This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xph8qFaPT8h84DuqzAdcK_YZB0g.roa File: xph8qFaPT8h84DuqzAdcK_YZB0g.roa (raw, json) Hash identifier: s8aCGZ/D7LJh8NIG3TfL891h0yRKDba66+N1I5CEjyA= Subject key identifier: C6:98:7C:A8:56:8F:4F:C8:7C:E0:3B:AA:CC:07:5C:2B:F6:19:07:48 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED7CB03EEDBC1FB6851F8BED171DA2 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xph8qFaPT8h84DuqzAdcK_YZB0g.roa Signing time: Fri 02 Jan 2026 04:18:17 +0000 ROA not before: Fri 02 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31287 IP address blocks: 46.55.252.0/22 maxlen: 22 46.55.252.0/24 maxlen: 24 46.55.253.0/24 maxlen: 24 46.55.254.0/24 maxlen: 24 77.78.152.0/21 maxlen: 21 77.78.153.0/24 maxlen: 24 77.78.154.0/24 maxlen: 24 77.78.159.0/24 maxlen: 24 80.72.64.0/24 maxlen: 24 80.72.72.0/24 maxlen: 24 85.187.3.0/24 maxlen: 24 85.187.4.0/24 maxlen: 24 85.187.6.0/24 maxlen: 24 85.187.8.0/24 maxlen: 24 85.187.10.0/23 maxlen: 23 85.187.15.0/24 maxlen: 24 85.187.18.0/24 maxlen: 24 85.187.20.0/24 maxlen: 24 85.187.42.0/24 maxlen: 24 85.187.50.0/24 maxlen: 24 85.187.62.0/24 maxlen: 24 85.187.63.0/24 maxlen: 24 85.187.184.0/23 maxlen: 23 85.187.222.0/24 maxlen: 24 85.187.232.0/24 maxlen: 24 85.187.248.0/24 maxlen: 24 151.237.29.0/24 maxlen: 24 151.237.91.0/24 maxlen: 24 151.237.92.0/24 maxlen: 24 151.237.93.0/24 maxlen: 24 151.237.128.0/24 maxlen: 24 185.46.160.0/22 maxlen: 22 185.46.163.0/24 maxlen: 24 185.72.58.0/24 maxlen: 24 185.200.40.0/22 maxlen: 22 195.85.215.0/24 maxlen: 24 2a01:9e40::/32 maxlen: 32 2a03:b540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7c:b0:3e:ed:bc:1f:b6:85:1f:8b:ed:17:1d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6987ca8568f4fc87ce03baacc075c2bf6190748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8d:ea:c6:6c:2c:80:82:eb:94:aa:8e:a5:24: 3a:42:cc:7d:79:7e:f9:0e:f2:1f:2a:f6:14:96:96: a2:de:c4:41:a9:67:1f:8e:28:fd:b1:f2:03:dd:0b: 0c:45:ba:56:f8:ca:7c:31:ff:5f:6a:fd:4b:06:a0: c8:ea:0d:b8:24:d2:75:96:bf:c4:be:01:2d:f8:2c: 26:88:f7:d3:f0:6c:04:cb:a8:02:5f:f6:44:1a:13: d5:7a:b0:50:bf:ff:16:70:c7:73:f2:02:92:33:98: 26:f9:3c:ac:39:a2:76:f1:62:6e:8d:27:dc:ae:84: 5f:d4:38:c3:0d:89:0c:97:9c:52:99:22:da:50:51: 53:bc:7a:50:85:2f:50:21:a2:38:30:22:d0:1a:57: 5a:11:bc:ce:1f:36:36:13:b7:86:1e:50:48:31:9f: 09:06:fb:72:c2:fe:ce:79:4d:d6:92:63:db:e3:91: 7e:60:77:79:1f:11:34:c9:ea:8f:d1:7c:c2:47:cf: 87:72:49:46:96:2c:99:c3:ea:b8:d5:a5:b9:3e:96: 79:ad:8b:52:04:dd:be:a6:5a:ef:bc:5f:5d:4c:1c: 73:e2:a6:e8:bd:e3:84:18:60:25:26:ed:68:4c:a6: 33:a5:67:a0:10:c6:7b:da:cb:b3:53:05:e8:a6:c1: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:98:7C:A8:56:8F:4F:C8:7C:E0:3B:AA:CC:07:5C:2B:F6:19:07:48 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xph8qFaPT8h84DuqzAdcK_YZB0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.55.252.0/22 77.78.152.0/21 80.72.64.0/24 80.72.72.0/24 85.187.3.0-85.187.4.255 85.187.6.0/24 85.187.8.0/24 85.187.10.0/23 85.187.15.0/24 85.187.18.0/24 85.187.20.0/24 85.187.42.0/24 85.187.50.0/24 85.187.62.0/23 85.187.184.0/23 85.187.222.0/24 85.187.232.0/24 85.187.248.0/24 151.237.29.0/24 151.237.91.0-151.237.93.255 151.237.128.0/24 185.46.160.0/22 185.72.58.0/24 185.200.40.0/22 195.85.215.0/24 IPv6: 2a01:9e40::/32 2a03:b540::/32 Signature Algorithm: sha256WithRSAEncryption 1d:0d:14:80:9f:ac:2e:36:75:f8:05:26:e8:3a:42:e3:ec:df: 86:e9:5a:03:4c:32:b7:49:44:a7:94:f7:88:b9:e9:f5:cb:4d: 64:4d:6c:96:89:70:46:7d:2c:cb:d1:bd:10:25:cd:62:75:77: 4a:4e:87:0f:ed:35:c7:68:d3:1c:04:1f:0d:e2:14:df:10:58: 6d:c8:6a:28:8b:cd:df:81:d3:f1:12:30:66:d1:fe:7e:03:78: c4:4e:1a:d1:49:5a:8b:80:2f:65:ba:d0:16:7b:76:da:5a:67: f0:d2:f2:8a:81:5e:62:1a:6c:cd:ea:9c:4b:db:4d:9c:2a:7b: f6:9e:42:db:78:c1:46:f2:2f:c7:3d:02:b0:ea:4f:3f:3d:97: b3:3c:31:da:dc:ac:e0:84:e7:57:50:6a:a1:8a:9d:0c:43:22: 18:1e:b6:df:8c:05:d3:84:23:44:ea:e1:fc:c3:9e:73:43:64: 38:a0:00:42:b5:00:7e:6b:8d:43:c6:a4:87:5c:31:20:c7:52: 07:84:ee:a3:df:08:8d:7c:90:1d:12:db:43:ef:af:f7:9a:84: cf:9e:47:79:a7:b7:fc:74:f5:d1:e3:e6:c7:5a:69:1d:29:d7: a0:d2:09:52:94:91:fc:ca:90:b2:5d:28:fc:8e:58:1a:07:36: fb:8d:80:14 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt87XywPu28H7aFH4vtFx2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjk4N2NhODU2OGY0ZmM4N2NlMDNiYWFjYzA3NWMyYmY2MTkwNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh43qxmwsgILrlKqOpSQ6Qsx9eX75 DvIfKvYUlpai3sRBqWcfjij9sfID3QsMRbpW+Mp8Mf9fav1LBqDI6g24JNJ1lr/E vgEt+CwmiPfT8GwEy6gCX/ZEGhPVerBQv/8WcMdz8gKSM5gm+TysOaJ28WJujSfc roRf1DjDDYkMl5xSmSLaUFFTvHpQhS9QIaI4MCLQGldaEbzOHzY2E7eGHlBIMZ8J Bvtywv7OeU3WkmPb45F+YHd5HxE0yeqP0XzCR8+HcklGliyZw+q41aW5PpZ5rYtS BN2+plrvvF9dTBxz4qboveOEGGAlJu1oTKYzpWegEMZ72suzUwXopsFr9wIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFMaYfKhWj0/IfOA7qswHXCv2GQdIMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEveHBoOHFGYVBUOGg4NER1cXpBZGNLX1laQjBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBrQQCAAEwgaYDBAIu N/wDBANNTpgDBABQSEADBABQSEgwDAMEAFW7AwMEAFW7BAMEAFW7BgMEAFW7CAME AVW7CgMEAFW7DwMEAFW7EgMEAFW7FAMEAFW7KgMEAFW7MgMEAVW7PgMEAVW7uAME AFW73gMEAFW76AMEAFW7+AMEAJftHTAMAwQAl+1bAwQBl+1cAwQAl+2AAwQCuS6g AwQAuUg6AwQCucgoAwQAw1XXMBQEAgACMA4DBQAqAZ5AAwUAKgO1QDANBgkqhkiG 9w0BAQsFAAOCAQEAHQ0UgJ+sLjZ1+AUm6DpC4+zfhulaA0wyt0lEp5T3iLnp9ctN ZE1slolwRn0sy9G9ECXNYnV3Sk6HD+01x2jTHAQfDeIU3xBYbchqKIvN34HT8RIw ZtH+fgN4xE4a0Ulai4AvZbrQFnt22lpn8NLyioFeYhpszeqcS9tNnCp79p5C23jB RvIvxz0CsOpPPz2Xszwx2tys4ITnV1BqoYqdDEMiGB6234wF04QjROrh/MOec0Nk OKAAQrUAfmuNQ8akh1wxIMdSB4Tuo98IjXyQHRLbQ++v95qEz55Heae3/HT10ePm x1ppHSnXoNIJUpSR/MqQsl0o/I5YGgc2+42AFA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:03 2026 by rpki-client