This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0o9Lw0kDYdlfGJ29wYoUyc2zom8.roa File: 0o9Lw0kDYdlfGJ29wYoUyc2zom8.roa (raw, json) Hash identifier: qATqWNelp5kWeQPks533jdrIL1p5vs1PiC8G5RQkGlg= Subject key identifier: D2:8F:4B:C3:49:03:61:D9:5F:18:9D:BD:C1:8A:14:C9:CD:B3:A2:6F Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8D63E914DB9968C5193F936203CD Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0o9Lw0kDYdlfGJ29wYoUyc2zom8.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202160 IP address blocks: 85.187.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8d:63:e9:14:db:99:68:c5:19:3f:93:62:03:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d28f4bc3490361d95f189dbdc18a14c9cdb3a26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:87:83:3d:3a:cf:b8:61:76:84:a8:ea:4d: 80:61:68:71:ce:27:65:ff:09:e9:be:8b:0b:ff:1f: ee:f1:f5:d9:de:13:b0:b2:31:13:f4:9a:83:a5:4d: a8:74:86:6d:d3:32:ae:9e:b2:ae:f1:25:7c:d8:64: 3a:c9:ba:f2:08:34:75:2a:82:d4:f7:a3:1c:8e:3b: 3a:44:de:76:88:d3:7f:02:6c:79:5d:6e:da:79:91: fb:0d:76:12:f0:b8:db:2b:16:dc:21:0e:69:db:26: e5:d4:99:2c:a9:cc:f3:7b:04:32:90:6c:90:c1:35: 2b:34:3d:46:c8:6f:8f:3b:a3:7c:1b:d1:19:33:06: c1:32:b8:05:59:61:37:ec:20:95:12:d4:3b:3f:26: a9:08:02:4e:0b:6a:f4:79:05:b2:12:41:a7:6a:38: 87:c5:a9:45:73:9d:c2:19:e7:57:19:8d:56:ea:12: 01:f8:2a:cc:18:74:34:90:9a:06:90:05:24:93:f3: 6f:6b:58:79:78:ee:70:3d:0f:69:09:82:ec:b6:cf: fa:8a:02:b9:c6:1f:c2:b6:c7:a0:b5:d4:d5:8a:c7: 3f:93:8b:e1:90:e8:9f:12:e6:9a:88:bf:8c:a9:32: b2:a4:9a:f9:b1:19:59:b4:62:77:80:0a:a5:f0:27: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8F:4B:C3:49:03:61:D9:5F:18:9D:BD:C1:8A:14:C9:CD:B3:A2:6F X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0o9Lw0kDYdlfGJ29wYoUyc2zom8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.13.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:df:4a:14:b1:ee:2b:11:fd:da:44:b0:83:f7:15:14:3f:1f: 9c:fd:63:b1:28:d5:8c:85:78:8f:fa:a2:5f:79:2b:03:c0:69: ca:45:f0:eb:e0:51:82:e8:6f:5c:17:2a:ca:1c:79:c7:aa:c4: c7:49:88:66:24:c2:f7:7f:8f:84:7c:6a:5b:a1:9e:a8:58:fc: 99:16:c3:11:33:ea:1c:b1:d1:64:87:cb:b1:e7:35:ad:c2:d1: 54:ca:9d:42:e5:d6:c0:b8:0e:0c:e3:cb:05:0d:d3:02:66:84: 52:1c:77:f7:5e:ee:3d:a7:fa:0b:f2:d3:86:ff:6d:11:59:44: f7:1c:f4:a6:4c:7b:53:d2:cc:42:6b:aa:8e:4d:63:32:af:06: d5:39:49:60:de:9c:cc:7b:c1:21:e0:dc:e0:c8:64:cd:5e:5b: 54:7c:e0:89:44:df:fd:6b:70:ba:db:f2:12:c6:ad:d6:ac:fa: d6:72:2d:e3:a7:04:af:5e:29:75:fb:f4:f7:85:f9:10:11:85: 77:3f:ff:2e:94:bd:7c:d9:23:8b:af:e0:32:93:b4:2e:df:a8: 3d:19:4d:3a:f0:86:77:94:2e:16:70:55:f8:97:d2:a5:8f:91: 14:4b:0f:3f:95:22:d3:da:f6:2f:96:2d:66:91:2f:bb:bc:eb: d8:68:7c:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Y1j6RTbmWjFGT+TYgPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjhmNGJjMzQ5MDM2MWQ5NWYxODlkYmRjMThhMTRjOWNkYjNhMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1uHgz06z7hhdoSo6k2AYWhxzidl /wnpvosL/x/u8fXZ3hOwsjET9JqDpU2odIZt0zKunrKu8SV82GQ6ybryCDR1KoLU 96Mcjjs6RN52iNN/Amx5XW7aeZH7DXYS8LjbKxbcIQ5p2ybl1JksqczzewQykGyQ wTUrND1GyG+PO6N8G9EZMwbBMrgFWWE37CCVEtQ7PyapCAJOC2r0eQWyEkGnajiH xalFc53CGedXGY1W6hIB+CrMGHQ0kJoGkAUkk/Nva1h5eO5wPQ9pCYLsts/6igK5 xh/CtsegtdTVisc/k4vhkOifEuaaiL+MqTKypJr5sRlZtGJ3gAql8Cf19wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKPS8NJA2HZXxidvcGKFMnNs6JvMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvMG85THcwa0RZZGxmR0oyOXdZb1V5YzJ6b204LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbsNMA0G CSqGSIb3DQEBCwUAA4IBAQAt30oUse4rEf3aRLCD9xUUPx+c/WOxKNWMhXiP+qJf eSsDwGnKRfDr4FGC6G9cFyrKHHnHqsTHSYhmJML3f4+EfGpboZ6oWPyZFsMRM+oc sdFkh8ux5zWtwtFUyp1C5dbAuA4M48sFDdMCZoRSHHf3Xu49p/oL8tOG/20RWUT3 HPSmTHtT0sxCa6qOTWMyrwbVOUlg3pzMe8Eh4NzgyGTNXltUfOCJRN/9a3C62/IS xq3WrPrWci3jpwSvXil1+/T3hfkQEYV3P/8ulL182SOLr+Ayk7Qu36g9GU068IZ3 lC4WcFX4l9Klj5EUSw8/lSLT2vYvli1mkS+7vOvYaHxf -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:33 2026 by rpki-client