This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xGSstVYCVs5vthNwQmR_-VYhf6A.roa File: xGSstVYCVs5vthNwQmR_-VYhf6A.roa (raw, json) Hash identifier: QhmSgkubcVL97EAzVxMccq4bjANHavzm5rAf4mlSvQA= Subject key identifier: C4:64:AC:B5:56:02:56:CE:6F:B6:13:70:42:64:7F:F9:56:21:7F:A0 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED7FD681657FC06967C39E3838E7DA Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xGSstVYCVs5vthNwQmR_-VYhf6A.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39246 IP address blocks: 85.187.204.0/24 maxlen: 24 85.187.205.0/24 maxlen: 24 85.187.206.0/24 maxlen: 24 85.187.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7f:d6:81:65:7f:c0:69:67:c3:9e:38:38:e7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c464acb5560256ce6fb6137042647ff956217fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:40:9d:a2:0a:53:8e:f3:cb:97:c1:76:c2: 98:2d:1f:43:59:03:68:7f:7c:42:7a:cd:e2:80:4f: 97:94:d9:e4:34:21:51:66:d6:3a:8d:49:50:e4:eb: 3c:67:13:e9:bd:41:bd:a3:68:58:b1:99:66:73:aa: a9:f7:41:a0:5a:13:1c:1c:e5:0f:57:9c:3b:53:83: 8a:f9:cc:c6:c4:0d:eb:94:ca:57:71:95:5f:d2:87: 5d:82:9e:8c:20:b3:19:fe:3e:56:f0:a2:df:14:e8: d2:57:17:9e:52:0a:b9:8d:74:8b:06:56:2e:b5:7f: 32:64:09:e3:9e:b7:47:e3:41:fb:d3:13:54:e5:aa: 88:9b:bc:b9:c4:41:5e:0f:7a:13:33:51:0a:89:34: f2:a4:fe:9b:e1:73:9d:78:10:41:20:ac:f4:18:a2: 59:9a:ef:91:b9:95:cf:f2:58:e4:65:5a:e5:74:b3: 48:e5:bb:1f:c2:39:17:b9:e4:14:cf:f5:2b:25:aa: e6:d6:16:9d:e8:a7:6f:a7:1a:d1:ee:a0:44:5b:e2: c9:eb:47:5c:34:e8:fb:d6:0c:ee:5b:a6:43:24:29: c5:8d:4c:83:f5:e1:42:62:ab:e5:81:c2:46:35:63: 60:77:db:73:ad:3b:15:2f:62:03:5e:6f:a4:4c:b4: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:64:AC:B5:56:02:56:CE:6F:B6:13:70:42:64:7F:F9:56:21:7F:A0 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xGSstVYCVs5vthNwQmR_-VYhf6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.204.0/22 Signature Algorithm: sha256WithRSAEncryption 71:59:cf:7a:5f:0a:a4:d7:80:98:77:e4:11:5f:44:26:34:0e: 37:8e:80:e8:e0:f3:35:4c:ab:ed:62:c9:fc:32:e7:f5:8e:b1: 85:c6:40:8c:7d:e3:72:33:0d:e0:13:28:05:e8:9d:94:17:d5: 65:0e:a1:a1:cd:83:76:7f:55:0d:21:69:81:f0:22:07:f2:ae: 68:6d:bf:4b:e6:7d:de:14:e0:8e:09:58:4c:b0:f8:db:bc:89: a2:b7:20:be:9b:52:54:cc:98:43:9a:80:3c:54:c5:e6:f5:4a: 9d:ec:a4:7b:51:21:e5:80:7c:54:66:92:6b:6b:1b:ea:f4:50: 38:40:48:dc:5e:9c:d1:c0:93:00:1c:9a:cd:50:22:b3:73:de: a3:7c:a0:c3:13:c9:e3:cf:9a:31:74:6b:d5:f2:e6:3e:cf:ba: f4:3e:b3:ff:6e:08:5f:a9:af:4d:2c:35:a9:49:29:ee:dc:44: db:29:5d:e2:6b:89:00:f5:52:e4:af:5c:e3:a4:3a:c2:50:13: c5:fd:88:84:27:9f:c8:6b:06:08:31:d1:34:69:80:b6:d9:ae: a3:92:df:07:1b:e3:e3:1f:44:2b:31:56:f9:73:e6:d7:4b:39: 21:c7:34:14:14:3e:ae:50:cd:2a:af:66:97:5f:58:68:a2:23: f1:96:5d:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87X/WgWV/wGlnw544OOfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDY0YWNiNTU2MDI1NmNlNmZiNjEzNzA0MjY0N2ZmOTU2MjE3ZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot5AnaIKU47zy5fBdsKYLR9DWQNo f3xCes3igE+XlNnkNCFRZtY6jUlQ5Os8ZxPpvUG9o2hYsZlmc6qp90GgWhMcHOUP V5w7U4OK+czGxA3rlMpXcZVf0oddgp6MILMZ/j5W8KLfFOjSVxeeUgq5jXSLBlYu tX8yZAnjnrdH40H70xNU5aqIm7y5xEFeD3oTM1EKiTTypP6b4XOdeBBBIKz0GKJZ mu+RuZXP8ljkZVrldLNI5bsfwjkXueQUz/UrJarm1had6KdvpxrR7qBEW+LJ60dc NOj71gzuW6ZDJCnFjUyD9eFCYqvlgcJGNWNgd9tzrTsVL2IDXm+kTLQuHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRkrLVWAlbOb7YTcEJkf/lWIX+gMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEveEdTc3RWWUNWczV2dGhOd1FtUl8tVlloZjZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVbvMMA0G CSqGSIb3DQEBCwUAA4IBAQBxWc96Xwqk14CYd+QRX0QmNA43joDo4PM1TKvtYsn8 Muf1jrGFxkCMfeNyMw3gEygF6J2UF9VlDqGhzYN2f1UNIWmB8CIH8q5obb9L5n3e FOCOCVhMsPjbvImityC+m1JUzJhDmoA8VMXm9Uqd7KR7USHlgHxUZpJraxvq9FA4 QEjcXpzRwJMAHJrNUCKzc96jfKDDE8njz5oxdGvV8uY+z7r0PrP/bghfqa9NLDWp SSnu3ETbKV3ia4kA9VLkr1zjpDrCUBPF/YiEJ5/IawYIMdE0aYC22a6jkt8HG+Pj H0QrMVb5c+bXSzkhxzQUFD6uUM0qr2aXX1hooiPxll02 -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:48 2026 by rpki-client