This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/UpF_15q4vdNyZE6ZoTxzXEif_wQ.roa File: UpF_15q4vdNyZE6ZoTxzXEif_wQ.roa (raw, json) Hash identifier: ZRj0TfEEIlaCTZI476/fNtISJ9n9/xFSHfysagr2srA= Subject key identifier: 52:91:7F:D7:9A:B8:BD:D3:72:64:4E:99:A1:3C:73:5C:48:9F:FF:04 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED89D926887E9FAF9EC679411F81C2 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/UpF_15q4vdNyZE6ZoTxzXEif_wQ.roa Signing time: Fri 02 Jan 2026 04:18:20 +0000 ROA not before: Fri 02 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62386 IP address blocks: 85.187.234.0/23 maxlen: 23 85.187.234.0/24 maxlen: 24 85.187.235.0/24 maxlen: 24 151.237.36.0/22 maxlen: 22 151.237.36.0/24 maxlen: 24 151.237.37.0/24 maxlen: 24 151.237.38.0/24 maxlen: 24 151.237.39.0/24 maxlen: 24 151.237.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:89:d9:26:88:7e:9f:af:9e:c6:79:41:1f:81:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52917fd79ab8bdd372644e99a13c735c489fff04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dd:fa:85:e2:76:07:80:d4:6d:af:dc:5e:05: a5:73:ec:9c:bf:f0:2c:08:e4:ad:f7:2c:58:7c:35: d6:f9:78:39:78:8a:a4:3c:ff:9a:e5:d9:e7:f0:b3: ac:21:dc:79:5f:78:f2:b1:f9:3c:5c:31:da:61:19: 7a:9d:d2:5b:17:59:d2:ba:e5:e6:ff:35:d6:55:87: 30:19:39:1a:fb:a9:35:55:d0:47:72:a2:77:f7:2d: 19:4f:17:d6:cc:97:4d:d8:d7:85:c8:20:a8:3b:a5: 9b:e5:35:2c:dd:85:58:ca:74:98:0a:b2:97:f8:89: a3:63:f6:00:eb:27:fb:fe:19:88:01:c7:80:1f:80: 62:6d:a0:77:b4:69:57:d1:58:03:34:be:c2:9f:30: 0c:d2:e1:15:8f:b0:13:a7:b1:42:66:26:54:54:48: f4:3c:7d:f9:9c:02:a0:41:3c:1e:b9:24:66:42:1c: 23:4b:63:2d:1c:ca:5d:76:2c:87:b5:57:38:bf:a6: e6:24:85:7e:73:f0:32:37:81:32:41:c1:f0:39:49: 77:82:20:62:f3:39:e1:b3:c8:41:75:2d:c4:55:cf: f7:e2:55:a8:fc:cc:35:6f:4d:28:8a:8a:72:18:d0: 53:03:7c:2d:5f:60:62:b1:55:5d:ac:3e:bf:ab:11: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:91:7F:D7:9A:B8:BD:D3:72:64:4E:99:A1:3C:73:5C:48:9F:FF:04 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/UpF_15q4vdNyZE6ZoTxzXEif_wQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.234.0/23 151.237.36.0/22 151.237.63.0/24 Signature Algorithm: sha256WithRSAEncryption 18:d8:9b:47:c5:f4:fd:3a:68:b2:d3:ab:76:64:99:61:3c:62: 9f:d3:5c:a9:61:dc:6f:a7:8a:2b:34:b9:86:3c:68:cc:0f:34: d5:ae:bf:15:f6:b9:2b:25:f7:e0:90:88:de:ad:84:ac:a3:d0: f2:f9:27:55:68:30:88:ea:c3:d1:62:cf:1f:fd:d4:f1:d7:80: 0e:53:28:ab:93:fc:6f:8d:23:f0:20:37:57:76:cf:4c:e1:ba: d4:c9:28:e6:13:f9:1e:b5:8d:6b:6c:e4:a7:9f:f1:f8:93:47: ce:de:ea:57:9a:5a:aa:bd:b5:19:0c:1f:fb:7c:21:04:5c:31: d2:39:b7:1a:5f:81:1f:8a:b4:80:b9:bb:09:25:db:2a:7f:89: 47:2a:ef:91:14:40:d6:d5:6a:9d:eb:48:4f:0c:02:43:df:1c: 49:85:c6:7b:db:69:5a:00:f2:6d:bf:27:23:74:8e:09:66:e4: 7e:fe:b2:e1:3e:2f:f4:d8:eb:d0:d8:8c:e0:37:79:90:be:7d: 21:52:d0:46:1d:4b:d3:6c:15:b2:b2:f9:16:ed:ec:1a:fc:18: fb:74:10:bd:7d:b8:e7:e3:1a:28:5e:b4:6d:39:4a:bd:dc:42: f6:68:3d:7a:18:ac:60:b4:54:a2:58:f3:89:52:b8:26:14:4e: 07:f4:2d:6e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87YnZJoh+n6+exnlBH4HCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjkxN2ZkNzlhYjhiZGQzNzI2NDRlOTlhMTNjNzM1YzQ4OWZmZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8936heJ2B4DUba/cXgWlc+ycv/As COSt9yxYfDXW+Xg5eIqkPP+a5dnn8LOsIdx5X3jysfk8XDHaYRl6ndJbF1nSuuXm /zXWVYcwGTka+6k1VdBHcqJ39y0ZTxfWzJdN2NeFyCCoO6Wb5TUs3YVYynSYCrKX +ImjY/YA6yf7/hmIAceAH4BibaB3tGlX0VgDNL7CnzAM0uEVj7ATp7FCZiZUVEj0 PH35nAKgQTweuSRmQhwjS2MtHMpddiyHtVc4v6bmJIV+c/AyN4EyQcHwOUl3giBi 8znhs8hBdS3EVc/34lWo/Mw1b00oiopyGNBTA3wtX2BisVVdrD6/qxGbxQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFKRf9eauL3TcmROmaE8c1xIn/8EMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvVXBGXzE1cTR2ZE55WkU2Wm9UeHpYRWlmX3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVbvqAwQC l+0kAwQAl+0/MA0GCSqGSIb3DQEBCwUAA4IBAQAY2JtHxfT9Omiy06t2ZJlhPGKf 01ypYdxvp4orNLmGPGjMDzTVrr8V9rkrJffgkIjerYSso9Dy+SdVaDCI6sPRYs8f /dTx14AOUyirk/xvjSPwIDdXds9M4brUySjmE/ketY1rbOSnn/H4k0fO3upXmlqq vbUZDB/7fCEEXDHSObcaX4EfirSAubsJJdsqf4lHKu+RFEDW1Wqd60hPDAJD3xxJ hcZ722laAPJtvycjdI4JZuR+/rLhPi/02OvQ2IzgN3mQvn0hUtBGHUvTbBWysvkW 7ewa/Bj7dBC9fbjn4xooXrRtOUq93EL2aD16GKxgtFSiWPOJUrgmFE4H9C1u -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:46 2026 by rpki-client