This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hdJNEC4k9VYKuIsDSDeTldkfx2w.roa File: hdJNEC4k9VYKuIsDSDeTldkfx2w.roa (raw, json) Hash identifier: 9mVLR3+7ZtRwJh3b3TAecSLtWAEh1ogVNYpFHs+XbUI= Subject key identifier: 85:D2:4D:10:2E:24:F5:56:0A:B8:8B:03:48:37:93:95:D9:1F:C7:6C Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8E43EFED3A88E3797F6B0BF7DF7E Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hdJNEC4k9VYKuIsDSDeTldkfx2w.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203633 IP address blocks: 85.187.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8e:43:ef:ed:3a:88:e3:79:7f:6b:0b:f7:df:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d24d102e24f5560ab88b0348379395d91fc76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:b0:b2:b5:52:05:1d:f6:eb:33:76:1b:e2: 6b:b6:3b:af:ec:7f:72:12:a6:e2:87:65:6f:55:a9: 56:2a:48:34:2f:e3:37:f4:7c:f9:56:5b:9b:3d:45: 25:09:4b:e5:ef:c3:69:80:e0:62:03:b1:58:73:5f: a6:2f:5a:ac:60:28:9c:52:b5:c8:58:21:a5:32:eb: b9:f0:bc:2c:81:c9:da:70:c6:5f:4d:16:49:12:3c: 67:fa:51:56:3c:5f:29:86:73:9e:49:4c:b9:d1:2f: c9:1e:9d:8d:a2:0f:5d:1b:bc:67:ae:b0:97:75:83: d9:9e:ad:ee:c4:d7:13:cf:05:e7:18:2e:a0:6b:d0: 9d:20:34:1d:2e:42:66:46:76:e0:db:66:46:25:1b: 3b:90:8a:37:99:6f:51:c4:ea:07:9e:69:bf:e5:fc: 56:e0:19:bb:93:67:6c:df:5d:03:fc:9c:32:a7:f5: 41:f1:92:f4:28:c4:c2:04:76:53:4d:67:d6:ff:41: c7:d4:c3:2c:8c:82:70:a0:43:c5:68:8c:88:8e:d4: ba:6c:63:3a:18:fc:b7:c9:8d:db:4d:f0:c7:8c:84: 2a:f6:16:1f:60:b9:60:0a:42:84:09:56:31:89:13: d8:11:3f:2d:81:b9:5a:ae:b7:39:c9:68:22:5d:1e: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:4D:10:2E:24:F5:56:0A:B8:8B:03:48:37:93:95:D9:1F:C7:6C X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hdJNEC4k9VYKuIsDSDeTldkfx2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.42.0/24 Signature Algorithm: sha256WithRSAEncryption 90:8b:6a:0f:64:25:53:f5:53:18:62:62:f8:7e:bc:46:38:dd: 2c:01:98:a7:b6:f3:23:e1:48:b6:e9:f0:d2:7e:90:a5:af:45: e2:ad:c4:67:d9:44:c5:5b:9c:cd:21:09:60:b9:ae:38:e5:17: 67:67:3a:2c:4a:94:cb:89:25:27:2b:a1:c9:cd:6f:9a:7a:6e: 4d:38:76:8a:16:24:a7:92:75:cf:fe:c5:79:2d:46:4f:ef:4e: 5d:f7:ef:3c:49:eb:fc:e6:c2:73:42:eb:cc:25:be:8f:6c:3a: 37:58:3c:b3:11:61:7e:44:26:c0:c7:2b:fb:0f:d6:82:55:7f: 73:73:80:31:96:69:7a:cb:7f:04:05:72:05:45:a3:b4:1b:5a: 94:13:72:20:82:71:2f:8c:ae:4f:0a:bb:e0:2d:3e:53:59:bc: b3:5b:82:50:f3:b9:34:4d:a0:8a:51:40:24:55:b3:19:09:cc: 2e:70:c7:60:c2:fc:e7:d9:34:2d:9a:cb:1b:16:e8:d2:31:02: cf:b0:05:b1:53:8b:86:be:4c:2d:46:29:06:1b:dd:c2:46:b5: bd:cd:1d:3c:06:25:6b:c8:2a:c4:cf:c8:1b:0b:f0:16:c9:84: 40:cb:ca:3a:49:23:73:89:3f:5d:e1:30:f2:7d:32:e4:11:9f: 13:1d:3a:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Y5D7+06iON5f2sL999+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQyNGQxMDJlMjRmNTU2MGFiODhiMDM0ODM3OTM5NWQ5MWZjNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpCwsrVSBR326zN2G+Jrtjuv7H9y Eqbih2VvValWKkg0L+M39Hz5VlubPUUlCUvl78NpgOBiA7FYc1+mL1qsYCicUrXI WCGlMuu58LwsgcnacMZfTRZJEjxn+lFWPF8phnOeSUy50S/JHp2Nog9dG7xnrrCX dYPZnq3uxNcTzwXnGC6ga9CdIDQdLkJmRnbg22ZGJRs7kIo3mW9RxOoHnmm/5fxW 4Bm7k2ds310D/Jwyp/VB8ZL0KMTCBHZTTWfW/0HH1MMsjIJwoEPFaIyIjtS6bGM6 GPy3yY3bTfDHjIQq9hYfYLlgCkKECVYxiRPYET8tgblarrc5yWgiXR6+LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXSTRAuJPVWCriLA0g3k5XZH8dsMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvaGRKTkVDNGs5VllLdUlzRFNEZVRsZGtmeDJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbsqMA0G CSqGSIb3DQEBCwUAA4IBAQCQi2oPZCVT9VMYYmL4frxGON0sAZintvMj4Ui26fDS fpClr0XircRn2UTFW5zNIQlgua445RdnZzosSpTLiSUnK6HJzW+aem5NOHaKFiSn knXP/sV5LUZP705d9+88Sev85sJzQuvMJb6PbDo3WDyzEWF+RCbAxyv7D9aCVX9z c4Axlml6y38EBXIFRaO0G1qUE3IggnEvjK5PCrvgLT5TWbyzW4JQ87k0TaCKUUAk VbMZCcwucMdgwvzn2TQtmssbFujSMQLPsAWxU4uGvkwtRikGG93CRrW9zR08BiVr yCrEz8gbC/AWyYRAy8o6SSNziT9d4TDyfTLkEZ8THTrd -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:50 2026 by rpki-client