7:fc:f2:c9:fd:e6: b5:71:50:6c:3a:0f:04:96:5c:4f:74:c8:16:63:ce:f0:f3:d0: 42:1c:ed:2b:fd:9b:24:22:bc:6c:91:22:19:59:04:aa:a5:5a: 7b:31:70:dd:f8:50:81:22:94:ec:fc:43:ec:ad:49:d4:48:e5: 1b:86:22:2a:ee:c2:f2:b1:c0:f0:88:ee:d6:a1:4a:fe:c0:0d: 5b:cb:b0:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZUY548iNpTk/tpbddk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I5YmZmOTA3MWRhOWFhY2I1MzQyY2QzMWEyZTZmOGQ4MTZkNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV7f0ZUx1gufbqGxJtJgtFtyisnl fBdYR3q2RDDkGCizTWGw8o9QwbkbFsSZ8uWT6kewcwrvxE5VcjoARv0yP+5+CeCF a2dIP5QgxZbhqeqwO2yzI/2EKUYObk5vx5Yj1Eoz+UMmqZrAo9hmUlsmcgVh1Kdt sBR48FPSsVSu/Wx1szOByTbjr6TXg/80Kmrgy2+MPthhJpdMYfCUYWEdov8beR0p k5sQvpX9tE0AB1sqmOXuO2Xck9j5RDL33Ont4n1k0laXsPHOHgPU8r7MmkhEy+2t nuKU0SZQWlWQvgutDx0L4lgL5hsu4QL7n+nLxRMRf5T6RgY0L0fftK43qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPy5v/kHHamqy1NCzTGi5vjYFtcwMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvX0xtXy1RY2RxYXJMVTBMTk1hTG0tTmdXMXpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+0ZMA0G CSqGSIb3DQEBCwUAA4IBAQBSWyudTgGkAg5QLmhDUaLk29NFdsMUdr8uRl7zu3zH 6Sn6aYKikXTZVg/NfmB8aiS4KxbFmJwYKWVHeacN2sxJhqcCNjT619BusG092GZE qJSIgSYDWeZvLtuQXIgDv4W5cbtVGHocHjzgwHZxdTszTuOtL105FD6sCszBglQt gjqbW69+4/fcb3czHTbqjo7buQOSpkWH3+wXpp1sGTgRvieT9XpgkOFJpHXmmw/X /PLJ/ea1cVBsOg8EllxPdMgWY87w89BCHO0r/ZskIrxskSIZWQSqpVp7MXDd+FCB IpTs/EPsrUnUSOUbhiIq7sLyscDwiO7WoUr+wA1by7CN -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:43 2026 by rpki-client