This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/FfiuZ4qgAFR5I7ZuBPwJ0BVaFsw.roa File: FfiuZ4qgAFR5I7ZuBPwJ0BVaFsw.roa (raw, json) Hash identifier: GvjZw9nEQ7ntl097NhqlfzDmkYqbr0EsC+xmUPNAPpU= Subject key identifier: 15:F8:AE:67:8A:A0:00:54:79:23:B6:6E:04:FC:09:D0:15:5A:16:CC Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5 Certificate serial: 019B7BA3753A96552DF93A70F90A6AFC7BD1 Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/FfiuZ4qgAFR5I7ZuBPwJ0BVaFsw.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1257 IP address blocks: 185.56.212.0/22 maxlen: 24 185.57.168.0/22 maxlen: 24 188.65.152.0/21 maxlen: 24 193.41.118.0/23 maxlen: 24 193.138.74.0/24 maxlen: 24 193.254.192.0/23 maxlen: 24 195.78.36.0/24 maxlen: 24 2a01:4400::/32 maxlen: 48 2a02:5120::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:75:3a:96:55:2d:f9:3a:70:f9:0a:6a:fc:7b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15f8ae678aa000547923b66e04fc09d0155a16cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:6f:bf:3d:4c:e4:ae:6c:0d:83:71:f1:a1: e8:fe:e9:cc:f2:4a:12:a7:22:9b:05:23:10:32:8b: 8e:18:c6:ea:97:a1:1f:f9:0b:1f:b2:df:6b:15:27: 45:8f:3c:95:d9:62:b7:e1:fd:f6:69:9c:bc:89:9a: ee:11:40:53:a2:6e:04:95:98:e8:ed:c9:2b:37:44: 67:0e:ba:a2:ad:b9:e7:df:74:a1:7d:2e:6c:f7:67: c8:8f:fa:29:f0:67:db:07:e5:bc:e9:19:73:bd:e1: fa:48:f2:53:91:6b:79:de:a3:f8:f9:a9:05:14:dc: 5f:3b:ff:5c:26:62:25:b2:60:6a:ed:bb:05:6b:34: d7:03:a2:08:a2:ef:4b:f5:b4:ee:dd:de:29:1e:ad: a6:19:c2:8b:af:3c:d3:33:aa:50:e4:37:3b:ca:99: d3:c3:74:d1:d6:0d:67:67:ca:6f:b7:c0:06:b5:f3: a6:e9:f9:24:ae:b7:b9:83:dd:f2:d5:b2:ec:35:bd: f3:7b:88:80:00:ee:08:7c:32:4e:53:24:b2:1a:67: c4:82:d5:f0:20:6b:1a:98:06:d6:05:ea:d6:c8:8d: 50:a3:39:33:1b:40:4b:0d:6d:b5:da:78:97:7e:97: 64:4d:0d:ad:d1:94:b1:14:24:34:93:db:09:39:23: 4b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F8:AE:67:8A:A0:00:54:79:23:B6:6E:04:FC:09:D0:15:5A:16:CC X509v3 Authority Key Identifier: keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/FfiuZ4qgAFR5I7ZuBPwJ0BVaFsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.212.0/22 185.57.168.0/22 188.65.152.0/21 193.41.118.0/23 193.138.74.0/24 193.254.192.0/23 195.78.36.0/24 IPv6: 2a01:4400::/32 2a02:5120::/32 Signature Algorithm: sha256WithRSAEncryption 79:44:80:46:5c:bc:f0:5e:0b:23:54:19:7f:cc:3f:28:68:f5: bf:40:c5:0f:ac:4e:05:3a:1d:56:e4:04:6e:70:7e:fe:9a:7a: 31:b6:51:4a:a6:65:60:df:ba:98:3f:83:6b:9f:8d:f2:86:fd: d0:f5:72:80:30:57:6f:4b:4a:e2:de:c0:11:79:e1:53:55:f0: 62:41:3d:6a:92:06:5b:65:f1:39:4f:50:3d:06:d0:7f:1a:74: 90:83:94:c2:b7:ce:55:5c:a5:11:0d:49:04:44:5a:b5:b3:52: 59:79:88:7b:df:1d:53:13:94:35:e3:67:f2:aa:ba:aa:c1:b4: a8:19:76:a2:44:63:41:1c:8d:cf:31:5d:e1:c5:dd:d4:3d:fd: 9c:42:b6:f5:88:67:7b:1f:dd:ad:55:93:9e:e7:9a:c0:2e:a6: f8:2f:bf:96:2f:56:d3:02:35:c4:c2:ff:cd:74:32:d1:d8:df: fa:d8:91:88:91:ed:fa:25:70:48:19:ff:36:a7:16:f6:88:d9: 62:e4:55:78:02:ae:9e:a0:a9:e7:4f:f7:7b:48:86:7c:a8:69: 94:99:03:0b:9d:58:63:a8:4f:a7:d3:b3:12:75:4d:9d:83:23: f1:3b:bb:d7:1b:ab:a4:96:b3:67:91:cc:d0:2c:0b:2d:f8:ee: 46:19:06:32 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt7o3U6llUt+Tpw+Qpq/HvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj NDE1ZDUwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWY4YWU2NzhhYTAwMDU0NzkyM2I2NmUwNGZjMDlkMDE1NWExNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLJvvz1M5K5sDYNx8aHo/unM8koS pyKbBSMQMouOGMbql6Ef+Qsfst9rFSdFjzyV2WK34f32aZy8iZruEUBTom4ElZjo 7ckrN0RnDrqirbnn33ShfS5s92fIj/op8GfbB+W86RlzveH6SPJTkWt53qP4+akF FNxfO/9cJmIlsmBq7bsFazTXA6IIou9L9bTu3d4pHq2mGcKLrzzTM6pQ5Dc7ypnT w3TR1g1nZ8pvt8AGtfOm6fkkrre5g93y1bLsNb3ze4iAAO4IfDJOUySyGmfEgtXw IGsamAbWBerWyI1QozkzG0BLDW212niXfpdkTQ2t0ZSxFCQ0k9sJOSNLXQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFBX4rmeKoABUeSO2bgT8CdAVWhbMMB8GA1UdIwQY MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt OGZkMzk0YjUzNTdjLzEvRmZpdVo0cWdBRlI1STdadUJQd0owQlZhRnN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQCuTjUAwQC uTmoAwQDvEGYAwQBwSl2AwQAwYpKAwQBwf7AAwQAw04kMBQEAgACMA4DBQAqAUQA AwUAKgJRIDANBgkqhkiG9w0BAQsFAAOCAQEAeUSARly88F4LI1QZf8w/KGj1v0DF D6xOBTodVuQEbnB+/pp6MbZRSqZlYN+6mD+Da5+N8ob90PVygDBXb0tK4t7AEXnh U1XwYkE9apIGW2XxOU9QPQbQfxp0kIOUwrfOVVylEQ1JBERatbNSWXmIe98dUxOU NeNn8qq6qsG0qBl2okRjQRyNzzFd4cXd1D39nEK29Yhnex/drVWTnueawC6m+C+/ li9W0wI1xML/zXQy0djf+tiRiJHt+iVwSBn/NqcW9ojZYuRVeAKunqCp50/3e0iG fKhplJkDC51YY6hPp9OzEnVNnYMj8Tu71xurpJazZ5HM0CwLLfjuRhkGMg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:24 2026 by rpki-client