This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/rF9bfh_oBP3ybSyfzGepTfNy5Cs.roa File: rF9bfh_oBP3ybSyfzGepTfNy5Cs.roa (raw, json) Hash identifier: 0idHC/YAh59nWfVR/AfEpg32uZCCAz2zzDzVigdrTbY= Subject key identifier: AC:5F:5B:7E:1F:E8:04:FD:F2:6D:2C:9F:CC:67:A9:4D:F3:72:E4:2B Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED852BE6D4FC2EEE0372B75990A21D Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/rF9bfh_oBP3ybSyfzGepTfNy5Cs.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56606 IP address blocks: 85.187.7.0/24 maxlen: 24 85.187.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:85:2b:e6:d4:fc:2e:ee:03:72:b7:59:90:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac5f5b7e1fe804fdf26d2c9fcc67a94df372e42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:96:d2:f6:e3:39:45:b3:d6:d8:ad:22:e6: ab:7e:2a:de:d1:34:77:fb:41:90:48:e6:e7:20:01: 59:d7:af:25:91:56:12:34:e6:6e:b5:e8:69:f6:db: 9b:e8:f6:98:f9:54:70:37:22:33:fe:22:d1:fe:67: b5:5e:7d:30:ef:5d:31:c2:1c:90:55:ce:44:bd:0d: 6f:1d:63:87:23:f6:e0:af:ac:d1:fc:22:a7:68:f2: a7:e6:72:3d:62:9c:63:da:c4:51:73:89:1e:42:48: 0a:a6:a5:fd:bb:f6:a5:d0:af:c8:d0:19:93:a5:84: ab:37:56:3c:47:2e:6a:ab:79:4d:3b:38:d1:6f:e4: 20:1a:29:ce:f1:bc:9f:89:26:91:17:ce:ab:67:7b: 35:a1:fa:44:b5:17:74:1a:4d:5e:07:dc:88:dc:29: a7:83:f3:a3:8c:9a:78:12:17:4c:16:a1:b1:b7:8e: 8e:90:77:b8:51:a0:56:b6:d0:da:2a:48:34:1d:b6: c7:b5:da:9a:c8:a5:ab:13:4c:6a:1d:b9:56:f7:03: b2:e2:80:eb:68:5a:84:c8:78:7b:01:ab:85:2f:8d: d4:b6:35:ce:6c:12:18:7c:5c:47:63:08:19:9c:4e: 5b:6b:8c:63:d3:76:75:8d:d2:bb:91:48:7d:ef:8f: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5F:5B:7E:1F:E8:04:FD:F2:6D:2C:9F:CC:67:A9:4D:F3:72:E4:2B X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/rF9bfh_oBP3ybSyfzGepTfNy5Cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.7.0/24 85.187.40.0/24 Signature Algorithm: sha256WithRSAEncryption cb:ad:7a:65:ca:55:d3:5d:61:f6:3d:45:a5:c5:29:df:7a:04: 8f:84:56:49:6c:b6:a6:d9:a6:73:e0:d4:d2:d1:27:53:ad:da: ba:53:e5:cd:a5:a7:0a:be:c2:b5:00:62:99:51:e7:f6:26:70: 24:7a:aa:61:2d:8a:50:a1:97:70:4b:1d:54:0f:ec:d5:cd:2e: 8f:ab:40:64:ff:c2:a1:3f:a6:06:8d:af:3b:ff:fb:cc:3b:08: 79:d1:05:8f:74:1d:cf:81:c5:09:77:ae:b6:23:6d:87:0e:2d: 3f:bb:c4:1f:6c:95:88:28:d8:78:24:05:28:ef:a0:1b:1a:cb: eb:1a:a8:c7:da:ee:84:80:fd:4f:f9:7c:9f:79:26:84:8c:ac: 51:18:54:9a:6e:a0:0a:d7:de:e8:e8:3f:6e:86:99:aa:00:57: e3:3c:c2:82:6f:e3:97:22:a8:b9:c0:5f:c2:a9:13:8e:85:06: 70:ea:0b:ab:f0:b7:cb:b6:55:eb:e8:92:7b:05:60:ae:28:f1: 7f:27:f7:b0:65:7d:68:0b:fd:b0:93:9a:24:42:e0:9a:cb:33: 02:2d:26:60:6b:58:d7:06:23:f3:a5:c4:75:c6:56:77:9b:96: 5b:f0:d2:59:40:30:c4:30:93:90:f4:e1:e2:63:85:db:02:f9: 15:ee:a8:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87YUr5tT8Lu4DcrdZkKIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzVmNWI3ZTFmZTgwNGZkZjI2ZDJjOWZjYzY3YTk0ZGYzNzJlNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+WW0vbjOUWz1titIuarfire0TR3 +0GQSObnIAFZ168lkVYSNOZutehp9tub6PaY+VRwNyIz/iLR/me1Xn0w710xwhyQ Vc5EvQ1vHWOHI/bgr6zR/CKnaPKn5nI9Ypxj2sRRc4keQkgKpqX9u/al0K/I0BmT pYSrN1Y8Ry5qq3lNOzjRb+QgGinO8byfiSaRF86rZ3s1ofpEtRd0Gk1eB9yI3Cmn g/OjjJp4EhdMFqGxt46OkHe4UaBWttDaKkg0HbbHtdqayKWrE0xqHblW9wOy4oDr aFqEyHh7AauFL43UtjXObBIYfFxHYwgZnE5ba4xj03Z1jdK7kUh974+oxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKxfW34f6AT98m0sn8xnqU3zcuQrMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvckY5YmZoX29CUDN5YlN5ZnpHZXBUZk55NUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVbsHAwQA VbsoMA0GCSqGSIb3DQEBCwUAA4IBAQDLrXplylXTXWH2PUWlxSnfegSPhFZJbLam 2aZz4NTS0SdTrdq6U+XNpacKvsK1AGKZUef2JnAkeqphLYpQoZdwSx1UD+zVzS6P q0Bk/8KhP6YGja87//vMOwh50QWPdB3PgcUJd662I22HDi0/u8QfbJWIKNh4JAUo 76AbGsvrGqjH2u6EgP1P+XyfeSaEjKxRGFSabqAK197o6D9uhpmqAFfjPMKCb+OX Iqi5wF/CqROOhQZw6gur8LfLtlXr6JJ7BWCuKPF/J/ewZX1oC/2wk5okQuCayzMC LSZga1jXBiPzpcR1xlZ3m5Zb8NJZQDDEMJOQ9OHiY4XbAvkV7qii -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:50 2026 by rpki-client