This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G0ma9CsDdSvHi0IS4gmmDD7Et2Y.roa File: G0ma9CsDdSvHi0IS4gmmDD7Et2Y.roa (raw, json) Hash identifier: rnOVHL8CzfDzL1AjH9eIc8KBikir17C0voUG58ezEDs= Subject key identifier: 1B:49:9A:F4:2B:03:75:2B:C7:8B:42:12:E2:09:A6:0C:3E:C4:B7:66 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED90E9A18C08CBAC412EAEC8C54DA7 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G0ma9CsDdSvHi0IS4gmmDD7Et2Y.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207879 IP address blocks: 85.187.45.0/24 maxlen: 24 185.242.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:90:e9:a1:8c:08:cb:ac:41:2e:ae:c8:c5:4d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b499af42b03752bc78b4212e209a60c3ec4b766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:b3:8a:af:bd:01:c0:f3:8e:d7:fb:c1:17: dd:6b:24:0d:bd:be:aa:6b:30:df:ac:bf:da:49:50: 12:79:54:b5:b8:56:de:71:43:f0:1e:e4:31:7d:d0: 92:1a:8f:6f:fe:3c:4d:f5:1b:ce:c5:70:96:77:c4: e5:60:62:55:4b:09:30:32:23:b6:c6:cd:94:11:8b: 8d:db:f1:03:f5:5d:5e:c5:de:3c:4e:f3:1a:00:10: 31:45:83:80:10:ff:d8:ab:cc:7a:69:b3:32:ac:15: b8:1b:56:22:0a:34:4c:19:a7:5d:53:4f:1a:1c:50: 71:68:ed:3b:29:ea:a6:8c:45:14:e7:ae:69:b8:ee: 42:8f:1b:b3:d5:b6:e6:ed:90:29:9b:5e:ae:5e:2d: 45:94:e6:6f:2f:52:54:16:d9:05:4c:40:5b:9d:e6: 1e:d9:26:a3:65:5e:47:80:9c:73:d9:ce:d7:a0:c7: 56:a2:5a:64:fe:44:9a:ab:4a:31:d1:5b:99:bd:33: ad:cc:19:30:d1:5b:1d:5e:9d:5f:86:f0:c8:ac:b2: f0:b2:1f:a5:30:2e:7b:1a:de:69:b9:29:63:4b:03: 7e:d5:5d:3d:2a:4c:c4:e1:6c:ec:8d:1e:2c:ff:97: 12:61:85:84:4e:bb:31:ef:ad:96:5c:84:5d:78:c1: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:49:9A:F4:2B:03:75:2B:C7:8B:42:12:E2:09:A6:0C:3E:C4:B7:66 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G0ma9CsDdSvHi0IS4gmmDD7Et2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.45.0/24 185.242.171.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:71:1a:10:b8:84:d0:de:f5:09:43:f7:7f:8e:8f:d9:de:30: d8:57:b2:c3:f6:f6:b7:ab:4b:9a:e3:51:e8:85:21:f4:df:b5: 78:b9:bc:4b:22:6e:94:be:e7:6c:ff:da:c8:b2:0b:c2:28:0f: d0:bd:59:00:eb:e3:65:df:ef:54:8f:87:62:ee:29:c9:14:b7: dd:90:b7:05:d6:50:76:00:09:d3:ac:45:02:58:d8:78:3f:7c: b7:ef:d7:36:28:55:4c:c8:3d:9a:d3:0f:13:72:3f:97:13:68: 92:92:51:16:b2:09:cd:d0:9e:fb:ab:6e:64:4a:aa:05:33:03: 61:a8:43:20:69:cc:54:5e:e7:32:2f:96:a4:12:f1:33:56:18: 38:b6:20:22:2a:86:3d:65:6e:28:26:66:f9:93:1a:a5:38:2a: 83:59:f8:46:d0:48:6b:4b:13:6f:df:04:d6:ee:cf:4e:8d:53: b2:d1:98:db:a5:50:64:b9:62:34:46:d0:22:fd:b9:e2:71:9e: 1b:26:05:47:aa:9d:a0:42:04:3d:25:78:7d:a2:22:4f:c6:4a: 06:d1:f7:a0:e7:73:d7:2a:c1:68:87:b1:7b:cb:3c:e3:09:3a: 48:6c:3e:0f:0a:8d:32:99:3b:4d:f5:7f:42:93:9c:00:8d:44: 72:9f:6b:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ZDpoYwIy6xBLq7IxU2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjQ5OWFmNDJiMDM3NTJiYzc4YjQyMTJlMjA5YTYwYzNlYzRiNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8+ziq+9AcDzjtf7wRfdayQNvb6q azDfrL/aSVASeVS1uFbecUPwHuQxfdCSGo9v/jxN9RvOxXCWd8TlYGJVSwkwMiO2 xs2UEYuN2/ED9V1exd48TvMaABAxRYOAEP/Yq8x6abMyrBW4G1YiCjRMGaddU08a HFBxaO07KeqmjEUU565puO5Cjxuz1bbm7ZApm16uXi1FlOZvL1JUFtkFTEBbneYe 2SajZV5HgJxz2c7XoMdWolpk/kSaq0ox0VuZvTOtzBkw0VsdXp1fhvDIrLLwsh+l MC57Gt5puSljSwN+1V09KkzE4WzsjR4s/5cSYYWETrsx762WXIRdeMG/7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBtJmvQrA3Urx4tCEuIJpgw+xLdmMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvRzBtYTlDc0RkU3ZIaTBJUzRnbW1ERDdFdDJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVbstAwQA ufKrMA0GCSqGSIb3DQEBCwUAA4IBAQBucRoQuITQ3vUJQ/d/jo/Z3jDYV7LD9va3 q0ua41HohSH037V4ubxLIm6Uvuds/9rIsgvCKA/QvVkA6+Nl3+9Uj4di7inJFLfd kLcF1lB2AAnTrEUCWNh4P3y379c2KFVMyD2a0w8Tcj+XE2iSklEWsgnN0J77q25k SqoFMwNhqEMgacxUXucyL5akEvEzVhg4tiAiKoY9ZW4oJmb5kxqlOCqDWfhG0Ehr SxNv3wTW7s9OjVOy0ZjbpVBkuWI0RtAi/bnicZ4bJgVHqp2gQgQ9JXh9oiJPxkoG 0feg53PXKsFoh7F7yzzjCTpIbD4PCo0ymTtN9X9Ck5wAjURyn2tn -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:14 2026 by rpki-client