This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/sQcdal7FL9sPoCwGgqBEe74MjYs.roa File: sQcdal7FL9sPoCwGgqBEe74MjYs.roa (raw, json) Hash identifier: 38/+W5KtwZflyziocQUIiNPWgWXpqNWvo2kPETtHdRY= Subject key identifier: B1:07:1D:6A:5E:C5:2F:DB:0F:A0:2C:06:82:A0:44:7B:BE:0C:8D:8B Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED81093C40760828B075BC8A810DA3 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/sQcdal7FL9sPoCwGgqBEe74MjYs.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41280 IP address blocks: 85.187.244.0/22 maxlen: 22 151.237.24.0/24 maxlen: 24 151.237.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:81:09:3c:40:76:08:28:b0:75:bc:8a:81:0d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1071d6a5ec52fdb0fa02c0682a0447bbe0c8d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:11:df:21:a6:95:06:ca:fa:ed:f9:72:a8: 81:8f:0d:4a:ab:0d:4a:10:af:e4:8b:46:1c:9a:1a: c5:0e:73:3c:4f:87:39:0c:35:1d:3c:a5:af:c7:42: d9:d6:2e:03:28:f0:44:d7:54:8f:37:53:8a:bd:04: cf:cc:94:ab:c2:76:11:80:c1:2a:39:83:f8:34:62: 3a:25:a5:91:a2:31:01:a6:ce:d5:ce:c2:b2:58:75: bc:d0:f6:b2:92:60:fe:28:63:bd:8f:76:6d:be:3c: d1:10:7d:ab:0a:44:55:aa:62:e8:c4:3e:ad:ea:8f: 51:e3:96:98:ee:8c:a2:84:32:e9:59:74:5b:f9:be: 6e:0d:9f:1d:30:58:cb:14:de:fb:e9:b7:75:de:78: 3a:8c:23:5a:53:17:08:a3:a9:3e:8d:8c:94:7f:b1: 60:c5:9c:a8:aa:6e:6d:b4:49:1a:7e:87:13:ce:84: 08:96:91:82:c0:a1:7b:1d:fc:c4:01:4a:15:ed:15: 5c:37:23:aa:69:a1:b9:28:ce:35:d8:ec:31:2b:95: d2:9e:47:ed:c0:ce:42:dd:27:f3:5f:c3:e2:83:bb: 50:8f:7f:c9:35:33:fb:aa:93:1c:17:ef:d0:26:2e: ec:00:7f:1b:86:7a:c8:ec:58:62:0c:79:7b:8e:4d: 1c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:07:1D:6A:5E:C5:2F:DB:0F:A0:2C:06:82:A0:44:7B:BE:0C:8D:8B X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/sQcdal7FL9sPoCwGgqBEe74MjYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.244.0/22 151.237.24.0/24 151.237.26.0/24 Signature Algorithm: sha256WithRSAEncryption 64:a7:d1:f1:2b:f0:7c:11:7f:33:c9:34:20:4c:b7:93:da:13: 67:0f:6d:3d:a2:f6:bc:b7:5d:62:a7:f1:26:7a:07:a8:0d:86: e8:68:5f:c8:71:c7:31:00:83:fe:33:e0:27:5c:5f:32:f2:58: e5:60:05:b2:ff:cc:2d:fe:d9:41:63:ed:13:d2:c4:e8:64:fb: a7:d9:f3:45:67:6a:d8:c4:13:bd:9e:1b:56:87:73:19:e5:d2: 5f:9d:42:d1:b1:89:29:4d:0b:8b:e5:7f:90:36:6d:15:80:89: 03:58:47:62:9a:48:04:5c:a8:d5:58:b3:72:e7:e6:4c:e8:4d: 47:4f:6b:b7:7f:d2:de:36:16:eb:25:f6:4d:c8:3f:fc:d7:1d: a4:0c:82:30:4a:b7:2c:fe:4a:84:bd:fc:a8:05:51:e6:4e:e6: 7f:d0:46:93:97:2f:c7:50:e8:4d:3f:8f:86:a0:86:61:e0:1d: 9c:7d:08:39:4c:35:6e:c9:b8:dd:24:46:27:1f:44:c0:7e:f1: ff:44:06:5b:07:1d:25:5d:ff:a6:31:bc:ba:5a:61:dc:19:eb: f1:59:1d:65:39:c2:c7:b0:43:b0:dc:94:1a:d8:c9:73:00:40: ab:c9:05:ce:99:51:d5:55:d7:05:77:68:b2:4f:b1:6e:ad:be: a6:d4:cd:7b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87YEJPEB2CCiwdbyKgQ2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTA3MWQ2YTVlYzUyZmRiMGZhMDJjMDY4MmEwNDQ3YmJlMGM4ZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB4R3yGmlQbK+u35cqiBjw1Kqw1K EK/ki0YcmhrFDnM8T4c5DDUdPKWvx0LZ1i4DKPBE11SPN1OKvQTPzJSrwnYRgMEq OYP4NGI6JaWRojEBps7VzsKyWHW80PaykmD+KGO9j3ZtvjzREH2rCkRVqmLoxD6t 6o9R45aY7oyihDLpWXRb+b5uDZ8dMFjLFN776bd13ng6jCNaUxcIo6k+jYyUf7Fg xZyoqm5ttEkafocTzoQIlpGCwKF7HfzEAUoV7RVcNyOqaaG5KM412OwxK5XSnkft wM5C3SfzX8Pig7tQj3/JNTP7qpMcF+/QJi7sAH8bhnrI7FhiDHl7jk0cYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLEHHWpexS/bD6AsBoKgRHu+DI2LMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvc1FjZGFsN0ZMOXNQb0N3R2dxQkVlNzRNallzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVbv0AwQA l+0YAwQAl+0aMA0GCSqGSIb3DQEBCwUAA4IBAQBkp9HxK/B8EX8zyTQgTLeT2hNn D209ova8t11ip/EmegeoDYboaF/IcccxAIP+M+AnXF8y8ljlYAWy/8wt/tlBY+0T 0sToZPun2fNFZ2rYxBO9nhtWh3MZ5dJfnULRsYkpTQuL5X+QNm0VgIkDWEdimkgE XKjVWLNy5+ZM6E1HT2u3f9LeNhbrJfZNyD/81x2kDIIwSrcs/kqEvfyoBVHmTuZ/ 0EaTly/HUOhNP4+GoIZh4B2cfQg5TDVuybjdJEYnH0TAfvH/RAZbBx0lXf+mMby6 WmHcGevxWR1lOcLHsEOw3JQa2MlzAECryQXOmVHVVdcFd2iyT7Furb6m1M17 -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:32 2026 by rpki-client